Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
File:                     OTVm9EF4bZWNinkRjo71b8hy5cU.mft (raw, json)
Hash identifier:          kYEkVZDQpLoM3m3yZe7BogUb7uTpzpHijGskaMl7n7Y=
Subject key identifier:   3B:C0:1F:EB:B3:F3:DF:03:4B:48:9E:DE:73:92:55:2F:38:CF:CC:36
Authority key identifier: 39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5
Certificate issuer:       /CN=A91673ED/serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
Certificate serial:       077A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
Manifest number:          0768
Signing time:             Fri 18 Sep 2026 21:37:50 +0000
Manifest this update:     Fri 18 Sep 2026 21:37:49 +0000
Manifest next update:     Fri 25 Sep 2026 21:37:49 +0000
Files and hashes:         1: OTVm9EF4bZWNinkRjo71b8hy5cU.crl (hash: 1DDMzhvx6YWrKvXSc40Ezd5RKODwJ5a1tnCNKYfth18=)
                          2: CD1F0EC07D4D11EBAE81AF83C4F9AE02.roa (hash: cPeYwDdd00kAIVqMVLrluyBHMf7E83NSh4S72gm9IyM=)
                          3: BDBFFB867D5411EB8CBE5B57C4F9AE02.roa (hash: dXlGJvljbOTRyiUKcUkx49BNHkG/wuJwIqZ/bk6onnk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl
                          rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1914 (0x77a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91673ED, serialNumber=393566F441786D958D8A79118E8EF56FC872E5C5
        Validity
            Not Before: Sep 18 21:37:49 2026 GMT
            Not After : Sep 25 21:37:49 2026 GMT
        Subject: CN=6aadaf2e-c9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:40:b3:32:e5:c6:0a:76:0e:c3:97:74:39:
                    d1:7a:0e:9f:d5:4c:15:39:6a:9a:8a:01:45:d8:e0:
                    e9:af:85:5c:ef:12:c6:2b:f1:ab:61:0f:40:3c:4f:
                    6b:7c:20:c9:95:bc:1e:70:66:72:60:19:4c:6e:d4:
                    dd:09:4b:a3:38:38:a1:ab:48:d8:be:50:f0:91:29:
                    8a:e7:6a:ee:af:a2:69:ee:4a:65:c6:0e:be:f8:31:
                    47:cd:b6:10:d7:4b:04:d6:7b:07:0f:3f:cc:f2:27:
                    ac:a3:dd:9e:a9:c4:87:f2:f8:28:20:8b:84:c9:20:
                    d8:92:c3:1c:09:48:9a:f3:c8:ff:bb:9c:ad:a2:6d:
                    ee:cd:30:f5:d0:4e:65:64:3e:cd:52:f0:7d:87:7e:
                    d6:d2:b0:f0:93:fd:f7:b6:d4:27:12:a0:ad:3c:07:
                    60:73:d9:79:a3:60:ed:4d:61:65:dc:f1:69:31:ab:
                    5d:cc:72:7e:05:ac:44:c9:12:84:74:74:97:e0:06:
                    03:c8:3e:e0:3f:0b:72:7e:21:2a:c4:e7:5e:ac:06:
                    bb:b6:cf:0e:82:74:2f:e1:23:ec:50:dd:cc:61:e0:
                    21:d9:4c:71:8a:78:cc:77:24:bb:ed:88:ed:9d:80:
                    da:d4:8e:a1:e7:eb:40:ef:bc:cc:d0:59:ab:18:c0:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C0:1F:EB:B3:F3:DF:03:4B:48:9E:DE:73:92:55:2F:38:CF:CC:36
            X509v3 Authority Key Identifier:
                keyid:39:35:66:F4:41:78:6D:95:8D:8A:79:11:8E:8E:F5:6F:C8:72:E5:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OTVm9EF4bZWNinkRjo71b8hy5cU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91673ED/4D8FA20E7D4911EBA165737BC4F9AE02/OTVm9EF4bZWNinkRjo71b8hy5cU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1c:2e:44:8e:e7:8b:21:97:8c:c7:9c:b0:0e:fc:04:01:79:
         6f:db:0a:82:ba:92:50:da:a5:a2:0b:3c:59:35:0a:7d:c8:cc:
         10:91:84:f4:68:e7:29:2a:2a:95:db:64:eb:b6:b4:93:b9:03:
         74:5f:50:b2:fe:8b:e9:1b:df:12:0e:a3:ce:87:67:b3:20:a4:
         35:53:22:24:07:5e:30:9c:e2:e3:ee:ff:36:18:91:73:2c:19:
         6d:2f:04:8e:2c:a6:b1:61:99:44:ce:96:49:b8:9f:46:18:c2:
         12:d3:dc:68:7f:f3:ce:f2:d5:64:73:d6:bb:1d:66:62:d7:da:
         57:7c:ba:02:68:0d:50:eb:e6:b5:25:5f:a4:6e:5b:40:a5:68:
         83:a7:e6:33:4a:10:1d:21:62:95:a9:6a:6c:92:25:00:05:66:
         40:5b:d4:df:3f:28:b1:3c:5c:89:c7:ac:60:7d:0e:27:c0:26:
         44:d4:94:34:31:e8:17:15:e2:fd:9b:3d:d9:8a:68:92:f1:b1:
         b7:cd:be:2e:18:77:71:c2:0a:80:f0:ca:51:08:f3:a7:b7:74:
         ac:a4:dc:eb:c2:bc:50:4f:b9:8a:7d:56:ce:1a:9a:71:3c:ed:
         e3:db:d1:4d:09:6a:57:af:7d:ff:76:7e:f1:38:9b:61:f4:a0:
         29:93:eb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:11:27 2026 by rpki-client