Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
File:                     OXH34h0IySQ6u0A_gDBkv3iy2IA.mft (raw, json)
Hash identifier:          /LKpUgmxgzuITFlR0oOF4Co3Sf5Jx6FwArlwBrbJAmw=
Subject key identifier:   B8:62:59:0A:F1:85:5C:13:E9:97:3D:10:08:38:EB:9E:54:68:08:23
Authority key identifier: 39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80
Certificate issuer:       /CN=A913D46F/serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
Certificate serial:       0DC7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
Manifest number:          0D92
Signing time:             Fri 30 Oct 2026 18:04:59 +0000
Manifest this update:     Fri 30 Oct 2026 18:04:59 +0000
Manifest next update:     Fri 06 Nov 2026 18:04:59 +0000
Files and hashes:         1: OXH34h0IySQ6u0A_gDBkv3iy2IA.crl (hash: Tg3+FnmPAZnvaEDGp2qIYwTqcm95/V9pgZkFhMXkps4=)
                          2: 92F8F6D042DA11ED93029A6AC4F9AE02.roa (hash: UDQzazfBuaV3+4EFYL41OYHeyXuzIXRdh8rlJayt6QI=)
                          3: B0B722BEFA4A11EDA47C091DC4F9AE02.roa (hash: Z1URLxTY0TTLZ55tXCgqgDP+6VdIFJvmADvOdJF4n4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl
                          rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 18:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3527 (0xdc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D46F, serialNumber=3971F7E21D08C9243ABB403F803064BF78B2D880
        Validity
            Not Before: Oct 30 18:04:59 2026 GMT
            Not After : Nov  6 18:04:59 2026 GMT
        Subject: CN=6ae4dc4b-36f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:a5:1f:51:d1:57:7c:22:93:0d:6f:36:b5:
                    db:d4:cb:bc:58:66:a7:6f:c8:b5:1c:ae:8b:23:8f:
                    69:64:2f:37:07:9a:bf:4a:c2:06:5c:7e:e6:de:b5:
                    f9:bb:36:84:5f:20:fe:5c:ed:2b:ff:f4:b0:17:9e:
                    94:b0:ee:45:a5:77:14:d6:ec:e2:ca:35:fe:7a:ad:
                    d5:b4:52:0f:42:79:86:85:c4:25:cb:45:ce:99:e4:
                    04:1a:e4:8e:1d:e0:24:de:7d:74:57:58:48:fd:36:
                    6a:ba:14:cc:d3:77:e7:50:bf:24:b4:b0:4a:ac:f5:
                    55:f2:84:75:8e:93:a0:72:28:eb:49:99:eb:5d:cf:
                    fa:67:69:95:98:ea:9b:0d:a7:ee:f1:3d:dd:ec:af:
                    9f:80:61:15:af:27:ad:5f:8e:d1:03:ea:61:00:22:
                    16:44:75:99:1b:ff:9c:e2:0b:2d:c2:e4:6a:e3:de:
                    7c:2e:2f:45:54:2d:eb:ed:42:09:eb:1a:71:ce:75:
                    a3:ec:56:22:eb:6b:46:cc:ed:26:12:07:31:56:cd:
                    4e:d9:ce:f0:a4:19:56:7a:da:55:d6:9d:ba:56:d0:
                    5c:f8:37:05:04:87:43:be:9c:47:33:5e:8a:a8:04:
                    ac:0f:82:7f:c8:f4:08:0e:89:54:f5:5a:3e:49:5f:
                    39:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:62:59:0A:F1:85:5C:13:E9:97:3D:10:08:38:EB:9E:54:68:08:23
            X509v3 Authority Key Identifier:
                keyid:39:71:F7:E2:1D:08:C9:24:3A:BB:40:3F:80:30:64:BF:78:B2:D8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OXH34h0IySQ6u0A_gDBkv3iy2IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D46F/7DA24C7A006911EA8FDB285DC4F9AE02/OXH34h0IySQ6u0A_gDBkv3iy2IA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:75:86:f4:e7:41:e2:62:4d:6c:d5:0c:c1:71:47:8c:ec:b3:
         9f:b4:11:6a:78:f3:02:a2:5f:a9:54:52:4d:e4:06:6f:66:c4:
         db:62:32:28:73:67:64:30:60:71:2c:e6:96:3e:63:27:3a:1d:
         6a:e5:1f:4e:c7:a6:d8:7e:31:bb:9d:8a:1d:48:a7:98:61:f0:
         a1:35:13:93:21:8b:43:a6:2d:2e:0e:17:b5:be:12:76:f5:dc:
         91:77:9b:90:c4:05:68:93:7e:42:5b:37:40:55:07:6e:9b:8d:
         0f:5e:18:fc:49:a2:ab:e1:57:88:78:67:9f:77:98:03:79:67:
         44:e2:fd:00:50:37:b7:15:c8:df:92:ea:d9:09:0d:21:91:0c:
         01:93:a4:8e:3c:a8:1b:42:2e:5f:bc:a3:6f:6f:c8:5f:93:db:
         54:a2:e0:e2:99:13:68:40:dd:85:a1:fd:2b:2d:fa:f3:31:cb:
         37:4e:b1:1e:a0:74:db:a8:0f:6c:bc:16:6c:ea:3b:b1:89:6b:
         58:9f:18:9c:3e:9b:ea:d9:25:1b:e7:9c:d4:bd:8a:93:16:35:
         00:5c:62:f8:e4:ed:af:a8:d6:25:59:31:15:7f:75:62:9c:88:
         ae:bc:dd:9d:b9:0d:b4:b3:34:b1:ae:07:ce:37:2a:d8:e0:72:
         a1:65:e4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:07:15 2026 by rpki-client