Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
File:                     oPv941FZcJK2h-zGQOyF3CnyAXM.mft (raw, json)
Hash identifier:          JwY6HDawSlfwCNa8XeKZ1CzSza75VDqc08Z1n763gJ4=
Subject key identifier:   43:84:2F:7F:0A:EC:C2:28:A7:5C:55:51:FB:6E:12:BC:72:E4:51:5A
Authority key identifier: A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73
Certificate issuer:       /CN=A9140B3F/serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173
Certificate serial:       02A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
Manifest number:          02A0
Signing time:             Tue 27 Oct 2026 01:50:09 +0000
Manifest this update:     Tue 27 Oct 2026 01:50:09 +0000
Manifest next update:     Tue 03 Nov 2026 01:50:09 +0000
Files and hashes:         1: oPv941FZcJK2h-zGQOyF3CnyAXM.crl (hash: K/PLI60qTTMYe5n0tdLZQcqWG5JKGc5L8Z7Q0GgJyPY=)
                          2: 1F63D776D29011EDA849876CC4F9AE02.roa (hash: zHAD2aRjfS80FrmwnylIxolsBZEI+CFeAtlJuiT/1ns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl
                          rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 01:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140B3F, serialNumber=A0FBFDE351597092B687ECC640EC85DC29F20173
        Validity
            Not Before: Oct 27 01:50:09 2026 GMT
            Not After : Nov  3 01:50:09 2026 GMT
        Subject: CN=6ae00351-80bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d1:40:50:b8:6c:89:dc:27:6f:03:e8:f4:77:
                    ab:a8:dd:9c:57:29:35:80:cb:48:a2:c7:6f:e6:7b:
                    d6:79:38:d0:19:e9:82:ff:97:1d:fc:0c:d4:b4:87:
                    71:4c:8e:49:2d:6d:35:be:ba:85:65:76:65:0d:e8:
                    f7:0b:0a:0f:88:a7:f2:6b:0a:02:fc:c0:79:62:f7:
                    d4:5d:79:91:ab:0c:58:14:15:6b:4c:61:a8:a2:6f:
                    dd:db:f6:da:e3:52:6e:41:d9:06:3a:3f:58:10:07:
                    64:71:83:af:ea:23:47:5f:2f:60:7f:6a:f6:cc:18:
                    85:53:6e:68:de:a4:67:34:0e:35:98:a1:d3:92:82:
                    60:ac:2a:5b:8d:06:81:e1:77:9d:06:66:2e:54:27:
                    42:c8:81:6b:85:5c:7b:5b:e0:ea:8f:50:d6:07:e3:
                    d0:7f:4f:09:0d:8c:df:92:35:e0:16:54:41:7f:88:
                    78:5a:55:93:68:1f:fb:c5:82:b8:32:f8:71:a0:f9:
                    93:02:b6:6a:99:e7:82:7b:f0:b1:4c:bc:f2:03:69:
                    8f:0f:41:17:89:72:1c:1b:1d:1e:cb:cc:ad:3f:78:
                    c4:55:b3:53:27:e3:78:1f:3c:e2:8a:aa:a6:26:95:
                    ac:93:15:60:cc:e2:74:f2:20:fa:ac:7a:34:8d:43:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:84:2F:7F:0A:EC:C2:28:A7:5C:55:51:FB:6E:12:BC:72:E4:51:5A
            X509v3 Authority Key Identifier:
                keyid:A0:FB:FD:E3:51:59:70:92:B6:87:EC:C6:40:EC:85:DC:29:F2:01:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPv941FZcJK2h-zGQOyF3CnyAXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140B3F/F8D72CDCD28C11EDBAE9EE6AC4F9AE02/oPv941FZcJK2h-zGQOyF3CnyAXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:25:63:ec:7d:c6:ef:b5:be:df:d0:a2:36:61:9d:1a:b0:85:
         c3:88:29:73:19:86:5d:41:da:85:6c:56:49:8c:b6:a3:1b:12:
         79:8e:11:4a:e0:63:a6:fe:de:dd:42:b1:c0:c7:8a:c2:5c:1c:
         6b:e2:5c:ba:68:3f:04:cf:83:15:50:84:9a:d1:de:bc:ac:09:
         d3:46:a9:8c:5c:8f:7a:91:8c:7c:c8:b3:66:31:7a:64:74:92:
         44:02:f3:81:e6:d2:3d:5c:31:a0:b1:7b:fe:b1:d9:12:40:aa:
         27:e9:e5:58:09:b0:13:c4:02:eb:a8:1e:84:8a:eb:91:8c:b4:
         5e:d4:12:2f:c3:74:b5:48:9c:1c:4c:3c:84:e7:80:d2:47:aa:
         a4:c3:81:83:3e:b3:54:72:45:cf:39:0f:80:19:8f:87:17:c7:
         39:7a:b1:a8:45:b0:4b:9a:8d:8e:b7:a9:84:fd:1f:e7:63:d0:
         58:88:7b:87:13:29:78:20:46:04:ce:df:c7:9d:2f:3a:18:a1:
         22:8f:b8:2b:1e:53:ee:c9:e3:99:6a:92:fa:b8:3b:67:95:17:
         c1:f2:66:e3:7e:9b:31:4c:0e:e8:98:49:f5:57:42:4b:36:bd:
         9a:60:30:dd:9f:bb:d2:20:0b:d5:5e:05:62:e9:7f:dc:16:c0:
         af:8a:18:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBCM0YxMTAvBgNVBAUTKEEwRkJGREUzNTE1OTcwOTJCNjg3RUNDNjQwRUM4NURD
MjlGMjAxNzMwHhcNMjYxMDI3MDE1MDA5WhcNMjYxMTAzMDE1MDA5WjAYMRYwFAYD
VQQDEw02YWUwMDM1MS04MGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx9FAULhsidwnbwPo9HerqN2cVyk1gMtIosdv5nvWeTjQGemC/5cd/AzUtIdx
TI5JLW01vrqFZXZlDej3CwoPiKfyawoC/MB5YvfUXXmRqwxYFBVrTGGoom/d2/ba
41JuQdkGOj9YEAdkcYOv6iNHXy9gf2r2zBiFU25o3qRnNA41mKHTkoJgrCpbjQaB
4XedBmYuVCdCyIFrhVx7W+Dqj1DWB+PQf08JDYzfkjXgFlRBf4h4WlWTaB/7xYK4
MvhxoPmTArZqmeeCe/CxTLzyA2mPD0EXiXIcGx0ey8ytP3jEVbNTJ+N4Hzziiqqm
JpWskxVgzOJ08iD6rHo0jUPSBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOEL38K
7MIop1xVUftuErxy5FFaMB8GA1UdIwQYMBaAFKD7/eNRWXCStofsxkDshdwp8gFz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEIzRi9GOEQ3MkNEQ0Qy
OEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNKSzJoLXpHUU95RjNDbnlB
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29Qdjk0MUZaY0pLMmgtekdRT3lGM0NueUFYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEIzRi9GOEQ3MkNEQ0QyOEMxMUVEQkFFOUVFNkFDNEY5QUUwMi9vUHY5NDFGWmNK
SzJoLXpHUU95RjNDbnlBWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPCVj7H3G77W+39CiNmGdGrCFw4gpcxmGXUHahWxWSYy2oxsSeY4RSuBjpv7e
3UKxwMeKwlwca+Jcumg/BM+DFVCEmtHevKwJ00apjFyPepGMfMizZjF6ZHSSRALz
gebSPVwxoLF7/rHZEkCqJ+nlWAmwE8QC66gehIrrkYy0XtQSL8N0tUicHEw8hOeA
0keqpMOBgz6zVHJFzzkPgBmPhxfHOXqxqEWwS5qNjrephP0f52PQWIh7hxMpeCBG
BM7fx50vOhihIo+4Kx5T7snjmWqS+rg7Z5UXwfJm436bMUwO6JhJ9VdCSza9mmAw
3Z+70iAL1V4FYul/3BbAr4oYJA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:29:31 2026 by rpki-client