Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
File:                     oL8weU5q5J7AaNUDjPmv9UNdHdI.mft (raw, json)
Hash identifier:          W6f68LWF/vcvzMquoY5fG1dFS1Dsen1lgSZ8aiVbn5M=
Subject key identifier:   C6:AE:E5:96:BA:85:D8:BD:A8:7A:13:50:BE:9D:94:80:03:A0:B6:FC
Authority key identifier: A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2
Certificate issuer:       /CN=A91597A7/serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
Manifest number:          97
Signing time:             Wed 19 Aug 2026 08:04:52 +0000
Manifest this update:     Wed 19 Aug 2026 08:04:52 +0000
Manifest next update:     Wed 26 Aug 2026 08:04:52 +0000
Files and hashes:         1: oL8weU5q5J7AaNUDjPmv9UNdHdI.crl (hash: 73V1Ay+SljOZk6m3tC6xdJLRVxo0429+7HKGfYC9/x0=)
                          2: 6DD11538BA6711F0A5E1473EC4F9AE02.roa (hash: aZcuk92cPHBLPT7kL0kkLxHikI+2JffenZZL+WJEXRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl
                          rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91597A7, serialNumber=A0BF30794E6AE49EC068D5038CF9AFF5435D1DD2
        Validity
            Not Before: Aug 19 08:04:52 2026 GMT
            Not After : Aug 26 08:04:52 2026 GMT
        Subject: CN=6a8563a4-8225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:91:f3:4f:7e:b5:74:2a:90:1a:2d:15:7b:
                    6b:6e:a0:49:8d:11:ef:56:76:63:fe:09:b1:7a:6f:
                    35:35:c3:92:47:d7:57:77:10:56:6d:70:41:5b:26:
                    28:3d:6d:fd:3a:19:a8:43:8f:eb:9b:46:dd:58:26:
                    68:9d:e2:09:24:15:77:17:e8:4b:f5:8e:3a:cd:5c:
                    d6:28:f7:82:df:47:0b:fa:15:43:88:ab:cd:05:f8:
                    87:18:a8:35:55:9e:aa:16:05:e3:80:d0:79:b4:e1:
                    8f:11:9d:c3:2b:58:22:54:84:31:7a:f1:07:4f:48:
                    4e:9e:09:19:b3:eb:41:f8:9e:4d:8f:64:94:14:a3:
                    21:3e:c7:0b:b9:a8:94:85:f6:6a:13:cd:66:b3:e7:
                    96:65:dd:f5:23:55:a0:f7:b1:65:71:dd:fe:ac:8a:
                    db:ac:65:48:d3:40:1d:c9:93:78:61:42:fa:dd:91:
                    2e:f3:cf:4f:25:78:e7:89:4a:bd:15:08:a5:5b:55:
                    fd:85:58:d1:ed:cc:34:ab:47:31:bc:2c:59:aa:cb:
                    93:89:aa:b4:1e:a4:01:52:c6:27:23:6b:5b:26:e6:
                    94:f9:51:dc:69:44:e6:e5:25:40:0a:9d:95:6f:a4:
                    2c:ad:0c:90:fc:54:62:ba:e9:4e:dc:17:e4:73:a0:
                    c0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AE:E5:96:BA:85:D8:BD:A8:7A:13:50:BE:9D:94:80:03:A0:B6:FC
            X509v3 Authority Key Identifier:
                keyid:A0:BF:30:79:4E:6A:E4:9E:C0:68:D5:03:8C:F9:AF:F5:43:5D:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oL8weU5q5J7AaNUDjPmv9UNdHdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597A7/01022782BA3811F093408F6BC4F9AE02/oL8weU5q5J7AaNUDjPmv9UNdHdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:17:66:57:6f:a2:e1:14:9b:da:ba:4c:ff:93:1b:f6:e5:35:
         f1:07:a7:ec:4a:46:4f:21:15:7a:37:42:ce:58:dd:4e:8d:35:
         7a:cd:95:0a:48:0e:ba:63:0a:67:c0:df:63:a6:fd:87:67:82:
         19:b9:be:59:79:91:fa:ed:0c:f0:46:89:e5:03:bd:81:e9:6d:
         a4:3f:fa:e0:09:b2:51:80:de:b1:0a:4c:33:8c:08:03:05:da:
         cc:7a:e4:06:62:e9:a7:91:51:0b:4e:3f:ce:36:5b:46:b9:fc:
         3c:05:f1:27:70:6f:d8:c3:9b:9a:f4:cb:5d:a1:16:a5:03:3d:
         c7:bb:7c:76:df:e4:a0:de:de:b6:95:bb:ae:f8:74:9f:5a:49:
         bb:58:54:24:cb:fa:fc:d1:69:20:a9:50:5b:0b:b6:55:2f:de:
         5a:96:67:7a:5b:cf:b8:53:86:4a:3b:33:3c:55:d8:cb:aa:f0:
         9a:6d:04:30:45:0b:9a:2f:6e:a9:52:f3:69:99:a6:16:e2:52:
         d7:b3:b1:f5:16:cc:c8:c8:4f:ca:32:84:cd:ac:bb:b1:e2:ef:
         a6:4d:f7:04:4e:c6:53:c0:1a:13:cb:57:9c:e4:13:29:9e:71:
         25:9f:07:ad:57:52:14:33:5c:7e:59:28:89:c7:2c:fb:08:51:
         b4:54:67:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:58:50 2026 by rpki-client