Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
File:                     OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json)
Hash identifier:          XJLwmFfUB7f235CzS9xYTTsrguGOdEmOeETqtPoBMEA=
Subject key identifier:   36:44:2E:FD:0F:0F:6C:51:91:C3:53:C8:D8:28:4E:42:CC:98:99:12
Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66
Certificate issuer:       /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
Manifest number:          06F5
Signing time:             Fri 04 Sep 2026 23:20:12 +0000
Manifest this update:     Fri 04 Sep 2026 23:20:11 +0000
Manifest next update:     Fri 11 Sep 2026 23:20:11 +0000
Files and hashes:         1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: kNHHOpsMx5sh3Rk53Gq5f4oroOAndK3dl1G09VIDpYk=)
                          2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: rUV9zu+LXsEi7mN7osCEnUxo/cr8mt6t5o12W9CPPBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl
                          rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91316B0, serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466
        Validity
            Not Before: Sep  4 23:20:11 2026 GMT
            Not After : Sep 11 23:20:11 2026 GMT
        Subject: CN=6a9b522c-5244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:20:f4:4f:f7:50:15:ef:98:8d:10:6e:01:
                    6c:d1:e0:c2:88:42:c2:e0:a9:1b:50:91:60:3a:a2:
                    8b:7a:bd:8d:79:81:2a:e3:74:17:66:dd:57:1d:a2:
                    2a:56:c6:2c:c6:5e:b8:aa:5c:73:86:ee:4e:ab:0b:
                    dd:7c:0d:66:b7:b9:78:b6:c8:fb:30:33:10:d5:0a:
                    8e:7b:5b:c6:a5:c1:c4:88:f7:79:63:7a:52:69:f7:
                    7e:2c:f6:12:48:26:88:bc:a8:d7:d2:42:5b:03:00:
                    5a:a1:e9:4f:94:4b:b3:39:4e:84:ca:fe:74:15:39:
                    99:8a:a3:bb:d3:30:31:1c:f1:a7:6e:91:bd:85:70:
                    40:24:80:fe:39:c7:25:ca:31:e3:10:92:ad:77:8a:
                    67:94:1c:92:11:45:2b:74:22:5d:a5:36:54:3f:07:
                    97:c1:36:de:22:1e:a1:e4:9d:2b:c4:3c:12:91:c3:
                    9c:02:79:47:d7:7c:7c:86:b7:5b:cc:1f:85:f6:5c:
                    72:eb:94:ee:1d:8c:27:35:67:5a:d8:41:cc:dd:34:
                    ad:3b:1b:12:b6:f6:00:62:b3:61:94:76:6c:6e:3e:
                    b7:6c:2e:e9:29:91:f3:8d:06:bb:9e:f7:57:6a:9b:
                    eb:58:53:12:3b:99:cf:49:26:91:a4:e5:6f:b5:8c:
                    ea:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:44:2E:FD:0F:0F:6C:51:91:C3:53:C8:D8:28:4E:42:CC:98:99:12
            X509v3 Authority Key Identifier:
                keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c6:58:40:c1:44:87:0c:27:3d:54:f6:05:41:ce:3c:6a:67:
         fa:d7:eb:ef:6e:97:48:79:84:c4:ee:65:38:b0:ab:6c:20:98:
         e4:83:25:e5:54:ce:13:67:ab:f7:0a:9a:05:66:60:83:ba:dc:
         7a:04:3c:6b:88:c8:82:31:de:93:85:03:53:f7:bd:7f:0e:04:
         ef:46:d6:bc:b7:be:57:99:88:5d:39:d4:f2:9d:e5:99:9b:59:
         88:95:76:1e:b1:91:97:b2:92:6f:82:49:63:3a:57:5a:09:d4:
         68:4c:0b:0a:2b:29:da:9f:cd:b9:6d:18:3c:4b:f7:87:89:61:
         0b:ed:b2:52:a3:fb:56:01:43:08:18:9d:6f:b3:51:fb:10:b7:
         f3:a7:73:a8:62:f1:bb:a4:fc:1b:75:f7:b9:68:89:3e:33:11:
         9c:53:df:0e:23:49:06:23:30:10:63:40:f8:43:61:a6:b6:2c:
         3e:ef:b8:71:d2:ea:1d:1f:55:5b:c6:aa:0f:75:fb:3f:5d:3f:
         2b:c9:67:08:2c:d1:1e:77:7c:f6:67:7e:15:56:9b:93:d9:5b:
         3b:2a:a9:d4:c3:c4:d1:bd:19:75:0d:05:74:6f:8c:b5:c8:c0:
         5c:49:43:52:0d:e8:e0:28:6c:ba:0e:c6:1c:c1:b6:61:ed:1d:
         5f:b3:04:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2QjAxMTAvBgNVBAUTKDM5NUFGNTc5MTM3NjMzOUFGOURFRTU2RDZBMUUxM0I0
N0FCNUM0NjYwHhcNMjYwOTA0MjMyMDExWhcNMjYwOTExMjMyMDExWjAYMRYwFAYD
VQQDEw02YTliNTIyYy01MjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnxIg9E/3UBXvmI0QbgFs0eDCiELC4KkbUJFgOqKLer2NeYEq43QXZt1XHaIq
VsYsxl64qlxzhu5OqwvdfA1mt7l4tsj7MDMQ1QqOe1vGpcHEiPd5Y3pSafd+LPYS
SCaIvKjX0kJbAwBaoelPlEuzOU6Eyv50FTmZiqO70zAxHPGnbpG9hXBAJID+Occl
yjHjEJKtd4pnlBySEUUrdCJdpTZUPweXwTbeIh6h5J0rxDwSkcOcAnlH13x8hrdb
zB+F9lxy65TuHYwnNWda2EHM3TStOxsStvYAYrNhlHZsbj63bC7pKZHzjQa7nvdX
apvrWFMSO5nPSSaRpOVvtYzqiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZELv0P
D2xRkcNTyNgoTkLMmJkSMB8GA1UdIwQYMBaAFDla9XkTdjOa+d7lbWoeE7R6tcRm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF
M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01cjUzdVZ0YWg0VHRIcTF4
R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09WcjFlUk4yTTVyNTN1VnRhaDRUdEhxMXhHWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9PVnIxZVJOMk01
cjUzdVZ0YWg0VHRIcTF4R1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE8ZYQMFEhwwnPVT2BUHOPGpn+tfr726XSHmExO5lOLCrbCCY5IMl5VTOE2er
9wqaBWZgg7rcegQ8a4jIgjHek4UDU/e9fw4E70bWvLe+V5mIXTnU8p3lmZtZiJV2
HrGRl7KSb4JJYzpXWgnUaEwLCisp2p/NuW0YPEv3h4lhC+2yUqP7VgFDCBidb7NR
+xC386dzqGLxu6T8G3X3uWiJPjMRnFPfDiNJBiMwEGNA+ENhprYsPu+4cdLqHR9V
W8aqD3X7P10/K8lnCCzRHnd89md+FVabk9lbOyqp1MPE0b0ZdQ0FdG+MtcjAXElD
Ug3o4Chsug7GHMG2Ye0dX7MEQA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:56:35 2026 by rpki-client