Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
File:                     oQCGP_euS0zjitmLfMw3suVvSQk.mft (raw, json)
Hash identifier:          0ofmcXMMHZFB8HAc+nXWcUoLSFM3Gp1S2Qgp37hY3kA=
Subject key identifier:   0A:85:1F:5F:35:D5:C7:D1:67:BD:C1:31:15:93:A0:E2:7D:37:0E:A2
Authority key identifier: A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09
Certificate issuer:       /CN=A913284A/serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
Manifest number:          59
Signing time:             Wed 19 Aug 2026 08:58:45 +0000
Manifest this update:     Wed 19 Aug 2026 08:58:45 +0000
Manifest next update:     Wed 26 Aug 2026 08:58:45 +0000
Files and hashes:         1: oQCGP_euS0zjitmLfMw3suVvSQk.crl (hash: pwjuNKpvNT0kkrrvaSmZr8+aLwc28IOIBQdWn1HWCY0=)
                          2: D1960A28493D11F1A113D1E6B5833773.roa (hash: 3ZGbdg04NB+U1p4ArMrgy7RjHgfQTqsGhjizYBFQoP0=)
                          3: 68869A98493D11F1A62A19BFB5833773.roa (hash: G98XlGylGqD4IWLKPRkQ33JbE0HvP479vwIkVZry/iM=)
                          4: 9EE84698489A11F1AF98834FB4833773.roa (hash: HyVMau6tP4Gxadmevajmg0fDJUTUHCH9joRR5GgFIHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl
                          rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913284A, serialNumber=A100863FF7AE4B4CE38AD98B7CCC37B2E56F4909
        Validity
            Not Before: Aug 19 08:58:45 2026 GMT
            Not After : Aug 26 08:58:45 2026 GMT
        Subject: CN=6a857045-3ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:1d:f2:64:d7:c0:b9:0a:d0:e8:dc:7f:75:
                    bc:b7:00:30:06:29:b6:f2:44:cd:df:83:4e:a6:b1:
                    22:d5:24:8a:57:76:0f:a8:4e:cd:ff:79:6f:0e:28:
                    6a:61:bf:7d:7e:95:72:7c:74:92:ab:3b:49:0c:09:
                    d1:47:ae:53:a9:0d:ef:fc:6f:af:dd:0b:dc:7f:f7:
                    78:8a:15:ff:f4:38:4e:4e:82:84:8f:78:5f:c1:1e:
                    81:07:b9:77:df:1d:bc:0b:87:6f:1a:80:44:72:d8:
                    83:37:09:ef:7a:3d:2b:2c:ce:08:03:7d:8b:de:48:
                    3f:82:64:fa:2c:95:4e:94:ea:ac:eb:d0:c6:cf:cd:
                    61:bc:da:e8:83:71:a4:f8:60:85:5e:ca:f1:a9:35:
                    94:03:c6:77:7f:ff:ce:b7:e4:f6:77:0a:02:b6:6c:
                    5f:1d:f7:e9:03:da:02:0c:51:11:db:3c:c2:07:70:
                    c3:bb:b6:c8:09:79:8f:b2:d9:92:13:7b:90:37:25:
                    34:cf:5b:0b:57:dd:fa:4b:81:73:39:3f:32:69:31:
                    6d:04:d6:03:26:37:cc:9f:02:5a:51:ab:97:d3:5a:
                    aa:16:58:6f:c3:d7:46:1b:cb:4a:73:7d:07:79:63:
                    15:16:bf:64:1d:02:4d:61:88:e2:c6:c8:50:6d:ba:
                    0f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:85:1F:5F:35:D5:C7:D1:67:BD:C1:31:15:93:A0:E2:7D:37:0E:A2
            X509v3 Authority Key Identifier:
                keyid:A1:00:86:3F:F7:AE:4B:4C:E3:8A:D9:8B:7C:CC:37:B2:E5:6F:49:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQCGP_euS0zjitmLfMw3suVvSQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913284A/854C0F5C1D2B11F1B91266B5153D8C67/oQCGP_euS0zjitmLfMw3suVvSQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:32:e9:4b:1f:4a:04:13:8d:ad:56:ca:a6:1f:02:b3:61:
         9c:43:8d:a8:1f:36:26:48:6a:73:50:49:44:38:d5:e8:e1:8e:
         c9:b1:9f:2b:e6:00:69:83:e7:14:a6:00:a7:05:95:18:12:97:
         bf:68:00:3f:b4:fb:a0:14:d6:3d:a7:b8:a8:af:7c:be:ad:78:
         cf:83:1a:af:e8:b4:37:c3:ec:59:a8:aa:8a:75:11:03:99:8b:
         0a:39:3c:96:15:c5:95:58:6a:21:85:01:61:25:df:9a:1d:60:
         0a:2d:53:af:35:4f:f8:be:a8:f2:a0:b0:a6:80:f6:2d:5f:69:
         04:e3:12:44:03:7a:3c:55:02:41:b9:39:ca:2a:4f:72:f2:6b:
         1d:4f:51:5c:36:19:1e:c2:d4:e8:85:01:51:17:ad:20:74:94:
         fd:a3:a6:a9:27:d7:dc:47:67:55:21:a7:44:50:b7:dc:ef:eb:
         35:9d:e1:de:f9:10:6a:b1:cd:01:29:b1:a9:5d:62:da:a8:ae:
         c0:20:0b:2c:32:a9:04:8d:d5:70:a5:ee:57:20:c1:e5:04:fd:
         fe:22:1f:e8:a8:61:5e:2b:8c:e7:ae:a6:d1:cd:2a:04:40:af:
         da:be:5c:63:fb:e5:ef:dc:9d:8b:54:8d:f3:83:ef:1e:3e:77:
         af:f5:ca:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:17 2026 by rpki-client