Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
File:                     OVr1eRN2M5r53uVtah4TtHq1xGY.mft (raw, json)
Hash identifier:          JgB4rV/3i9Tdo5bvuqm/buKW3y5BDb5OKdaWypzS8V4=
Subject key identifier:   47:6C:E2:0A:C2:2C:23:90:98:A2:BC:BC:67:45:CD:D2:DF:25:8D:AC
Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66
Certificate issuer:       /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
Manifest number:          0729
Signing time:             Mon 26 Oct 2026 23:23:08 +0000
Manifest this update:     Mon 26 Oct 2026 23:23:08 +0000
Manifest next update:     Mon 02 Nov 2026 23:23:08 +0000
Files and hashes:         1: OVr1eRN2M5r53uVtah4TtHq1xGY.crl (hash: nUvkDn5BnPwx8uaFteQ9kPs+Fx3WCN9Xjx7MfrBZ5kg=)
                          2: C6EFDF5C0C3311EFB37BD03FC4F9AE02.roa (hash: rUV9zu+LXsEi7mN7osCEnUxo/cr8mt6t5o12W9CPPBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl
                          rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 23:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91316B0, serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466
        Validity
            Not Before: Oct 26 23:23:08 2026 GMT
            Not After : Nov  2 23:23:08 2026 GMT
        Subject: CN=6adfe0dc-ae1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:6d:34:4b:db:40:4a:19:44:57:42:5a:2c:
                    aa:c1:25:6a:9d:30:b9:cf:e8:fe:25:af:ee:81:b6:
                    99:4d:5c:ba:b2:9b:4d:4a:da:ce:d4:99:4d:0c:03:
                    1d:a6:fd:66:5a:53:cc:2d:be:f2:2f:e7:f3:99:95:
                    04:bf:b7:ca:4d:95:dc:9b:51:dc:7b:74:67:fe:8d:
                    a7:a8:41:ad:b6:2d:ec:14:47:98:31:3b:08:54:24:
                    ad:ec:e8:39:af:56:7e:cf:48:1d:b6:4f:c4:88:53:
                    59:cc:42:32:da:6b:d4:c7:9e:a3:bf:63:4e:5f:80:
                    92:80:20:0b:5a:2f:34:c5:d0:70:14:ad:50:79:4c:
                    8b:fd:dc:e5:fd:eb:3a:49:0f:82:59:e5:b4:af:79:
                    b7:d1:66:09:6a:69:a6:9e:00:49:8f:11:8c:39:d1:
                    06:6b:35:3d:b7:5a:95:1c:eb:54:f0:b1:e4:24:d1:
                    81:eb:f0:70:6a:a2:72:8e:d3:54:59:58:09:f3:69:
                    94:f8:1b:34:7a:d1:3f:e9:67:33:13:62:aa:cb:ca:
                    85:b7:00:ec:14:f3:b3:62:ad:0c:47:75:ce:48:de:
                    05:25:a9:0e:d6:16:7d:0e:e5:5e:b0:05:fe:9c:cd:
                    92:6f:ec:bb:e4:ac:84:29:0a:03:17:da:74:b1:f0:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6C:E2:0A:C2:2C:23:90:98:A2:BC:BC:67:45:CD:D2:DF:25:8D:AC
            X509v3 Authority Key Identifier:
                keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:43:9a:44:65:b1:8e:b7:aa:40:c6:ec:1b:0e:a0:12:14:5b:
         8b:9b:0c:5c:63:98:14:f7:18:7b:a9:c2:dd:07:5f:0a:79:ab:
         9e:3d:86:cc:2e:a0:dd:2d:64:83:1a:1c:be:82:a1:8c:4f:51:
         ff:1c:0a:17:bf:45:b1:b1:b0:03:c2:e5:71:68:d5:9d:bc:d1:
         ae:f8:61:37:dc:51:ed:d5:13:4c:cd:6a:ba:67:37:71:aa:2b:
         05:c3:18:a8:00:35:28:79:2c:8c:8f:d1:84:53:41:5b:b6:77:
         75:e5:d7:12:17:9b:d0:8e:02:9c:39:15:5d:f2:ff:51:d8:0b:
         ec:bc:fe:26:ed:c5:68:0c:8e:e8:ad:b3:47:84:86:ce:a0:b2:
         9d:5a:11:90:6f:68:29:0a:a8:f4:3b:ca:b5:b0:15:60:a6:e8:
         69:d2:89:61:01:f1:93:c1:e0:39:16:1a:77:28:b2:c8:3a:af:
         8a:2f:0f:07:49:6b:41:d9:22:e3:34:9c:63:92:b4:d5:6f:33:
         d2:de:df:da:82:ef:34:04:64:09:2f:b2:21:e9:ba:f1:0e:3e:
         ce:8b:18:cc:02:84:69:5f:66:02:87:54:59:a1:36:76:81:12:
         69:1d:61:9e:a9:b8:17:5b:01:b8:5e:35:f1:c5:3c:ec:37:93:
         e6:37:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:44:49 2026 by rpki-client