Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
File:                     ORjYC8twLsrPhMt6yogPh4oU_kg.mft (raw, json)
Hash identifier:          5SQ/nPfKLQ3U248J7hIvaPJFcvSZBayDgMCJQBQARzY=
Subject key identifier:   0F:1D:85:A7:D9:6D:52:B0:20:64:E1:0C:16:88:C2:A7:B9:62:DF:24
Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
Certificate issuer:       /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
Manifest number:          0259
Signing time:             Thu 29 Oct 2026 03:28:23 +0000
Manifest this update:     Thu 29 Oct 2026 03:28:22 +0000
Manifest next update:     Thu 05 Nov 2026 03:28:22 +0000
Files and hashes:         1: ORjYC8twLsrPhMt6yogPh4oU_kg.crl (hash: /qaeX3mrmyJq8UZc7hcy6iyWZzlg2swQDIOjVldo2GA=)
                          2: 2A01310EC16311F18FE561465911F970.roa (hash: oMdqNBacMju7uLN3JgNAXjRJ2Oc6Y7lPPtFAMPz05uU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
                          rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 03:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
        Validity
            Not Before: Oct 29 03:28:22 2026 GMT
            Not After : Nov  5 03:28:22 2026 GMT
        Subject: CN=6ae2bd57-05dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5f:31:d6:9a:78:d8:44:f9:1b:bc:ee:85:4a:
                    b7:49:d5:41:1c:80:c4:67:36:2c:24:83:1a:51:dd:
                    99:a4:4c:50:16:f6:41:3f:da:48:38:8e:7b:e2:af:
                    74:0f:94:53:de:e2:32:28:aa:44:e6:1b:0a:e6:8c:
                    59:e7:51:a3:50:b4:a0:5a:e2:69:ac:17:1f:7c:7f:
                    36:cb:16:73:50:29:f9:35:16:b0:73:82:de:03:7f:
                    87:50:80:b9:d9:06:df:d2:17:20:08:a5:a5:f1:14:
                    5b:62:71:58:16:21:38:55:12:74:19:22:b5:5f:af:
                    b8:7e:ed:31:50:df:53:dd:ca:2c:91:6c:a3:8e:92:
                    18:6d:52:b7:75:1e:f2:50:ca:8c:4a:ee:b2:89:a3:
                    af:eb:2b:3d:2c:26:5b:aa:f9:99:26:d8:9d:d1:bd:
                    f8:a5:03:66:4e:15:3a:0b:d1:04:47:3c:bd:67:e8:
                    3e:35:b2:fb:58:ed:3f:32:81:d5:6f:47:40:eb:27:
                    5f:81:7a:c0:09:76:eb:3f:44:b6:08:67:7a:16:5b:
                    51:4a:28:59:8f:30:7e:ba:21:08:26:72:57:10:6f:
                    35:ed:9d:64:34:da:ff:24:2c:92:d3:12:60:91:2e:
                    c2:64:9a:c4:69:a0:36:05:fe:eb:25:70:03:cd:b4:
                    26:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1D:85:A7:D9:6D:52:B0:20:64:E1:0C:16:88:C2:A7:B9:62:DF:24
            X509v3 Authority Key Identifier:
                keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ad:e6:d6:cd:50:e8:dd:96:a5:3a:cf:ea:68:d6:8c:ca:81:
         7d:30:16:8c:52:8e:7e:65:b1:b5:e2:ef:e7:f4:c8:65:2d:70:
         c2:a2:d2:92:0a:44:e8:9c:90:19:6a:1b:be:99:e4:5c:1e:b8:
         af:fe:76:dd:31:25:b2:de:f7:e9:d8:c2:1b:d0:f0:cd:7d:2c:
         7a:41:62:e2:29:4f:59:95:8b:3d:7f:20:db:d7:3c:ae:2f:68:
         dd:22:38:a9:b1:2f:03:2a:0b:dd:56:67:1e:6d:c3:ab:ef:50:
         0d:49:8e:d6:5a:be:0d:b8:de:38:50:9b:4b:ee:77:d8:7d:16:
         9a:f1:a4:e2:ac:ac:af:7e:74:21:5e:cf:13:55:18:98:9a:46:
         0b:fe:fe:35:f9:4b:c4:8f:60:4c:ea:cd:89:fc:c2:07:08:f1:
         9c:70:eb:31:d5:51:a7:0b:09:cd:66:62:27:a9:e5:6a:d4:97:
         48:69:c5:1e:ba:4d:86:28:59:0b:e4:0f:2d:35:a8:bc:7b:bd:
         a6:d0:7b:36:a4:a1:83:47:b7:94:51:0f:b2:9b:88:a7:ff:85:
         81:49:19:fc:86:fd:b6:f8:c3:9b:3b:81:8f:e6:a2:2b:40:bf:
         8d:ae:aa:fb:45:83:c2:d5:15:d6:d2:20:d6:7d:2f:85:60:48:
         f9:68:bd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 10:58:28 2026 by rpki-client