Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
File:                     OIgNuTaszJvXTT2434iHsyjleI0.mft (raw, json)
Hash identifier:          Ol1EFXMjSrPW6D0oEkg2ozQUHVzjzTfxjlHJh7IPiIM=
Subject key identifier:   50:DB:58:13:D7:88:F1:18:DA:5B:AF:5C:D1:AC:97:52:28:98:94:DF
Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
Certificate issuer:       /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Certificate serial:       0994
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
Manifest number:          1649
Signing time:             Thu 10 Sep 2026 18:27:08 +0000
Manifest this update:     Thu 10 Sep 2026 18:27:08 +0000
Manifest next update:     Thu 17 Sep 2026 18:27:08 +0000
Files and hashes:         1: OIgNuTaszJvXTT2434iHsyjleI0.crl (hash: AIUsohevGetOCj/1ffm/VywcMJJRVFrEj4hiamH8HTU=)
                          2: 1245956E2DB611F1B8EF9758A8833773.roa (hash: RDdwLCbOHRei4mq+xzV0XVNXkj7eeYuisNBVo4Pbaec=)
                          3: 4EF2EC842DAA11F181B163FBA3833773.roa (hash: RiW8QYb+ypRvsySpXIpMH3WQO3vwhG1+Rhs2YYcv/J8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
                          rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 18:27:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2452 (0x994)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
        Validity
            Not Before: Sep 10 18:27:08 2026 GMT
            Not After : Sep 17 18:27:08 2026 GMT
        Subject: CN=6aa2f67c-fc1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:e1:79:c7:bd:cb:ce:17:7e:31:2d:ab:9a:
                    29:fe:0b:01:b4:14:f3:b2:9a:23:ca:5e:80:44:cc:
                    dd:85:71:ff:c2:0f:cd:45:d4:a1:e6:44:5d:b6:18:
                    0c:25:7e:12:06:3c:be:1d:d0:e3:97:d9:d6:be:79:
                    57:37:00:d2:b8:96:2d:ef:cf:10:93:14:6a:5d:d6:
                    f7:c3:87:f3:d8:73:d3:10:f1:3c:c5:bb:6b:78:c5:
                    2c:d5:49:39:2e:2f:ed:e8:cf:70:e6:5a:21:4a:ef:
                    0c:68:32:16:ea:df:77:54:81:4e:d9:0b:a3:c0:0c:
                    8d:1b:bb:eb:e4:c4:24:3f:da:11:cf:e9:57:2e:f9:
                    75:54:8d:91:ac:f1:5b:78:a3:98:50:c9:4f:54:c9:
                    cf:f3:69:cb:4c:61:60:86:a5:99:0c:96:e1:13:e4:
                    4a:f3:84:7e:a5:fc:a0:a5:61:fd:8a:2d:5a:24:3b:
                    e2:1c:44:af:ce:b0:2b:f9:5d:f7:b7:37:d0:28:a2:
                    ad:1f:f9:a6:db:84:97:a1:fc:b2:5a:4f:c3:5d:59:
                    5d:a4:6e:77:0f:f1:21:a2:93:c6:60:de:ce:6a:ed:
                    c0:cf:00:ba:0e:4f:cb:3d:9b:13:c8:9d:e0:3b:b5:
                    29:f5:4b:eb:3f:07:43:c8:8e:e3:51:1f:54:ca:65:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DB:58:13:D7:88:F1:18:DA:5B:AF:5C:D1:AC:97:52:28:98:94:DF
            X509v3 Authority Key Identifier:
                keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e4:8d:49:58:c4:e2:0b:cf:94:94:43:6d:59:f3:26:75:be:
         d5:e3:f8:b3:ca:57:c1:2f:b8:cc:74:64:25:38:7d:23:35:48:
         e4:48:9f:13:8e:0a:50:5d:1e:9b:6f:a2:24:1e:a3:48:33:6c:
         92:3b:5f:98:c8:57:4d:d9:20:be:0e:8e:1b:98:15:a6:ec:ff:
         0b:d9:6d:58:fe:c9:34:e5:93:3e:b9:94:34:fc:6a:49:54:79:
         61:6e:9c:f7:39:d8:80:75:b5:06:b1:98:3d:17:42:6f:c6:60:
         d4:0e:1f:4c:80:3f:72:3a:7b:57:02:bf:b1:ca:7c:2d:6a:69:
         9e:4a:98:93:f5:20:24:00:11:19:d5:dc:45:ce:21:1b:65:a6:
         ed:c0:c9:d0:e9:55:59:47:d3:24:99:b2:12:45:6c:9d:1c:c8:
         43:a9:12:dd:33:80:2c:3c:70:3e:69:f7:ff:54:31:72:58:79:
         11:04:d2:6e:8b:40:f5:37:df:0a:cb:2a:a1:bb:d0:53:b3:c3:
         dd:29:54:5e:30:8a:e9:9e:8b:94:58:2b:3d:0f:9c:2d:e8:bd:
         c9:10:d2:80:37:b7:a8:95:06:d2:81:6e:cb:78:e8:e8:81:f7:
         bb:7e:9a:b1:d7:d2:e0:d2:e7:cf:27:91:18:37:7a:f6:9a:f1:
         f9:a0:fb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:11:14 2026 by rpki-client