Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
File:                     OT6njk2TI25QcfuK_61B1iQmql0.mft (raw, json)
Hash identifier:          hqzcVZNUhKjOk09svOJ7jmSVqcdhPfPQlXUyIvdRsAk=
Subject key identifier:   6A:21:02:A1:E7:7C:99:BE:06:4F:A6:10:FF:2B:2F:12:DC:B6:90:F1
Authority key identifier: 39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D
Certificate issuer:       /CN=A917B520/serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
Manifest number:          0164
Signing time:             Tue 13 Oct 2026 02:16:49 +0000
Manifest this update:     Tue 13 Oct 2026 02:16:48 +0000
Manifest next update:     Tue 20 Oct 2026 02:16:48 +0000
Files and hashes:         1: OT6njk2TI25QcfuK_61B1iQmql0.crl (hash: lwurXJtHdNCw6z6DqNVmDBLYUthIAiXm4ynCUjnz8QY=)
                          2: 0A5B62F2BB1911F198A930FE6511F970.roa (hash: Ps7Vm5dJyDU9DORsArDqxMwikJ6TEzpTZaTY7eYWNIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl
                          rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 02:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B520, serialNumber=393EA78E4D93236E5071FB8AFFAD41D62426AA5D
        Validity
            Not Before: Oct 13 02:16:48 2026 GMT
            Not After : Oct 20 02:16:48 2026 GMT
        Subject: CN=6acd9491-e255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:62:91:de:ab:91:52:a6:6b:d4:f1:98:37:57:
                    21:bb:5e:c5:8a:9f:dc:c7:0d:cb:91:5a:23:bc:82:
                    48:b5:bb:30:50:82:7a:33:24:75:e5:6c:28:b3:71:
                    55:4f:1d:31:95:54:b3:3d:b7:cb:ce:4c:92:b0:9a:
                    32:86:7b:21:a0:3f:c8:f7:d5:43:da:a1:3b:e8:ea:
                    b7:d4:8c:3d:aa:10:a6:b4:0f:8b:20:63:20:cf:57:
                    bf:e3:9a:d0:41:41:8a:73:17:fd:a2:20:17:4c:5e:
                    e9:0c:b9:bd:c1:00:ad:15:c3:a0:a0:a4:ff:88:44:
                    3b:de:38:b7:17:99:b1:67:e8:3b:d2:35:08:c1:51:
                    4f:5f:68:4d:4d:12:86:47:76:34:a9:c1:43:05:53:
                    a3:4d:98:7b:25:c0:d1:d0:2b:23:62:88:4a:c8:da:
                    2f:e3:70:91:0f:2c:54:a8:1e:db:2d:d6:45:e1:25:
                    42:66:96:03:3b:71:fe:a1:33:40:3b:b5:3c:13:a9:
                    a2:c5:e5:a8:22:55:94:4c:e6:a7:31:e2:c5:b8:d4:
                    c6:bb:93:47:02:2e:e7:cf:dd:1f:0e:5e:30:f7:29:
                    89:98:b0:52:46:7b:2b:b8:a9:70:bd:05:b8:f9:74:
                    2c:c3:51:6b:62:70:d5:8f:5a:3e:c3:53:46:93:e1:
                    86:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:21:02:A1:E7:7C:99:BE:06:4F:A6:10:FF:2B:2F:12:DC:B6:90:F1
            X509v3 Authority Key Identifier:
                keyid:39:3E:A7:8E:4D:93:23:6E:50:71:FB:8A:FF:AD:41:D6:24:26:AA:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OT6njk2TI25QcfuK_61B1iQmql0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4CFC08DAB76C11EFB874276EC4F9AE02/OT6njk2TI25QcfuK_61B1iQmql0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8a:2a:46:f8:3c:84:5e:97:cf:6a:94:c3:cb:63:b3:3f:e9:
         69:5f:1f:04:20:59:e1:10:ad:28:0e:34:51:bd:c5:90:51:a1:
         43:a6:75:a4:47:ff:0b:58:13:a8:6c:87:0a:c3:d3:e0:24:5b:
         3f:2e:96:49:6d:40:dc:8d:f5:93:07:a6:47:31:89:36:3e:ca:
         aa:69:13:e3:5e:84:34:9a:72:bf:91:05:21:d1:e7:b8:33:92:
         67:ef:1a:cd:cb:0d:fc:ec:c1:3e:d2:15:88:4d:c2:26:09:f0:
         05:8f:cd:4c:c0:78:1b:c1:b9:85:fa:51:86:d2:8d:31:9b:13:
         96:2c:4c:75:0f:52:a4:e2:23:0a:45:a4:dd:b5:f3:d8:eb:d1:
         2b:d1:56:74:fe:4f:a0:a6:13:6a:93:bc:98:76:a0:c7:9b:84:
         97:48:10:71:16:a6:34:51:c5:40:85:fe:74:35:54:cd:a1:95:
         fc:bd:a8:79:3e:a7:41:c1:c2:09:94:c7:d6:e4:67:2a:dc:b5:
         67:ed:29:d4:e9:fb:98:fc:0c:b1:f6:74:19:48:da:b0:d1:7c:
         cf:c0:08:61:e6:6d:1c:44:be:ed:11:38:84:3f:74:46:05:d2:
         82:ae:75:46:3c:0c:61:09:27:0f:85:f8:90:ff:ea:06:0d:bd:
         31:2f:fd:c5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I1MjAxMTAvBgNVBAUTKDM5M0VBNzhFNEQ5MzIzNkU1MDcxRkI4QUZGQUQ0MUQ2
MjQyNkFBNUQwHhcNMjYxMDEzMDIxNjQ4WhcNMjYxMDIwMDIxNjQ4WjAYMRYwFAYD
VQQDEw02YWNkOTQ5MS1lMjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmWKR3quRUqZr1PGYN1chu17Fip/cxw3LkVojvIJItbswUIJ6MyR15Wwos3FV
Tx0xlVSzPbfLzkySsJoyhnshoD/I99VD2qE76Oq31Iw9qhCmtA+LIGMgz1e/45rQ
QUGKcxf9oiAXTF7pDLm9wQCtFcOgoKT/iEQ73ji3F5mxZ+g70jUIwVFPX2hNTRKG
R3Y0qcFDBVOjTZh7JcDR0CsjYohKyNov43CRDyxUqB7bLdZF4SVCZpYDO3H+oTNA
O7U8E6mixeWoIlWUTOanMeLFuNTGu5NHAi7nz90fDl4w9ymJmLBSRnsruKlwvQW4
+XQsw1FrYnDVj1o+w1NGk+GGfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGohAqHn
fJm+Bk+mEP8rLxLctpDxMB8GA1UdIwQYMBaAFDk+p45NkyNuUHH7iv+tQdYkJqpd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC80Q0ZDMDhEQUI3
NkMxMUVGQjg3NDI3NkVDNEY5QUUwMi9PVDZuamsyVEkyNVFjZnVLXzYxQjFpUW1x
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL09UNm5qazJUSTI1UWNmdUtfNjFCMWlRbXFsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjUyMC80Q0ZDMDhEQUI3NkMxMUVGQjg3NDI3NkVDNEY5QUUwMi9PVDZuamsyVEky
NVFjZnVLXzYxQjFpUW1xbDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATYoqRvg8hF6Xz2qUw8tjsz/paV8fBCBZ4RCtKA40Ub3FkFGhQ6Z1pEf/C1gT
qGyHCsPT4CRbPy6WSW1A3I31kwemRzGJNj7KqmkT416ENJpyv5EFIdHnuDOSZ+8a
zcsN/OzBPtIViE3CJgnwBY/NTMB4G8G5hfpRhtKNMZsTlixMdQ9SpOIjCkWk3bXz
2OvRK9FWdP5PoKYTapO8mHagx5uEl0gQcRamNFHFQIX+dDVUzaGV/L2oeT6nQcHC
CZTH1uRnKty1Z+0p1On7mPwMsfZ0GUjasNF8z8AIYeZtHES+7RE4hD90RgXSgq51
RjwMYQknD4X4kP/qBg29MS/9xQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 18:48:57 2026 by rpki-client