Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
File:                     OG9viqHmbFJU6h5HiIwQP0U2Iio.mft (raw, json)
Hash identifier:          1WocqZGEq2iOrTJfZhtNYIBA6h3XV+qwEXoJwd/dkrE=
Subject key identifier:   B5:07:B5:1E:AF:30:8C:52:FE:8C:3A:FB:B8:7F:42:3C:37:AE:66:1A
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Certificate issuer:       /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial:       1B90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
Manifest number:          1B4C
Signing time:             Tue 22 Sep 2026 16:13:08 +0000
Manifest this update:     Tue 22 Sep 2026 16:13:07 +0000
Manifest next update:     Tue 29 Sep 2026 16:13:07 +0000
Files and hashes:         1: OG9viqHmbFJU6h5HiIwQP0U2Iio.crl (hash: +Rg7o3vrOmYS3Wl3d71BnaJHKVJCTSaS4XQDKnaCigA=)
                          2: 96F7E1784E8F11F1BB8AFF5DB7833773.roa (hash: a61Ie/aCG9CN03x2NjRNh6RVX/PaVqNU4tVN2I7ZfeY=)
                          3: 95851A544E8F11F1BB8AFF5DB7833773.roa (hash: bjzn1i56aX7nhZkQIU0OEQDjrscerkhHzwk56zyo5ro=)
                          4: 63B4F05E482611E7ABDEF831C4F9AE02.roa (hash: GXp1aLaRCBlpn2Ppiw041HUg4IkVO4mFqlloeENr4R8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
                          rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7056 (0x1b90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
        Validity
            Not Before: Sep 22 16:13:07 2026 GMT
            Not After : Sep 29 16:13:07 2026 GMT
        Subject: CN=6ab2a914-9fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:7a:27:18:78:5a:3a:eb:76:e4:31:e3:50:
                    78:df:5c:de:53:ce:0b:65:9d:cd:bc:96:e0:ae:28:
                    7b:88:55:5d:de:54:81:5f:ee:36:64:5e:b2:de:51:
                    5c:b6:41:68:a5:c0:4c:b1:de:e4:07:55:37:97:ce:
                    9e:d6:cd:51:89:0d:30:22:9d:3d:6f:8c:df:68:90:
                    82:ef:8f:fb:c2:da:a8:91:7b:2a:3c:51:a6:d3:fb:
                    e6:95:77:ef:9e:8e:84:30:4a:fe:77:03:a7:c3:d3:
                    29:e4:ee:eb:1e:07:37:2c:d0:c3:79:c8:c3:17:02:
                    1f:b6:65:cb:ff:af:60:38:2b:39:3d:81:1a:5d:b7:
                    bb:95:ba:e6:ed:f7:df:2a:67:2e:fc:a0:6d:da:34:
                    6e:4a:94:fb:81:ac:ae:55:74:92:8a:cf:a4:81:4a:
                    fa:2a:39:54:3a:99:43:61:56:fe:68:a7:29:02:28:
                    9d:bf:21:42:ef:f4:62:66:4a:f7:5f:02:6b:94:9b:
                    af:c0:f7:3f:96:07:4e:80:33:57:de:30:86:91:16:
                    20:b1:f7:25:ce:cc:97:3c:0c:f9:6c:e0:b1:0e:74:
                    0d:16:a8:94:98:91:52:aa:7a:a5:57:65:cd:e4:da:
                    dd:b5:3d:fb:96:dd:e3:84:5b:7f:3e:59:b1:19:73:
                    dd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:07:B5:1E:AF:30:8C:52:FE:8C:3A:FB:B8:7F:42:3C:37:AE:66:1A
            X509v3 Authority Key Identifier:
                keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:84:7f:65:05:dd:c9:6a:55:b5:7d:36:ab:50:d8:62:96:c3:
         8e:10:6a:71:99:25:26:2d:52:66:8c:e5:f1:e7:17:d0:4d:a5:
         74:fb:76:d3:98:28:b9:55:d9:25:1a:6a:36:2a:39:b2:71:c7:
         ff:54:6d:96:02:73:04:d0:bc:df:93:4e:80:62:03:2f:23:34:
         3a:0f:63:7b:76:a6:36:eb:43:f8:ef:54:b9:77:37:ab:f5:e7:
         15:c8:2b:d6:a8:36:e8:2c:4a:99:b4:f0:7d:73:e6:0d:39:d5:
         93:9c:f1:ea:87:fe:49:8e:c0:ea:5a:62:1d:ae:e7:94:3f:dc:
         b0:be:d9:7c:90:dd:5f:53:4e:4c:5d:f4:28:46:8b:82:65:9d:
         a7:36:03:ba:69:b9:ae:ef:18:4a:e2:02:7f:d0:e0:ac:36:c9:
         3a:ae:77:cc:7c:48:ad:cc:1e:9f:fc:1d:b2:2f:4a:d9:75:c0:
         cd:93:44:cf:6d:85:60:9e:d1:09:7e:b3:e6:c3:47:f9:89:39:
         8e:ec:00:b4:8c:6b:c9:13:28:9c:4e:8e:52:e9:7f:65:c6:b7:
         18:47:29:04:2b:0b:e2:9d:2f:c1:d8:8e:0c:be:e6:ab:5c:6d:
         12:5e:06:25:76:3a:b5:d5:80:ae:29:5e:bb:4c:a5:fa:bb:11:
         0d:7e:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:50:59 2026 by rpki-client