Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
File:                     OoXUR-GGdf7VrgXJKTee761by8A.mft (raw, json)
Hash identifier:          PuH9kfS01LJeN1LTdiAG6WvF7xk4nWAIgp5nEkHLnBA=
Subject key identifier:   BC:86:6C:F4:2F:EA:BC:7E:52:E5:4A:7E:23:EF:F1:27:7D:DD:A7:88
Authority key identifier: 3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0
Certificate issuer:       /CN=A91E838F/serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
Certificate serial:       08C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
Manifest number:          089E
Signing time:             Tue 22 Sep 2026 20:28:25 +0000
Manifest this update:     Tue 22 Sep 2026 20:28:25 +0000
Manifest next update:     Tue 29 Sep 2026 20:28:25 +0000
Files and hashes:         1: OoXUR-GGdf7VrgXJKTee761by8A.crl (hash: jY7Ntlkul3lKLAcKqgYnzDeNIzpwqFTeLLFas43CgkU=)
                          2: EC8B7E82450E11EB887ECF6FC4F9AE02.roa (hash: OLwfujR9YMam+qh0+yQaOy6ktbsF4AnntQeiqGc+bV0=)
                          3: 9E393ADA657011EB96AF8F49C4F9AE02.roa (hash: ev3sBPy0Q1f1TCa3FQ+DO7T8UGM3EjS+3+xQyEkvgdw=)
                          4: 3A80616C853811EFA2F05E2FC4F9AE02.roa (hash: sQEpQuEbqYjD3RRWz6oiGW1QaCfG5tvcyqPy8Tyv+nc=)
                          5: DACBD9F638F911EBB13C034CC4F9AE02.roa (hash: U/Zn+Je0L7uZPSDNgEJoOIW1ujI2JNhGIHidbTwoXrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl
                          rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242 (0x8c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E838F, serialNumber=3A85D447E18675FED5AE05C929379EEFAD5BCBC0
        Validity
            Not Before: Sep 22 20:28:25 2026 GMT
            Not After : Sep 29 20:28:25 2026 GMT
        Subject: CN=6ab2e4e9-3bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:38:55:41:9f:7d:40:1a:89:92:25:1d:bc:
                    c0:ba:11:ed:0d:68:b5:14:b0:99:01:17:99:99:e1:
                    40:ff:f5:4c:b3:c4:cc:72:fe:8d:d6:ff:29:47:ea:
                    ee:e2:cc:15:f4:45:0e:70:96:e2:a9:8c:a9:fe:f3:
                    0d:b6:6a:9d:a1:38:47:92:a1:85:cd:44:3b:8f:0c:
                    f9:81:d4:86:44:46:8f:88:f1:f5:15:77:82:f3:00:
                    b5:bc:96:30:23:65:b4:86:d1:03:f4:7e:61:26:30:
                    70:95:bf:f1:95:c7:c3:ee:03:5d:cf:f0:e2:0d:8a:
                    0b:ca:ce:96:0a:31:da:aa:37:73:81:21:18:fc:38:
                    79:9d:47:73:4b:06:53:18:4c:19:0e:c8:c6:59:f5:
                    17:e7:86:f0:bf:65:df:89:10:46:0f:e1:25:7e:4c:
                    6c:ca:3a:df:ca:59:ce:44:7e:89:33:56:82:84:b2:
                    3d:52:03:bc:a4:00:89:94:7c:76:7f:27:b0:d2:a4:
                    bb:79:3c:f8:c8:2f:df:c9:5d:bc:cd:2a:9b:72:2b:
                    9c:88:77:7e:59:0d:3c:31:92:99:4b:45:a1:2a:91:
                    8c:ab:80:5f:43:2f:a3:2e:3d:f2:da:31:5d:cb:b9:
                    45:f9:27:15:42:e9:76:0b:3d:1f:34:cf:9b:e3:00:
                    78:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:86:6C:F4:2F:EA:BC:7E:52:E5:4A:7E:23:EF:F1:27:7D:DD:A7:88
            X509v3 Authority Key Identifier:
                keyid:3A:85:D4:47:E1:86:75:FE:D5:AE:05:C9:29:37:9E:EF:AD:5B:CB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OoXUR-GGdf7VrgXJKTee761by8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E838F/A9F7739806E111EB9B335C6DC4F9AE02/OoXUR-GGdf7VrgXJKTee761by8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4c:a9:39:e5:08:27:d8:34:93:87:2a:f4:f7:34:40:90:3d:
         4a:78:d8:c3:73:8c:c6:04:1e:e5:27:01:4a:88:c3:ad:e6:c7:
         eb:c3:20:8c:cb:26:08:59:82:fb:4e:8c:d4:a1:0c:59:93:b6:
         04:75:1a:f6:f4:6f:1d:e5:22:0a:aa:93:b0:51:ad:49:b7:dc:
         dd:ab:4e:23:41:50:ec:b7:24:c5:52:05:e9:a3:a7:86:54:ac:
         e5:cd:fe:11:c7:5a:62:68:0c:b6:0d:f5:86:3b:65:63:a4:0a:
         43:1c:5c:0c:5f:da:f3:c6:0f:b7:17:87:b4:a5:73:2d:06:27:
         e7:83:a6:ca:91:7b:ff:08:61:46:40:b0:a4:d7:bd:f1:38:0c:
         53:5f:38:2e:02:67:fc:41:2b:22:22:be:c6:cf:51:94:be:74:
         6e:b6:97:b2:7d:cf:85:17:20:0c:35:8f:cf:03:90:1b:d3:c0:
         9b:0b:35:28:08:b3:9b:c8:4c:d0:5d:71:d9:1d:ee:bf:aa:db:
         c3:61:66:3a:c2:e3:34:f0:2f:d7:a0:d7:79:71:06:e3:29:6d:
         cd:6b:c2:08:25:31:7f:db:ab:e2:02:c2:1e:39:d9:84:d7:ec:
         7e:7a:cc:fb:65:f1:d0:94:94:4c:b5:cc:50:48:4d:f0:01:c5:
         e0:51:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:39:08 2026 by rpki-client