Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
File:                     OEBSLgVtM3Uf55akOVuNTf3lj4w.mft (raw, json)
Hash identifier:          N33Osf86Uf0hWGn6813HO4rXdUYgx2cWyXJzBHcC9dg=
Subject key identifier:   13:2A:EE:35:C0:17:C4:D5:55:F5:D5:13:62:CC:EF:19:76:7C:96:37
Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C
Certificate issuer:       /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
Certificate serial:       0721
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
Manifest number:          0717
Signing time:             Tue 18 Aug 2026 22:25:28 +0000
Manifest this update:     Tue 18 Aug 2026 22:25:27 +0000
Manifest next update:     Tue 25 Aug 2026 22:25:27 +0000
Files and hashes:         1: OEBSLgVtM3Uf55akOVuNTf3lj4w.crl (hash: 5aK7fT73jSKejeC3kWtlT9afC3fDpiD4uDsaj8WmFm4=)
                          2: B21979EE9CAF11ECBFF4AF64C4F9AE02.roa (hash: q9bgMvnK3qUP2zl56LJjuP84FOdbbmO6f4ywuRFK3m0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl
                          rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825 (0x721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FEF3, serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
        Validity
            Not Before: Aug 18 22:25:27 2026 GMT
            Not After : Aug 25 22:25:27 2026 GMT
        Subject: CN=6a84dbd7-4965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e2:45:57:4f:b9:9c:25:cb:d7:20:75:16:21:
                    6b:cb:6c:01:60:28:e2:cd:a5:04:3d:40:33:ae:df:
                    b6:7f:5e:ae:f1:22:2b:c7:0e:27:b4:2f:b6:52:5a:
                    e1:de:86:b0:d3:35:fb:02:ac:fc:c8:5b:5e:4d:19:
                    e1:c7:a3:0c:3f:ac:83:a5:75:ad:91:07:b4:1e:59:
                    84:b2:49:e9:ca:73:16:5a:73:cf:97:a8:78:51:99:
                    c5:47:25:2b:c8:95:cf:59:e1:14:68:0d:ab:2d:0e:
                    44:c5:89:c0:fc:15:44:6e:f4:46:a0:97:88:f5:e6:
                    97:4c:14:98:0d:9e:7a:20:1c:f2:7f:46:3b:15:15:
                    b0:58:7c:d0:f4:4c:97:b2:2b:c7:81:73:5f:3a:9f:
                    4b:e3:bf:61:e6:6d:d6:fd:50:99:6a:be:23:05:b1:
                    cb:4c:27:4b:28:40:69:a3:e5:f3:98:da:ad:32:ec:
                    71:8b:37:ba:3a:8f:bc:12:fc:32:3d:d6:dd:e9:be:
                    9b:f0:3d:bd:85:da:5c:39:d2:c4:53:90:3e:ee:3a:
                    bc:ba:46:96:2b:40:b3:84:e9:e3:ad:46:ec:52:1a:
                    4b:1c:7d:88:07:a4:e2:fb:91:78:ea:44:ec:fb:5f:
                    fe:b1:bc:ed:51:26:5a:89:23:c9:f6:62:71:f5:da:
                    11:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2A:EE:35:C0:17:C4:D5:55:F5:D5:13:62:CC:EF:19:76:7C:96:37
            X509v3 Authority Key Identifier:
                keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:51:d6:24:3e:09:a4:86:3f:dd:b0:f9:28:0b:c0:f9:5c:6f:
         4b:75:41:5e:68:0d:46:83:26:07:c1:08:a4:ea:aa:a8:8b:93:
         62:50:9f:d7:3d:86:c5:d8:3b:d2:34:da:e5:8b:c6:e3:d7:d2:
         4d:1c:ca:d5:96:72:9a:e7:b5:d2:0a:b6:da:79:eb:e4:3d:82:
         48:d0:5c:e0:e9:7f:60:f7:7a:52:7d:fc:1d:53:1c:0c:f1:b0:
         cd:07:83:c0:46:df:4f:c8:50:33:4d:96:8e:53:e6:46:de:49:
         c3:66:ba:13:02:1f:b5:c8:c8:15:62:27:3e:dd:99:13:fb:cd:
         d8:24:a0:66:9c:b3:0e:d1:b4:b7:68:e2:de:0c:7d:96:e2:74:
         b3:70:d5:c7:d4:b4:a3:85:72:fd:01:03:9a:96:d6:c3:46:d3:
         8e:43:ec:e1:ae:af:fb:cb:5f:ee:2a:99:09:21:94:5e:ac:c6:
         a9:fe:4d:88:88:d4:67:3a:1a:41:c7:66:30:54:be:ef:60:6a:
         ca:34:ae:b9:e2:a7:9a:a5:a7:e6:67:ee:4f:7d:61:38:0e:0f:
         c1:bd:9e:53:e4:2d:35:1d:d7:c0:5d:bb:33:15:6a:b8:bd:ed:
         a7:83:7b:70:57:67:a3:03:2c:ce:81:59:42:af:67:9b:e0:25:
         0d:86:94:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:46:33 2026 by rpki-client