Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
File:                     OT6njk2TI25QcfuK_61B1iQmql0.mft (raw, json)
Hash identifier:          MHy98QCM4L8ZnhyMxWPtiJkF5N2xgXZ2T1l6VrUsGWA=
Subject key identifier:   72:50:E4:98:9A:AC:8B:83:C8:8F:22:CF:CE:B0:DD:7F:E8:A2:53:F6
Authority key identifier: 39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D
Certificate issuer:       /CN=A917B520/serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
Manifest number:          014A
Signing time:             Thu 27 Aug 2026 01:46:31 +0000
Manifest this update:     Thu 27 Aug 2026 01:46:31 +0000
Manifest next update:     Thu 03 Sep 2026 01:46:31 +0000
Files and hashes:         1: OT6njk2TI25QcfuK_61B1iQmql0.crl (hash: TKoS3MFexRut0Ue9FW9VQTno11CiwrschUsFyMtWxoA=)
                          2: 3CFE7680BC5C11EFB951FD4FC4F9AE02.roa (hash: T9cYe9ZeR41yqY0Knl/5FUBYrilHkPIrqJ76+KfRgiA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 14:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
        Validity
            Not Before: Aug 27 01:46:31 2026 GMT
            Not After : Sep  3 01:46:31 2026 GMT
        Subject: CN=6a8f96f7-7d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c9:6e:22:1a:e8:43:9c:96:be:02:a1:19:7c:
                    d0:a7:6c:1a:f0:48:06:e3:7a:7d:2e:6f:04:2b:d4:
                    1c:44:3d:70:25:15:91:28:b0:88:ef:ed:32:d3:21:
                    60:c9:c7:96:d3:70:6b:8a:2b:a4:11:01:fe:28:e5:
                    20:3e:d2:c0:7c:97:5b:2d:82:55:ad:da:10:32:ce:
                    bf:d2:c5:d0:e0:6c:58:35:51:82:ea:dd:f7:a3:11:
                    23:2f:57:76:b9:a3:11:30:8e:bc:45:9f:a3:09:55:
                    04:34:32:4c:82:84:6e:60:42:f3:77:2f:91:b1:1a:
                    96:c9:80:cb:99:2f:d7:91:59:94:b0:6b:46:8f:38:
                    93:f8:5b:b9:f3:68:29:41:84:72:88:d7:b6:5f:56:
                    79:de:10:0a:8a:e7:aa:a7:4a:ce:94:b8:50:b7:00:
                    da:92:e1:6b:c8:4d:a0:6d:e3:4f:99:3d:1a:94:e3:
                    4c:5e:fe:31:b5:95:1e:b5:22:76:d6:eb:36:9f:9f:
                    32:82:37:1d:96:b8:dc:5e:2b:e2:e9:ec:df:08:2f:
                    48:d2:94:94:68:1c:7f:80:58:22:de:18:6d:7b:37:
                    6a:88:f3:20:90:2f:10:99:36:dc:9a:e6:92:c3:01:
                    8c:29:e0:36:33:b6:22:23:1f:c6:2a:fd:4d:b1:e3:
                    29:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:50:E4:98:9A:AC:8B:83:C8:8F:22:CF:CE:B0:DD:7F:E8:A2:53:F6
            X509v3 Authority Key Identifier:
                keyid:39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:90:53:43:ae:ca:5a:99:ce:d2:40:0b:ce:63:87:e0:0c:5c:
         6b:b2:e2:e7:98:90:d0:68:dc:1f:45:50:19:58:f0:af:ff:10:
         ca:d7:94:cc:0b:6f:77:c6:c4:a8:dd:fa:81:23:9f:46:7f:32:
         d5:24:c7:98:0f:19:ba:c7:1d:df:61:37:75:0e:f1:d6:26:fd:
         f6:cc:e9:39:2d:e4:0c:81:85:da:35:4f:8f:75:fd:38:75:4e:
         fd:19:4a:a6:37:01:95:1e:25:19:83:ce:62:8f:6f:52:c7:1f:
         04:4a:b6:d3:08:e8:fd:d1:51:7b:78:be:90:8a:c0:43:e3:d4:
         10:4f:63:56:f1:ed:df:dd:2a:14:77:66:c3:b3:44:19:19:81:
         af:87:d0:09:71:ca:f3:26:97:37:8a:e7:1a:6c:d3:6d:0e:fc:
         d6:3f:bc:a6:b3:b5:4a:fb:b0:6f:b9:2f:53:7e:9d:82:d8:d4:
         53:f6:2a:d9:80:2f:ef:c5:a2:a6:5c:9a:57:da:62:0e:58:fd:
         85:eb:92:dd:f6:42:56:ae:35:eb:40:eb:6d:4b:f4:10:a4:3d:
         38:a9:7d:ed:17:b5:2e:ad:d9:4d:d2:6f:c6:4f:53:d9:fc:4f:
         16:f3:e9:79:f9:75:97:e2:85:71:46:3e:00:b5:b5:a2:31:a3:
         fa:5e:63:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I1MjAxMTAvBgNVBAUTKDM5M0VBNzhFNEQ5MzIzNkU1MDcxRkI4QUZGQUQ0MUQ2
MjQyNkFBNUQwHhcNMjYwODI3MDE0NjMxWhcNMjYwOTAzMDE0NjMxWjAYMRYwFAYD
VQQDEw02YThmOTZmNy03ZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjcluIhroQ5yWvgKhGXzQp2wa8EgG43p9Lm8EK9QcRD1wJRWRKLCI7+0y0yFg
yceW03BriiukEQH+KOUgPtLAfJdbLYJVrdoQMs6/0sXQ4GxYNVGC6t33oxEjL1d2
uaMRMI68RZ+jCVUENDJMgoRuYELzdy+RsRqWyYDLmS/XkVmUsGtGjziT+Fu582gp
QYRyiNe2X1Z53hAKiueqp0rOlLhQtwDakuFryE2gbeNPmT0alONMXv4xtZUetSJ2
1us2n58ygjcdlrjcXivi6ezfCC9I0pSUaBx/gFgi3hhtezdqiPMgkC8QmTbcmuaS
wwGMKeA2M7YiIx/GKv1NseMpvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJQ5Jia
rIuDyI8iz86w3X/oolP2MB8GA1UdIwQYMBaAFDk+p45NkyNuUHH7iv+tQdYkJqpd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC80Q0ZDMDhEQUI3
NkMxMUVGQjg3NDI3NkVDNEY5QUUwMi9PVDZuamsyVEkyNVFjZnVLXzYxQjFpUW1x
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL09UNm5qazJUSTI1UWNmdUtfNjFCMWlRbXFsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjUyMC80Q0ZDMDhEQUI3NkMxMUVGQjg3NDI3NkVDNEY5QUUwMi9PVDZuamsyVEky
NVFjZnVLXzYxQjFpUW1xbDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKpBTQ67KWpnO0kALzmOH4Axca7Li55iQ0GjcH0VQGVjwr/8QyteUzAtvd8bE
qN36gSOfRn8y1STHmA8Zuscd32E3dQ7x1ib99szpOS3kDIGF2jVPj3X9OHVO/RlK
pjcBlR4lGYPOYo9vUscfBEq20wjo/dFRe3i+kIrAQ+PUEE9jVvHt390qFHdmw7NE
GRmBr4fQCXHK8yaXN4rnGmzTbQ781j+8prO1Svuwb7kvU36dgtjUU/Yq2YAv78Wi
plyaV9piDlj9heuS3fZCVq4160DrbUv0EKQ9OKl97Re1Lq3ZTdJvxk9T2fxPFvPp
efl1l+KFcUY+ALW1ojGj+l5jfA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 12:26:37 2026 by rpki-client