Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft
File:                     OpcfQv-wayoGyXkv1PCFE20UK-o.mft (raw, json)
Hash identifier:          lv7Ny1eYIlWBdSMTaktP8HpjDNCBD8TgCyaubyhWVLg=
Subject key identifier:   F6:85:32:5D:9F:63:DB:4E:F4:B9:1F:86:17:FB:C7:CF:22:6E:BC:C8
Authority key identifier: 3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA
Certificate issuer:       /CN=A9160AEE/serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft
Manifest number:          A3
Signing time:             Wed 19 Aug 2026 07:54:28 +0000
Manifest this update:     Wed 19 Aug 2026 07:54:28 +0000
Manifest next update:     Wed 26 Aug 2026 07:54:28 +0000
Files and hashes:         1: OpcfQv-wayoGyXkv1PCFE20UK-o.crl (hash: JlBIu1A9c52VROH/poAL1ytuuBboHC7iMf9XY5rY6Bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl
                          rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160AEE, serialNumber=3A971F42FFB06B2A06C9792FD4F085136D142BEA
        Validity
            Not Before: Aug 19 07:54:28 2026 GMT
            Not After : Aug 26 07:54:28 2026 GMT
        Subject: CN=6a856134-e2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:41:a5:49:90:44:01:00:2a:10:04:46:86:
                    27:a2:c9:db:3e:4b:38:04:fa:09:34:bd:34:b6:f7:
                    47:e5:a3:f8:9b:80:2a:8f:0f:91:b5:8f:8b:ef:75:
                    fa:10:f5:3e:69:31:d6:8d:df:c9:e9:ad:3b:47:a7:
                    d1:fd:78:48:7a:48:5b:0a:30:69:a4:19:94:e3:3c:
                    9f:ed:ef:63:ce:da:07:5a:91:a0:39:41:c2:a3:ef:
                    8e:65:39:1c:16:a5:2a:c5:aa:c2:db:2b:4b:91:90:
                    80:78:0b:b9:45:ba:16:93:ac:6e:0b:f5:10:30:5d:
                    f4:3a:84:e6:13:80:84:90:11:fe:7b:4d:9b:31:4b:
                    f9:d7:a2:90:44:22:9f:7d:8d:86:0d:4a:04:75:f2:
                    9f:e3:38:d1:69:a3:a3:2f:ba:40:1d:9f:59:62:9a:
                    a9:0e:77:e3:10:18:e4:3c:27:dd:c4:77:09:f0:62:
                    17:6c:f1:41:44:e3:cf:67:6f:f6:f9:7c:cc:c9:e3:
                    a1:e9:d3:03:80:3f:da:9a:85:bd:12:54:de:c3:b3:
                    42:87:c2:52:a6:31:32:5a:69:9c:85:e2:61:17:24:
                    c3:ac:65:68:f7:44:9a:0c:9f:ac:3b:ca:e9:87:d0:
                    c5:8f:fe:cd:62:6c:20:84:28:fe:a3:25:5e:37:79:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:85:32:5D:9F:63:DB:4E:F4:B9:1F:86:17:FB:C7:CF:22:6E:BC:C8
            X509v3 Authority Key Identifier:
                keyid:3A:97:1F:42:FF:B0:6B:2A:06:C9:79:2F:D4:F0:85:13:6D:14:2B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OpcfQv-wayoGyXkv1PCFE20UK-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/21E3F366A3EC11F0B8E97F37C4F9AE02/OpcfQv-wayoGyXkv1PCFE20UK-o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:aa:b3:22:d2:7e:00:f3:04:90:86:5c:b6:45:24:9e:9b:cd:
         5a:9f:71:ef:d9:76:0e:33:26:d1:33:fd:0d:97:87:57:b1:5a:
         4b:00:f9:1b:d7:76:67:44:6d:81:33:45:92:4e:8a:60:da:b7:
         08:39:c2:51:e6:04:78:6e:9f:91:e0:6b:e9:11:34:19:4e:66:
         b9:dd:9e:c0:ff:2e:a0:36:b3:f1:c9:96:27:95:42:b0:5c:83:
         53:e6:e7:cf:38:f1:a2:a9:49:5d:1e:f6:38:e4:e5:7d:15:d5:
         d3:f3:dd:05:cd:16:4c:5a:4b:ec:f9:96:36:ec:2b:3a:da:30:
         e8:e5:9d:81:d1:0e:cb:2e:f1:f7:54:8c:8b:4a:a6:d7:86:22:
         be:19:cc:c5:28:d2:e7:2e:a2:a5:77:b0:0f:5a:a9:d1:98:7e:
         df:62:ef:3d:1f:34:33:83:f1:09:0d:f9:4a:52:28:6b:e8:f5:
         9a:75:b6:09:f8:3f:06:82:fb:ee:15:3a:0c:f2:78:92:6d:00:
         f6:54:f2:b3:83:d1:e8:86:e8:7a:68:3a:44:2c:53:15:3e:86:
         42:39:06:a5:b7:d8:a0:0f:6d:0a:a8:68:c1:6a:83:74:17:0e:
         53:e6:a7:63:55:0e:57:d2:26:80:0c:93:dc:43:f1:c9:a8:69:
         06:42:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:45 2026 by rpki-client