Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft
File:                     Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft (raw, json)
Hash identifier:          m0Q0Ijey2x2gupki4Tgf4luLoNdC7VbbqipX+VUUENo=
Subject key identifier:   FC:80:07:84:6F:A4:C1:AB:AE:06:70:26:E0:93:2A:57:C3:F5:2C:C7
Authority key identifier: 3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F
Certificate issuer:       /CN=A91E6348/serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F
Certificate serial:       57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft
Manifest number:          55
Signing time:             Sat 17 Oct 2026 08:59:33 +0000
Manifest this update:     Sat 17 Oct 2026 08:59:33 +0000
Manifest next update:     Sat 24 Oct 2026 08:59:33 +0000
Files and hashes:         1: Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl (hash: YwB8ImUvS7VQCqrhB/WiRr0Gru2SmAec55cJrBxwN4A=)
                          2: 8001633A4A1711F1B9EC201DC9833773.roa (hash: lhGjTh8GIM3KbvxNCTcxjCnPO4S+tAUX/Zv2Xlq7F68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl
                          rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 08:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6348, serialNumber=3A3CB92F9996DC12FD6921A0D6F966231C98E68F
        Validity
            Not Before: Oct 17 08:59:33 2026 GMT
            Not After : Oct 24 08:59:33 2026 GMT
        Subject: CN=6ad338f5-b6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:82:60:f9:0b:15:86:c4:14:3c:30:59:75:
                    0a:83:2b:99:9a:f7:8a:02:dd:71:eb:88:41:42:ce:
                    67:cc:90:91:14:48:31:3c:62:40:dd:78:61:a3:82:
                    8f:fc:59:03:19:d2:c5:0b:d6:89:e2:5d:10:c9:ff:
                    0b:1c:b8:d0:3c:5e:40:50:1e:8c:34:a1:cf:51:fa:
                    b7:7f:af:54:cc:8c:24:cb:e8:4c:85:80:62:82:24:
                    12:9e:0c:d0:4d:90:7b:8f:69:e7:55:59:47:6d:90:
                    7a:41:96:ba:f3:c8:a3:2c:7a:ec:95:dd:2b:4f:ff:
                    86:32:17:26:ce:26:c3:c4:4e:0b:a0:36:7c:3b:16:
                    97:54:7a:02:77:4e:fd:03:b6:8d:8e:48:ba:61:01:
                    a5:de:79:80:cc:69:f9:6b:cc:e4:92:ec:16:e3:da:
                    50:a9:03:9a:52:a1:44:c2:7e:08:3e:b3:f2:54:32:
                    58:01:36:4f:30:a7:2c:61:d5:c1:bf:c2:d9:5d:47:
                    99:df:df:19:47:02:1f:a4:e5:86:4d:c2:c2:6c:0c:
                    f6:9e:24:c2:e6:ca:55:9d:69:a4:1e:c4:e8:0f:81:
                    64:89:fc:e4:d2:b6:bc:86:29:8e:1e:56:b0:e7:af:
                    35:0e:08:7a:9f:f3:ee:78:02:f4:6a:9d:06:5d:cf:
                    ae:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:80:07:84:6F:A4:C1:AB:AE:06:70:26:E0:93:2A:57:C3:F5:2C:C7
            X509v3 Authority Key Identifier:
                keyid:3A:3C:B9:2F:99:96:DC:12:FD:69:21:A0:D6:F9:66:23:1C:98:E6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6348/EC5D1B7E4A1611F1993B93F7C8833773/Ojy5L5mW3BL9aSGg1vlmIxyY5o8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:ae:c8:9f:69:47:5c:cd:15:6c:e4:07:1b:af:d7:af:0d:e7:
         83:67:fd:cf:6c:f9:c8:47:35:2c:f4:11:27:9c:ee:94:87:c0:
         f2:14:e8:28:29:72:37:8d:d0:8f:58:37:fa:f4:f2:81:cc:25:
         cf:d3:0b:02:6e:44:32:4a:0b:b9:30:99:23:14:7c:6f:89:b4:
         1c:cd:46:c7:0d:12:57:8a:f3:fa:63:7a:f4:f3:2c:3a:a0:eb:
         d1:21:dd:3b:b4:5d:d8:66:55:29:1c:5b:d5:06:81:63:90:52:
         d2:17:65:e7:cf:e4:3a:7f:40:a6:ee:0b:64:f2:ef:7c:79:72:
         d4:be:9d:40:3f:a2:0e:87:60:42:2a:df:5d:45:e1:07:c1:07:
         71:08:3e:68:53:a3:64:7c:56:ba:d7:4a:3e:e0:7d:58:69:99:
         de:6e:3f:89:30:08:29:30:63:f8:47:2e:23:16:60:4b:ce:b1:
         e5:a0:7f:86:dd:72:24:dc:4c:e8:8c:5c:0d:5f:2d:4e:6e:1a:
         1b:fe:ff:83:be:d2:4f:8c:1d:40:61:4a:82:5a:1a:6b:db:61:
         50:1e:9c:4a:5d:c7:ab:ca:c2:be:01:31:38:a5:fb:aa:59:86:
         7d:7f:51:af:c2:ae:d5:51:5b:b5:77:fd:f3:54:08:4e:29:b8:
         d9:66:c7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 10:56:48 2026 by rpki-client