Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
File:                     Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft (raw, json)
Hash identifier:          N9QWTCDFgP6uzfzy+566JXiHFrknOB7q0Q3RH243nBE=
Subject key identifier:   E1:FB:AA:3F:38:31:06:CC:D1:F6:5A:0C:01:D3:DF:04:8B:5F:22:32
Authority key identifier: 3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88
Certificate issuer:       /CN=A91463ED/serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188
Certificate serial:       01F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
Manifest number:          042B
Signing time:             Wed 19 Aug 2026 02:57:05 +0000
Manifest this update:     Wed 19 Aug 2026 02:57:04 +0000
Manifest next update:     Wed 26 Aug 2026 02:57:04 +0000
Files and hashes:         1: Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl (hash: 01345HPuEKy/W13jPLtwMDEpwuJecNK0zLVlz4vxcVU=)
                          2: C3B1BC3EDAD711EF9CD3BE5CC4F9AE02.roa (hash: lDdGjr2xBXdDfbk6ojZCpTh/5gnireZrfjXRJmqAla0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl
                          rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91463ED, serialNumber=3A7A37FBBA49C469ADAB5266456C9A45F2CFC188
        Validity
            Not Before: Aug 19 02:57:04 2026 GMT
            Not After : Aug 26 02:57:04 2026 GMT
        Subject: CN=6a851b81-75dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:08:ff:c1:3a:53:4e:0f:bf:a3:4d:b6:d6:df:
                    af:85:2f:12:dd:94:63:36:5a:62:34:ba:fd:2b:e3:
                    93:87:e0:0f:79:f2:5c:a9:00:04:fb:85:98:ea:90:
                    2b:9f:1f:bf:71:85:3d:68:04:cf:9e:21:c7:26:29:
                    56:a3:39:fb:21:18:65:ab:e2:ba:a8:53:0a:10:6b:
                    37:c4:33:13:cc:70:d3:c4:91:8d:49:fd:2b:8b:b4:
                    eb:0f:0a:d8:36:9b:89:f0:3b:06:7b:ac:2a:05:ca:
                    ed:a5:7a:9d:d1:3d:85:2b:38:d4:6d:5f:69:39:01:
                    e7:0e:24:64:44:e8:5b:4c:66:bc:df:3b:7d:e3:03:
                    b5:1d:cd:65:97:3d:18:a4:c7:d6:d0:54:ef:44:13:
                    14:0b:7c:a4:63:ce:d4:d9:59:c4:a3:9a:b4:2c:b1:
                    ca:c1:cd:73:fa:0b:6f:e7:94:da:67:00:bf:ab:a4:
                    df:b6:db:39:2a:c7:7e:13:fa:fd:69:ca:96:7a:07:
                    15:fe:0d:f3:8e:f1:c0:a0:ef:00:d0:3d:a4:79:b5:
                    b3:d1:a1:38:31:e9:f7:cc:ae:85:e4:12:2f:be:08:
                    d5:71:24:0d:b2:9e:83:bf:2e:4e:6f:7d:e6:00:e6:
                    ab:77:08:94:df:c6:ff:46:63:4b:4b:4a:7a:cb:bf:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FB:AA:3F:38:31:06:CC:D1:F6:5A:0C:01:D3:DF:04:8B:5F:22:32
            X509v3 Authority Key Identifier:
                keyid:3A:7A:37:FB:BA:49:C4:69:AD:AB:52:66:45:6C:9A:45:F2:CF:C1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ono3-7pJxGmtq1JmRWyaRfLPwYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/Ono3-7pJxGmtq1JmRWyaRfLPwYg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c2:e8:bc:a6:f6:76:65:6f:82:51:28:44:fa:61:ef:9e:9c:
         c7:ac:aa:06:75:97:e5:7e:9e:9e:a9:57:c3:43:79:15:23:7a:
         31:25:84:3e:ff:98:b9:a4:00:3c:fd:5f:d7:b2:3c:98:3e:1e:
         93:23:68:3d:a1:05:b8:e1:a6:84:19:69:7a:7f:f8:d8:a1:f5:
         8d:56:96:0c:c5:0b:77:dd:0b:71:9d:08:8d:a1:20:83:b9:b0:
         9d:b8:92:9c:82:6c:76:19:a8:50:e6:3e:cc:88:53:66:df:14:
         b9:c1:ba:c9:48:36:34:a9:a3:76:6a:cf:b9:1d:91:bf:49:d8:
         be:f5:12:50:2d:47:1f:d5:cc:f7:90:30:2c:50:ea:63:34:af:
         c3:d0:79:f4:93:13:31:0f:a8:4e:9e:6a:25:38:e0:7f:80:6e:
         f8:d3:8d:a8:b6:81:f1:0b:7d:6c:38:7f:99:15:44:88:3f:33:
         6c:52:eb:3f:e6:55:d8:cc:73:16:83:95:45:ec:e7:63:1b:26:
         46:78:ce:58:ff:09:d4:1f:1e:c5:e9:e9:b4:fa:c1:6d:b2:8a:
         de:ee:6b:13:af:42:98:08:69:13:80:bb:39:25:ad:8a:5e:ec:
         a9:57:7a:ed:ea:ae:1e:c0:64:18:f3:b6:d9:db:92:61:84:12:
         87:4c:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:54 2026 by rpki-client