Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
File:                     oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft (raw, json)
Hash identifier:          OY/LmM0QbtE+ZVTTpXZPP06qsOK53oiSBJBOQJY0e9Y=
Subject key identifier:   80:7A:AD:8D:BD:B2:6E:42:94:AA:54:B3:F2:CB:4D:FB:5F:F3:DC:31
Authority key identifier: A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1
Certificate issuer:       /CN=A91FA024/serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1
Certificate serial:       08DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
Manifest number:          08D2
Signing time:             Thu 24 Sep 2026 20:22:51 +0000
Manifest this update:     Thu 24 Sep 2026 20:22:51 +0000
Manifest next update:     Thu 01 Oct 2026 20:22:51 +0000
Files and hashes:         1: oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl (hash: XapipmsfM2i53+WbJfaSW/oAC0UcH8Nvn0RsSpIOZtU=)
                          2: FE1FDB12BCD011EC8283681EC4F9AE02.roa (hash: D7POOiqxGTRBfPXL5kT6B+2budcwWwPlgdAg9UBfD4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl
                          rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268 (0x8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA024, serialNumber=A0AC427E957B374D0267FA7648DD3FF85702DAB1
        Validity
            Not Before: Sep 24 20:22:51 2026 GMT
            Not After : Oct  1 20:22:51 2026 GMT
        Subject: CN=6ab5869b-13af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:67:04:97:3a:55:bf:79:09:77:3a:e5:40:5b:
                    bd:d8:1c:35:a7:ac:84:12:05:82:30:18:e1:4c:16:
                    6d:d7:58:a5:b3:2f:2e:80:59:1c:c9:c4:e4:76:36:
                    60:69:98:12:a1:c4:67:48:6f:93:4e:6e:4e:f8:eb:
                    80:b3:23:a9:2f:e1:6f:b0:ae:a7:b0:95:2a:65:55:
                    75:15:09:7e:bc:25:4c:c0:51:16:e7:5d:b3:1e:2a:
                    5e:41:9c:b4:86:a7:06:cc:e9:63:2f:50:4b:d8:6d:
                    45:14:1d:83:4c:66:a6:ee:5a:dc:be:66:9e:f2:79:
                    56:44:9b:ff:76:2e:7d:9d:f1:dd:12:0f:76:86:a6:
                    eb:86:d1:9f:d8:9c:af:a4:d9:f2:7e:20:51:af:21:
                    c0:dc:bc:4b:1f:34:fe:09:07:28:4e:15:bf:6b:d0:
                    b7:b0:26:e0:01:f0:aa:49:3e:60:fa:17:ba:5c:ee:
                    1d:1d:0d:ff:b2:80:9c:16:38:ec:ef:49:7e:ae:24:
                    d2:9b:7d:07:23:e4:e7:ae:1c:5d:83:09:51:94:31:
                    1f:3f:30:a0:07:94:94:4a:4a:4d:8b:cb:9b:3c:ef:
                    93:2d:3c:91:f2:b6:d9:22:80:bc:30:dd:b8:b0:01:
                    a1:57:a2:67:09:ab:8c:d3:72:6d:17:e2:f1:21:db:
                    3b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7A:AD:8D:BD:B2:6E:42:94:AA:54:B3:F2:CB:4D:FB:5F:F3:DC:31
            X509v3 Authority Key Identifier:
                keyid:A0:AC:42:7E:95:7B:37:4D:02:67:FA:76:48:DD:3F:F8:57:02:DA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKxCfpV7N00CZ_p2SN0_-FcC2rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA024/D33A4794F18811EA9E80F71EC4F9AE02/oKxCfpV7N00CZ_p2SN0_-FcC2rE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:a0:76:a9:0b:49:04:8c:f4:10:44:1e:40:1c:cb:a5:1f:
         2e:3a:9b:29:ad:1b:99:aa:42:cd:6a:f5:a6:9c:82:88:96:e0:
         90:9a:07:f0:1b:2f:6d:ec:3c:8f:4b:d0:65:b1:6a:cd:1e:ad:
         32:0b:77:9f:d6:5a:d7:38:41:e4:62:f8:ef:26:a4:d3:ec:0d:
         f7:e1:a3:9f:6e:72:89:01:3c:b7:01:77:4a:06:4a:a0:9c:1f:
         ed:b1:42:a9:29:f7:d9:f9:83:e8:12:73:d9:6f:2c:29:d8:f5:
         58:ef:7f:46:6d:2f:c6:7f:32:d2:81:96:42:a3:2e:fe:97:52:
         ca:06:4e:5d:c2:f6:19:26:0d:66:33:dd:9a:ce:9f:50:f1:61:
         72:9b:f2:11:30:6f:76:71:11:ff:68:0c:e6:c9:75:61:32:34:
         b4:2d:11:55:bd:27:9c:af:90:06:3c:f3:c1:82:94:1a:4d:ca:
         3a:5a:a7:40:31:12:b3:ec:0d:3a:df:11:23:a7:cb:0e:ab:19:
         a3:69:9a:86:14:67:ea:1d:85:7d:83:2f:4f:37:41:44:00:41:
         7a:75:5a:9e:86:0c:98:1c:8f:eb:5b:43:e3:c7:c8:10:6e:a0:
         ec:d2:aa:16:57:25:a4:e6:a8:60:0a:50:a0:c5:dc:82:0e:30:
         7b:e8:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:56:51 2026 by rpki-client