Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft
File:                     oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft (raw, json)
Hash identifier:          wwAmle0hl1LERv+9W0Ei/lJylcuGkMEJpwG9SqyKiMQ=
Subject key identifier:   11:6E:14:EC:67:34:4E:F6:7A:73:EA:39:83:E8:29:57:59:BF:A9:89
Authority key identifier: A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B
Certificate issuer:       /CN=A91E953B/serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B
Certificate serial:       0233
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft
Manifest number:          022B
Signing time:             Wed 23 Sep 2026 02:37:19 +0000
Manifest this update:     Wed 23 Sep 2026 02:37:18 +0000
Manifest next update:     Wed 30 Sep 2026 02:37:18 +0000
Files and hashes:         1: oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl (hash: bD675zvKHpfIpbktBukIwB7f5y0aVIVzt+5xXFazZN4=)
                          2: NqbP4HOf_Jyjeg4GFVPMlc9Aumk.asa (hash: QSUd3sZtQESOmMmY99Q78BF0wQT6wi4H0X2SGisgJkA=)
                          3: 12E1FD886C9C11EE9F3C5653C4F9AE02.roa (hash: LW+WmGu6YlC9wjX0P0Tmes41deKyVjQFb3wGnRpYkOQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl
                          rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E953B, serialNumber=A2243684223D2C25C6AF176A5F02FA02B24F680B
        Validity
            Not Before: Sep 23 02:37:18 2026 GMT
            Not After : Sep 30 02:37:18 2026 GMT
        Subject: CN=6ab33b5f-729d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:95:04:57:55:82:95:50:f4:4d:3b:c6:78:44:
                    ec:9b:93:0d:ea:10:b0:e1:dc:72:93:6a:0c:10:8c:
                    c2:7b:b2:b9:4d:be:43:f9:dd:e8:43:48:d5:ce:0f:
                    fe:a4:75:da:66:e3:00:bc:df:1a:36:cb:45:8a:09:
                    2e:9c:a1:33:0a:be:b4:40:c8:e8:65:b7:b2:d7:43:
                    d6:d6:2f:fa:11:11:25:e7:bb:a1:d1:a2:b0:7a:93:
                    16:27:f2:a0:9b:c7:70:7d:80:86:cb:72:bc:8b:01:
                    55:03:10:0a:12:85:6f:d6:37:d6:38:02:c0:9d:65:
                    3b:df:e6:a8:ea:9d:e3:dc:7b:b3:90:6f:c3:8a:ca:
                    45:17:42:f8:07:df:65:68:0d:1d:0b:a3:cc:16:08:
                    5f:09:80:2e:88:6d:f3:20:41:cc:29:9e:8e:99:73:
                    28:ed:0d:fb:7c:a2:62:d3:17:ca:7f:f7:0c:79:27:
                    7a:fb:13:60:49:c8:70:05:e9:96:36:79:90:f4:39:
                    d3:6c:64:e2:25:9a:f7:81:7a:63:e2:c1:89:b4:c8:
                    1c:92:7d:32:1f:b6:99:92:e2:bc:36:15:e6:92:a5:
                    0b:27:3d:20:0e:bd:44:e2:ce:07:fa:26:8a:54:f1:
                    57:e0:fa:71:a6:62:4a:0e:7d:f5:9d:a5:18:d3:54:
                    17:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6E:14:EC:67:34:4E:F6:7A:73:EA:39:83:E8:29:57:59:BF:A9:89
            X509v3 Authority Key Identifier:
                keyid:A2:24:36:84:22:3D:2C:25:C6:AF:17:6A:5F:02:FA:02:B2:4F:68:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E953B/C8D039226C9A11EE85BFDF4FC4F9AE02/oiQ2hCI9LCXGrxdqXwL6ArJPaAs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bb:02:9f:fa:a5:18:62:59:38:ee:60:c4:a5:bc:c6:35:5e:
         1d:6a:b1:f0:62:31:44:78:09:c6:23:cb:66:58:8f:b3:29:d0:
         16:07:65:62:2c:31:fa:c8:06:50:d5:df:bf:11:3e:04:08:85:
         1b:42:bb:01:63:9b:cb:6d:7f:38:1b:da:a4:97:5a:36:2f:1a:
         a8:29:a9:89:63:d2:ea:f5:d1:ed:2e:b8:c8:41:9e:74:04:85:
         b1:8f:b5:74:92:80:8a:65:e6:61:ee:1e:f1:20:77:09:a1:2a:
         b7:d2:d4:7d:df:8c:b1:d9:30:19:35:ba:d3:1b:0b:56:71:af:
         4c:8e:3b:f5:d9:ef:15:96:45:2f:a9:74:28:3a:23:c3:7f:da:
         9e:7e:d6:36:ac:fd:a2:f0:e8:40:fe:e1:3d:4a:69:64:86:01:
         14:1d:ae:af:e0:4c:9a:ee:aa:ef:7f:60:e3:e0:ed:12:11:2d:
         86:e6:09:64:1a:d4:33:0b:d3:74:a4:b3:2a:bb:b5:fd:9f:ca:
         a0:4b:5b:45:98:af:bd:f2:84:14:c4:0e:9b:c7:9b:8d:b0:27:
         90:71:6a:4e:16:34:bb:49:09:3a:ba:4d:ff:45:75:c6:88:32:
         b2:fe:57:d9:16:92:ff:f8:b2:6b:be:48:b9:40:07:af:4c:4f:
         47:51:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:16:17 2026 by rpki-client