Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft
File:                     orn_7UcMW3HFLztks7btpBm-E7M.mft (raw, json)
Hash identifier:          itbNDZos2yX7REiV/hka+y/mvs1gNFKolDNBmxf8wCU=
Subject key identifier:   8C:77:F9:D1:55:60:03:96:1A:71:55:6B:44:83:FD:12:FD:87:DA:06
Authority key identifier: A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3
Certificate issuer:       /CN=A91187C1/serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft
Manifest number:          F1
Signing time:             Wed 07 Oct 2026 06:52:19 +0000
Manifest this update:     Wed 07 Oct 2026 06:52:19 +0000
Manifest next update:     Wed 14 Oct 2026 06:52:19 +0000
Files and hashes:         1: orn_7UcMW3HFLztks7btpBm-E7M.crl (hash: 5Y9OANf8jBuSpvMOSsoYYFyAnjH41oJTo4VJz6wfT+8=)
                          2: C265A63A571211F092B99F2AC4F9AE02.roa (hash: g6Egk/b7vNf0MzgI//DoeOCEJm43M/fSUDub5ucoMAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl
                          rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:52:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187C1, serialNumber=A2B9FFED470C5B71C52F3B64B3B6EDA419BE13B3
        Validity
            Not Before: Oct  7 06:52:19 2026 GMT
            Not After : Oct 14 06:52:19 2026 GMT
        Subject: CN=6ac5ec23-5504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:94:e4:7f:3d:34:71:ce:2c:50:81:8f:b4:
                    ad:71:f3:66:47:c2:72:82:49:b4:5a:75:74:8c:c4:
                    4a:03:65:50:b1:52:3d:31:98:9b:09:05:78:df:9a:
                    d3:2f:86:16:1d:f0:74:b7:14:ee:a7:0d:24:65:b6:
                    ee:ad:10:83:64:8f:71:3a:63:55:d7:34:49:0b:1d:
                    41:50:ae:cf:74:9a:d0:33:b3:50:6f:6e:a5:ba:8b:
                    cf:02:7e:9a:b3:61:db:bf:13:d3:1b:21:67:8c:e4:
                    08:29:92:ab:b5:b7:1d:95:98:4c:56:ca:4b:f2:25:
                    e0:c9:31:04:55:40:63:b5:b6:8f:ee:ac:bf:ff:8d:
                    a7:5e:c7:0e:c6:ee:fa:ce:32:8a:a5:73:f4:b8:a9:
                    cf:2e:a6:a1:ef:df:60:42:38:43:b5:40:db:8c:3e:
                    77:c9:05:3d:dc:0f:80:8c:87:a1:cb:e0:0b:4a:3d:
                    41:2b:c5:1b:c4:64:15:1c:2a:cf:13:53:af:45:b8:
                    b7:f1:ff:28:23:c6:db:b2:3a:a1:1d:8d:d8:bd:ce:
                    e1:99:16:e6:54:ef:a1:8d:c2:3d:aa:7c:38:ef:bc:
                    6a:e2:26:21:2f:cf:ce:28:39:bb:ce:f9:64:61:9b:
                    12:08:87:c1:4a:16:a2:6b:8c:26:11:a2:83:2f:45:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:77:F9:D1:55:60:03:96:1A:71:55:6B:44:83:FD:12:FD:87:DA:06
            X509v3 Authority Key Identifier:
                keyid:A2:B9:FF:ED:47:0C:5B:71:C5:2F:3B:64:B3:B6:ED:A4:19:BE:13:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/orn_7UcMW3HFLztks7btpBm-E7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187C1/2631C8B4570A11F0B538CF65C4F9AE02/orn_7UcMW3HFLztks7btpBm-E7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ec:d4:ea:1c:0b:64:d4:a4:5a:59:2c:5a:bf:a5:ed:86:07:
         f3:8d:53:d6:c7:f5:90:f5:b7:aa:b8:cb:39:68:46:95:bd:8d:
         08:05:19:6d:6a:05:46:7a:80:af:eb:28:d9:fd:66:fe:be:8b:
         1a:a7:c8:32:e2:47:43:7d:2d:d7:f9:96:df:b0:27:b6:be:73:
         30:b8:14:f5:80:0e:84:1a:b8:55:95:18:81:6c:7c:8b:60:b0:
         d8:46:5c:2f:81:41:b8:d5:af:79:8d:fe:c0:3d:72:87:f6:b4:
         90:f9:37:80:e9:30:b8:21:41:94:76:cd:6c:5a:2a:81:03:57:
         e4:90:c6:f7:62:c9:7b:4f:28:f8:0e:42:d0:33:bd:be:5a:aa:
         62:51:d7:05:2b:6e:66:c2:01:fb:71:b3:63:40:e8:0b:89:07:
         a2:bb:ef:59:d4:94:31:69:80:0f:c0:86:7f:0b:ca:bb:48:1a:
         0d:9f:38:5a:7d:36:9e:b3:eb:2d:65:63:3f:8f:db:0c:09:07:
         0f:4f:21:be:ad:29:19:b8:5d:17:c6:7a:a9:2a:2a:d9:cd:31:
         6f:fb:e3:8a:77:dc:ca:9f:56:fc:14:9d:bf:5c:1a:3b:73:50:
         1b:88:d7:63:05:75:d9:5a:7e:eb:46:d0:4b:91:78:b9:bb:5b:
         c0:91:24:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:04:38 2026 by rpki-client