Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
File:                     OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json)
Hash identifier:          NFM+ouKyr/3z0UYPq2iqAUczXcJOyUsGHqopFjcs28o=
Subject key identifier:   0A:26:DA:5C:04:FB:83:25:66:4D:4D:C0:DE:13:D1:50:B9:AB:51:F7
Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
Certificate issuer:       /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Certificate serial:       09AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
Manifest number:          1679
Signing time:             Wed 28 Oct 2026 18:34:29 +0000
Manifest this update:     Wed 28 Oct 2026 18:34:29 +0000
Manifest next update:     Wed 04 Nov 2026 18:34:29 +0000
Files and hashes:         1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: 6+Nh4kR0WEK84FgEyB3iUUkXssijI0tL/p0W6H+rGyA=)
                          2: 4EF2EC842DAA11F181B163FBA3833773.roa (hash: RiW8QYb+ypRvsySpXIpMH3WQO3vwhG1+Rhs2YYcv/J8=)
                          3: 1245956E2DB611F1B8EF9758A8833773.roa (hash: RDdwLCbOHRei4mq+xzV0XVNXkj7eeYuisNBVo4Pbaec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
                          rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 18:34:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2476 (0x9ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
        Validity
            Not Before: Oct 28 18:34:29 2026 GMT
            Not After : Nov  4 18:34:29 2026 GMT
        Subject: CN=6ae24035-7308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:6a:60:06:95:40:03:2f:7d:57:60:86:7a:
                    80:d8:09:29:60:10:7a:b7:cb:71:76:b2:ef:48:f6:
                    5f:f8:7b:d3:e7:dc:96:e5:ef:d0:09:a3:89:25:07:
                    30:b9:73:7f:5a:97:9f:85:1f:36:c5:ae:4c:ed:d3:
                    3a:fc:63:74:d3:a6:77:66:9f:ee:c7:7c:c8:61:74:
                    50:a8:6b:69:9c:f0:b6:6b:83:37:86:73:f4:59:67:
                    87:fb:6a:67:08:58:27:ca:db:e2:4b:13:95:65:dc:
                    87:a0:8a:70:9f:5e:0c:8e:4b:36:9f:85:e7:bf:a3:
                    5d:25:99:f8:94:b6:e0:90:9c:de:6a:54:16:01:02:
                    b7:2a:09:d5:cf:17:86:08:61:72:47:8b:33:08:a2:
                    6a:a4:4a:62:b1:06:65:c1:36:07:4b:32:67:b0:75:
                    a8:55:45:41:47:a9:66:f9:7e:0a:36:4d:ed:e2:6b:
                    ea:a5:56:3e:df:2f:00:f8:33:93:8d:37:e2:21:e1:
                    a3:a7:69:88:9e:45:7c:77:d2:3b:53:99:ec:ed:f9:
                    20:22:b0:b6:b2:df:2a:be:b8:6e:ca:fe:09:b3:43:
                    5b:3e:39:40:7b:9f:a1:ab:27:be:e4:39:70:77:a9:
                    9b:5b:81:bb:6e:60:1d:e9:6e:a8:0b:ad:d2:72:3b:
                    08:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:26:DA:5C:04:FB:83:25:66:4D:4D:C0:DE:13:D1:50:B9:AB:51:F7
            X509v3 Authority Key Identifier:
                keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ca:9b:da:b1:31:98:4a:e6:56:fa:48:b2:11:15:bd:4f:3c:
         e5:d1:3f:d8:6a:b7:19:01:e2:6f:46:85:4e:07:c9:38:cc:45:
         2b:fb:75:42:05:9b:f0:06:e1:fe:29:f4:94:03:30:f3:3a:4a:
         59:26:bb:13:d4:f3:9c:35:71:1f:4b:8a:77:43:64:f4:7f:68:
         2e:62:cb:4a:7b:d9:2a:d2:50:66:e3:3d:38:7b:9e:69:94:19:
         02:80:5a:a6:8b:8a:22:5f:fc:e8:0f:34:09:bc:d9:10:0a:5d:
         3e:ab:63:ef:a5:a4:71:0a:56:ad:a0:f2:55:56:8a:35:6c:e6:
         95:b6:bf:03:0c:68:55:bf:26:4e:88:e2:e0:56:ac:fc:0f:5a:
         8f:dd:26:1d:c8:85:d2:6f:3a:a5:44:17:ed:8d:fe:8b:3e:03:
         4f:37:24:71:55:a2:cc:e4:1b:11:2c:a6:4b:09:22:20:37:50:
         14:2b:a1:3c:7f:bf:ca:14:c2:9e:16:bd:a3:ff:2b:a9:29:63:
         39:9b:74:de:15:a3:96:84:88:d6:97:a3:ba:11:c5:10:63:54:
         8a:10:d5:f4:be:15:5a:7f:29:d1:cb:ec:a8:73:82:2a:52:e6:
         5b:05:ae:a0:9d:88:71:de:e1:d2:4b:ab:43:0b:6c:fa:f0:57:
         e1:ee:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 23:04:31 2026 by rpki-client