Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
File:                     O6JVjKXxoDfZaW9WeugTZ8buNeY.mft (raw, json)
Hash identifier:          voxcqx/BX1/J0jam7kdqv5J8+8aDa28ItLSEOozM8As=
Subject key identifier:   BB:C5:66:B1:CE:74:F1:1B:E6:93:31:13:2F:9B:98:24:C2:BA:FB:42
Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Certificate issuer:       /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
Manifest number:          0144
Signing time:             Fri 25 Sep 2026 05:32:45 +0000
Manifest this update:     Fri 25 Sep 2026 05:32:44 +0000
Manifest next update:     Fri 02 Oct 2026 05:32:44 +0000
Files and hashes:         1: O6JVjKXxoDfZaW9WeugTZ8buNeY.crl (hash: g+tHoofAkmm/ThTqBWjy1eRofRpXCYCpG1GPaZ4NdRI=)
                          2: A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa (hash: d0vm5wncisSlyFIQNK+dAA18qYesSQU/iTYEX3JnVQc=)
                          3: 7229FDDCDC3D11F08C062F6F696F56BC.roa (hash: mO+BWuAvLE1cVLG5z10U+LtaeF9p3hAXhHEP7QtGd8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
                          rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
        Validity
            Not Before: Sep 25 05:32:44 2026 GMT
            Not After : Oct  2 05:32:44 2026 GMT
        Subject: CN=6ab6077d-43ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:94:a2:04:10:31:de:41:9c:ad:7a:c8:0d:
                    35:5c:3e:01:d2:53:7c:c2:77:b4:b1:68:0f:b2:d8:
                    ba:21:a5:9d:db:0f:05:01:83:bf:8b:7c:da:f8:17:
                    86:15:34:9a:40:10:32:99:f8:f1:c9:bb:45:26:c5:
                    9b:84:de:20:de:8f:e7:9d:97:65:85:f7:de:e3:a5:
                    0b:16:ac:08:0a:78:dd:67:87:2f:04:2b:fa:1c:5f:
                    75:ed:72:66:3b:00:cc:89:bd:15:e2:c5:26:99:55:
                    d7:e8:ad:43:da:ec:d7:f2:7f:9a:1e:0b:fc:cd:aa:
                    20:08:a1:31:6f:07:27:f4:be:d8:da:4c:ff:50:83:
                    e1:81:04:55:a5:38:32:f0:23:0a:b9:75:4e:22:33:
                    9a:b2:ab:36:cf:ca:b4:cb:2b:e2:fe:27:c5:36:cf:
                    c3:36:74:ac:5b:66:58:ed:65:6f:63:7d:25:c4:13:
                    b2:5c:b1:ff:9b:83:48:4c:a0:09:4e:50:92:bf:28:
                    fa:61:1e:7e:ff:80:88:75:2f:74:f0:12:a0:db:85:
                    4f:f9:4d:89:c9:d7:0f:67:e6:86:fd:a3:b0:f1:9c:
                    90:58:4e:bf:7e:19:22:02:c6:a9:46:f2:ce:12:22:
                    73:5a:a6:55:0b:e3:ee:0a:3a:fb:7f:f2:1e:eb:da:
                    4d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C5:66:B1:CE:74:F1:1B:E6:93:31:13:2F:9B:98:24:C2:BA:FB:42
            X509v3 Authority Key Identifier:
                keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:43:3f:60:ee:f9:aa:c3:60:2b:e3:e0:0b:70:1f:95:de:84:
         45:d2:25:b4:48:41:14:bd:c6:a7:bd:0e:d8:48:73:a4:fa:ad:
         80:61:47:95:2d:8c:ed:c4:20:11:34:35:b5:62:34:4a:38:bc:
         eb:9c:77:00:3d:bf:8c:13:c9:63:76:31:17:85:93:5b:01:5a:
         00:d4:04:d7:f4:fb:99:1b:82:14:7b:f0:ce:f9:26:90:c3:74:
         e6:cc:fb:4b:59:5b:b1:36:7b:de:7d:68:f8:db:a2:3e:19:30:
         81:69:3f:2e:15:cc:91:06:34:2f:7a:2d:ae:9d:17:50:be:0f:
         a5:e7:be:cd:bb:e4:fa:b5:27:55:f8:7b:62:64:32:2d:ba:66:
         b9:3e:c2:cb:79:3e:22:1b:be:de:1f:c6:da:3b:ff:88:83:92:
         b3:56:f4:f6:d4:eb:10:a8:0e:2d:de:ed:96:91:21:56:3d:4c:
         7c:88:b2:69:49:e5:9d:47:76:6b:bc:38:b0:ee:d8:aa:0a:49:
         b5:c5:86:8d:e8:41:0d:a1:26:5d:06:96:97:88:e9:90:70:f6:
         5e:74:e7:ac:9f:13:8d:1d:87:84:7a:8b:6e:f9:c6:4f:d6:62:
         67:f1:69:24:7a:cf:56:9b:65:3f:c8:39:46:ab:68:c8:e3:bb:
         63:32:71:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:02:44 2026 by rpki-client