Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
File:                     oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft (raw, json)
Hash identifier:          dAOgVjPSPOwoTLRApTfezQb3vJN5danV9KjjHRcj6yI=
Subject key identifier:   5B:10:44:98:50:EB:71:C2:EF:6E:58:5F:F2:E2:30:62:78:8C:46:DE
Authority key identifier: A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24
Certificate issuer:       /CN=A91E6A01/serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
Manifest number:          FB
Signing time:             Sun 11 Oct 2026 06:57:31 +0000
Manifest this update:     Sun 11 Oct 2026 06:57:31 +0000
Manifest next update:     Sun 18 Oct 2026 06:57:31 +0000
Files and hashes:         1: oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl (hash: 6JVgPTtIE6z/XHATODk+YOdaqFQbO3toZj9rF+LWwao=)
                          2: 041803705DEE11F0B3FA764DC4F9AE02.roa (hash: xuTjK+fWz73yqU/m4ZT9uQGoIAPUGqWFOmnzfiePcSo=)
                          3: 230AFEA45DEE11F0B0B1CF4DC4F9AE02.roa (hash: JA5c+7d2qZTIm69DCdbstQqBEizQ9Ks5KiXF+78kjhU=)
                          4: E57772525DED11F0B0B00C4DC4F9AE02.roa (hash: 53ZWjWlrVEqMyyvIGIAG0rSeNEbjukC62nS0Gg37TsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 06:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6A01, serialNumber=A05EC266B3C0BFD6CEB517100BE05C505B943624
        Validity
            Not Before: Oct 11 06:57:31 2026 GMT
            Not After : Oct 18 06:57:31 2026 GMT
        Subject: CN=6acb335b-d515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:84:9c:24:fe:9a:3c:a5:0b:9f:8b:9a:8f:
                    b4:10:63:8b:e1:2b:bb:84:43:31:20:a1:08:e2:c1:
                    0c:ad:23:8e:53:8b:3d:ee:e7:6d:10:32:7b:32:22:
                    e7:95:48:08:56:10:2b:83:64:aa:5c:0f:ce:05:38:
                    f1:f0:3d:ee:e4:9d:b9:1c:70:1f:21:c7:d1:19:7c:
                    e5:86:fe:23:20:4a:54:6c:3c:26:2f:ee:75:9e:98:
                    0b:98:0a:61:b3:f9:99:0a:c0:8b:43:1a:44:7f:95:
                    76:f8:97:03:0f:5c:8f:c6:b2:31:5b:11:86:77:e8:
                    bf:f2:de:27:b5:b8:09:6e:59:64:3f:32:47:f7:62:
                    04:fc:ce:fa:07:61:d2:fb:8f:b8:ef:79:41:00:8d:
                    60:ca:00:30:5f:48:4c:8a:0f:c4:92:da:fe:88:de:
                    00:23:21:43:30:51:90:d9:c0:27:da:46:45:26:cd:
                    85:bc:da:e9:51:47:4b:e4:c8:c0:b2:65:ed:85:82:
                    f0:74:60:83:79:af:ab:bd:dc:34:d5:ea:9b:ed:7d:
                    03:b5:52:f4:13:9b:16:d6:81:e6:88:76:40:f9:b0:
                    3c:ce:cf:25:b2:5d:a3:cf:21:bd:d7:43:bb:0b:a8:
                    0d:e9:b3:79:70:a4:35:b6:04:dd:d1:d7:bc:2e:e7:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:10:44:98:50:EB:71:C2:EF:6E:58:5F:F2:E2:30:62:78:8C:46:DE
            X509v3 Authority Key Identifier:
                keyid:A0:5E:C2:66:B3:C0:BF:D6:CE:B5:17:10:0B:E0:5C:50:5B:94:36:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6A01/F64D3B2457A911F08EE42609C4F9AE02/oF7CZrPAv9bOtRcQC-BcUFuUNiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:0e:82:00:ae:fd:2a:7e:77:1c:91:99:9b:c4:8c:7d:e0:96:
         05:e0:54:62:8c:f0:e7:67:a2:92:68:b3:d6:3f:7d:5e:c4:fd:
         6a:eb:bc:f5:05:c7:cf:4d:36:28:13:1d:b6:48:80:bc:bd:38:
         09:94:4a:c8:f7:68:25:f9:92:82:80:3f:46:e6:96:d7:61:5b:
         c6:82:f0:77:d4:dc:f1:8e:96:40:d0:a2:09:7a:ad:22:86:05:
         ec:61:06:e0:e9:93:53:65:86:04:33:a3:72:f1:3a:fd:97:16:
         4b:35:f8:07:07:08:e4:ab:f9:3b:b2:5e:62:88:3d:ca:83:70:
         fa:48:bb:41:8f:b0:ac:11:77:10:d8:da:a4:67:be:6e:2c:82:
         b6:a9:f5:12:08:83:b8:a7:0d:c8:8c:62:8c:79:97:de:5b:f9:
         92:9c:2f:13:02:1d:74:54:7c:53:b9:c3:b1:ba:6a:fc:f0:79:
         00:d5:5a:87:31:2a:19:e2:3d:5f:73:1d:74:6b:b4:79:64:79:
         30:54:bc:e7:29:e5:cf:1f:dc:88:c9:40:a2:6b:97:a2:3e:06:
         a5:a6:9c:bf:75:a2:29:e6:dc:ed:31:44:b1:0a:ba:b4:20:e8:
         4c:51:04:41:85:e5:16:fe:2d:ae:58:93:54:82:0d:1a:e3:fb:
         b6:97:a2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:37:28 2026 by rpki-client