Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
File:                     oWMO_rVmVc-hMzMLmNs2GS3evfw.mft (raw, json)
Hash identifier:          71nGtedGJ9WQO+Z9xiqMRfU7WGxZo/nx9kjrB2e2NB0=
Subject key identifier:   E0:5E:98:8E:D8:B4:48:D0:D0:F8:46:70:EF:A7:12:C8:E3:51:FD:13
Authority key identifier: A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC
Certificate issuer:       /CN=A91E7672/serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
Certificate serial:       04C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
Manifest number:          04BE
Signing time:             Tue 22 Sep 2026 23:30:36 +0000
Manifest this update:     Tue 22 Sep 2026 23:30:36 +0000
Manifest next update:     Tue 29 Sep 2026 23:30:36 +0000
Files and hashes:         1: oWMO_rVmVc-hMzMLmNs2GS3evfw.crl (hash: CfoB8LpfU4huSrk+EfddzT6Oq3fAE0eu6MdfgLMi7TM=)
                          2: A87755B68BCD11ECAF9D1512C4F9AE02.roa (hash: unCQmTbZm4pgrTVUyuiudS71668sOfsE5vQDTSaCxiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl
                          rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7672, serialNumber=A1630EFEB56655CFA133330B98DB36192DDEBDFC
        Validity
            Not Before: Sep 22 23:30:36 2026 GMT
            Not After : Sep 29 23:30:36 2026 GMT
        Subject: CN=6ab30f9c-89f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:a8:55:10:55:ae:78:87:6a:8f:f4:1d:4a:
                    8a:4b:9a:ef:99:06:90:e3:cc:66:41:a6:ae:ef:65:
                    c7:86:77:f1:d4:fc:71:1a:a1:1b:6a:34:29:2d:b7:
                    b2:ab:fe:91:0e:bb:ac:95:ad:c1:da:62:e7:40:56:
                    84:c8:c3:fc:c6:53:27:db:15:7f:38:0e:cc:43:23:
                    67:f0:90:fd:9e:9e:64:db:00:44:0d:53:29:73:78:
                    f2:26:b7:7c:e5:89:e6:06:b4:9e:98:07:c4:16:82:
                    dd:4a:f1:96:45:40:6a:1e:6d:6a:73:0f:a7:3a:52:
                    02:b7:8a:b6:cf:6a:60:73:75:5a:01:f3:82:19:32:
                    57:61:5d:72:77:9a:70:ee:57:2f:9c:78:f1:ae:5d:
                    24:62:fb:bf:0e:f2:be:54:2f:18:e6:89:ce:4a:40:
                    c4:75:94:9c:e1:62:2f:ca:e8:73:51:68:7d:11:30:
                    0e:d9:13:1a:ec:ec:5e:6e:92:30:05:66:20:84:6c:
                    16:7d:35:9d:d4:e3:8c:66:d2:a3:89:40:98:34:fc:
                    f9:7e:87:fd:03:3b:d0:c9:8f:5d:ee:3d:7e:7f:fa:
                    a4:3c:f0:8e:f2:02:23:44:e1:2f:23:87:a9:8e:19:
                    5e:cc:7a:c3:a0:6d:4c:8a:52:85:c5:e8:34:66:1a:
                    1d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5E:98:8E:D8:B4:48:D0:D0:F8:46:70:EF:A7:12:C8:E3:51:FD:13
            X509v3 Authority Key Identifier:
                keyid:A1:63:0E:FE:B5:66:55:CF:A1:33:33:0B:98:DB:36:19:2D:DE:BD:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oWMO_rVmVc-hMzMLmNs2GS3evfw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7672/7C5D3FDE8BCA11ECAC5DE567C4F9AE02/oWMO_rVmVc-hMzMLmNs2GS3evfw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:0f:e6:74:94:4e:1c:bf:6d:51:f6:f3:83:fc:77:bb:2d:f6:
         18:8c:34:e3:a6:f1:c8:ac:cc:c8:71:bf:52:d8:74:bf:82:01:
         d1:66:b4:da:b1:4e:35:2b:d1:b2:11:1a:16:76:f7:fb:30:72:
         3e:82:57:4f:33:17:d0:5f:3e:56:1e:55:b9:1a:04:b8:f0:7b:
         eb:0a:60:34:f0:81:81:36:1f:25:42:e4:4c:f6:6c:13:9c:49:
         66:b2:04:06:8a:55:5f:78:26:3d:0b:6b:8d:4b:ec:f1:bd:13:
         73:75:09:08:c8:00:fc:5a:81:bf:ee:b2:dd:6f:b4:04:b3:43:
         0e:47:87:d9:88:5e:6d:b6:23:76:9a:ad:20:c7:d3:74:e9:a1:
         e6:7e:a9:68:f8:dd:75:45:59:7f:88:60:89:08:9f:94:9f:00:
         11:7c:1a:5b:32:b9:cf:9f:eb:e9:16:29:6f:59:00:05:38:92:
         1e:3d:5f:18:de:ec:b8:65:27:b6:72:7e:ee:26:d9:74:14:87:
         ae:48:61:39:87:88:92:d1:a3:1b:77:bd:f5:2e:8d:45:77:f2:
         99:85:78:de:e0:88:2c:a9:6e:05:68:c7:72:ee:d4:b9:5f:9a:
         cf:4d:7b:a1:3d:a4:30:6c:ae:59:c5:06:36:c7:65:b8:86:74:
         e1:da:c7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:38 2026 by rpki-client