Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File:                     OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier:          TlAhMvJr8rIcCHb2wJ2jxyBw6rhxbMc5UhZQNzxjkIs=
Subject key identifier:   82:88:44:FD:8B:28:41:35:96:C2:7F:36:CA:EC:E5:BB:5C:3A:0D:4B
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       1120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number:          0DDF
Signing time:             Thu 10 Sep 2026 19:30:28 +0000
Manifest this update:     Thu 10 Sep 2026 19:30:27 +0000
Manifest next update:     Thu 17 Sep 2026 19:30:27 +0000
Files and hashes:         1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: Q8zElWMWHLE14D6irh1WZ+KR4gb9+CXin4sJBTqObnE=)
                          2: 828582C0A86E11F193CD69338DEE528E.roa (hash: PEAMS+JcUBbJmoDUk/5caTQr/nmlDhvLkqiOvQ0x5+E=)
                          3: 17C682F0A93A11F18470373E4611F970.roa (hash: UoUonoxcz32hCS+nzKx1/bPahuNcH5NAqAErry4yJng=)
                          4: 16BA5B98A93A11F18470373E4611F970.roa (hash: by2PmBKjFHDRN9KMDxYLXnhnDUxjNhPvkMoqOR2fpcE=)
                          5: 6D2E74CE119511F18720E261383D8C67.roa (hash: 8hV+I/mqYZMZ3vIhGJc/3XoKmvvL+nj8+XqDRjhEKdk=)
                          6: 07AFB46A568111F1BFDD8E7BA2833773.roa (hash: yfKdesidxCMN1gVqPrjX1K+cLZySbATzoDb2CHkBYks=)
                          7: 74B6DA6279E411F1AFD43C6B67A30FBC.roa (hash: U+H7L/ofyPQZFJa38dMWolZ1cJVS961sABk6WtiUdB8=)
                          8: B2A621DADA4711F0A0B4C6A990D3641D.roa (hash: 0zLruqLd1y3E26SuAUI5s7BI64FwkLMd9kXmrMpepI8=)
                          9: 4F892B3E79E211F186F7A31866A30FBC.roa (hash: Grkkrl99VNi5MICWLKTFyVceKxzaNnh3d7iazSAthD0=)
                          10: 4C692978419711F1B231ABB69F833773.roa (hash: UZQW+0F1dRZZBBiWPkbFFXHyN33i8KEo5/rLlvr3pWQ=)
                          11: D9419C8A39B911F1AC578A42AE833773.roa (hash: vClFwDnBe/aORZidJmMRYItqmX7blZQLjJtOhh5864M=)
                          12: 849E45A839B811F1B2456B00AE833773.roa (hash: NIopzKgjt4Tj6l5DHK6hyouyjYzBxpc2yEAWeW/rLjM=)
                          13: B1A746BADA4711F0A0B4C6A990D3641D.roa (hash: lIkl2NY+Awo03/dF05stBpELHB4nLbupIltgZJsoD+k=)
                          14: 65020FA2288011F1BBF58DB5A8833773.roa (hash: CfmjuBN1rNbZyskDqQxFmA1KjEcxKYO1FiTAHfTToFo=)
                          15: BE73AF6E4F9A11F1A2D5B2D798833773.roa (hash: E10hcKgn2aVOs3EMX1rQ7YX9LRhvTSuVT7fXJkKTPHo=)
                          16: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: fLAof7EN40ztkzN10YcbHQELHkhYt0IIW6Znw2IZaqs=)
                          17: F85564DA127711F18BE24F01353D8C67.roa (hash: W4FJg9h2yD393Ffa6VXVJzFyZbTn5L3T36PgxiREF00=)
                          18: 8dGmB_rjCduiA5gacvFfz-CchFQ.asa (hash: zt1aa+pxSfuL6A44R86Qov6zVJzYPeS7hFwUUgZgyf0=)
                          19: 4CE25F844D5211F1B621E394CB833773.roa (hash: ARK2orve9gNmHud0kkpYwIAw265outluv4xLA1M1pus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4384 (0x1120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Sep 10 19:30:27 2026 GMT
            Not After : Sep 17 19:30:27 2026 GMT
        Subject: CN=6aa30554-31f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:a9:1f:5d:48:3e:74:b2:16:ab:42:7f:9d:
                    9f:45:c8:7b:1c:29:a2:b2:bf:09:d7:85:41:fa:30:
                    3c:c4:bf:50:85:c6:e1:fd:76:fd:e1:1d:7b:28:7d:
                    5a:96:bc:6c:6b:ee:7f:07:f1:b5:f4:e3:c6:d6:0e:
                    e2:1c:ab:cc:a6:80:80:f5:cf:02:39:f1:d2:f2:54:
                    12:43:0d:4f:dc:34:aa:e4:52:3c:e9:6b:74:8a:09:
                    52:74:05:e4:8d:0d:e4:a9:05:7b:d4:d4:79:ba:ae:
                    5f:9d:9a:a3:8b:3f:99:88:29:36:9d:a2:1a:f6:70:
                    5f:4c:d7:cc:11:7e:46:2f:e3:a0:75:c8:34:c6:f7:
                    e8:70:eb:67:f9:b2:fa:d1:1b:5c:fa:20:25:09:1d:
                    7e:07:43:7b:79:c6:83:99:0c:10:7a:31:53:47:0a:
                    a3:e2:42:0b:56:d9:78:25:79:85:95:ad:3e:c5:1a:
                    be:c9:3f:2d:57:f4:57:be:83:32:6f:18:1e:72:ef:
                    1b:b2:2e:10:b0:85:71:28:9d:95:7a:cc:12:1e:34:
                    89:d2:1d:b5:13:f3:32:69:67:13:88:91:20:9a:62:
                    38:d8:55:95:3d:4d:a9:ad:4d:93:a4:2c:02:48:05:
                    31:93:64:2f:2e:e5:b7:01:ac:02:25:fa:ff:56:3d:
                    05:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:88:44:FD:8B:28:41:35:96:C2:7F:36:CA:EC:E5:BB:5C:3A:0D:4B
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:67:a1:a1:af:08:bc:af:50:c1:42:68:e1:a8:37:6f:1a:fd:
         ae:30:ae:5e:6f:22:f7:62:f7:93:4d:45:f5:23:b5:27:b4:70:
         2c:8d:0b:82:c6:b6:be:3f:40:d7:85:b9:b4:ca:b8:64:7f:19:
         9e:76:c4:be:b4:64:6d:1c:03:c1:07:76:41:ca:a3:84:d3:bb:
         f6:2f:4b:b4:95:7b:83:e7:95:29:ce:ec:9f:c0:e2:0a:d0:2f:
         cc:06:19:a7:9c:90:1f:88:88:3c:2c:2b:4d:7f:8f:88:be:bd:
         89:33:f7:ed:01:79:da:b5:e6:9a:c4:0a:2f:df:d8:04:c3:95:
         dc:7c:47:60:d7:6f:bf:be:75:e3:01:7d:c5:7d:25:8f:4b:63:
         3b:52:34:57:c2:2b:24:83:3d:a4:4e:86:05:46:08:b1:75:4a:
         26:9e:4f:97:11:76:30:db:5a:ba:e9:40:75:0e:3e:e3:19:42:
         02:e7:df:8a:c0:06:60:d8:b5:89:39:a0:12:27:e3:4d:56:be:
         45:ec:8e:d6:2f:dd:6b:c2:3f:85:7f:96:a4:33:68:60:e0:79:
         31:11:77:16:a4:b5:2a:69:9a:1c:65:55:de:58:72:9d:4a:bb:
         0a:01:3d:17:4b:63:b7:d8:2f:51:65:15:af:82:c0:09:d1:21:
         e2:c8:39:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICESAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjYwOTEwMTkzMDI3WhcNMjYwOTE3MTkzMDI3WjAYMRYwFAYD
VQQDEw02YWEzMDU1NC0zMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0QapH11IPnSyFqtCf52fRch7HCmisr8J14VB+jA8xL9Qhcbh/Xb94R17KH1a
lrxsa+5/B/G19OPG1g7iHKvMpoCA9c8COfHS8lQSQw1P3DSq5FI86Wt0iglSdAXk
jQ3kqQV71NR5uq5fnZqjiz+ZiCk2naIa9nBfTNfMEX5GL+Ogdcg0xvfocOtn+bL6
0Rtc+iAlCR1+B0N7ecaDmQwQejFTRwqj4kILVtl4JXmFla0+xRq+yT8tV/RXvoMy
bxgecu8bsi4QsIVxKJ2VeswSHjSJ0h21E/MyaWcTiJEgmmI42FWVPU2prU2TpCwC
SAUxk2QvLuW3AawCJfr/Vj0FkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIKIRP2L
KEE1lsJ/Nsrs5btcOg1LMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTBDRC80NjcyM0YxRTg5RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5
YVJqanA1LS1DQ1BHY3k0bVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGGehoa8IvK9QwUJo4ag3bxr9rjCuXm8i92L3k01F9SO1J7RwLI0Lgsa2vj9A
14W5tMq4ZH8ZnnbEvrRkbRwDwQd2QcqjhNO79i9LtJV7g+eVKc7sn8DiCtAvzAYZ
p5yQH4iIPCwrTX+PiL69iTP37QF52rXmmsQKL9/YBMOV3HxHYNdvv7514wF9xX0l
j0tjO1I0V8IrJIM9pE6GBUYIsXVKJp5PlxF2MNtauulAdQ4+4xlCAuffisAGYNi1
iTmgEifjTVa+ReyO1i/da8I/hX+WpDNoYOB5MRF3FqS1KmmaHGVV3lhynUq7CgE9
F0tjt9gvUWUVr4LACdEh4sg5+g==
-----END CERTIFICATE-----
Generated at Fri Sep 11 07:58:51 2026 by rpki-client