Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft
File:                     Ok9ILhJcCNuDBRbVGkot8eCqiso.mft (raw, json)
Hash identifier:          GLzoKT5zTgyG611/Hrvfv2i/cFu8/Nc1X8qH8xGvffk=
Subject key identifier:   26:92:E2:97:F5:7D:C0:C9:91:78:AD:45:C7:A2:A0:E5:17:EB:C6:27
Authority key identifier: 3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA
Certificate issuer:       /CN=A918C158/serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA
Certificate serial:       0B3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft
Manifest number:          0B34
Signing time:             Tue 18 Aug 2026 19:33:06 +0000
Manifest this update:     Tue 18 Aug 2026 19:33:05 +0000
Manifest next update:     Tue 25 Aug 2026 19:33:05 +0000
Files and hashes:         1: Ok9ILhJcCNuDBRbVGkot8eCqiso.crl (hash: Hkue0ugNI9399PnbhjlN1mnPbUyvZYxw0l1flMBIqYs=)
                          2: F25A6266796A11EB82E0EE24C4F9AE02.roa (hash: gg5YRxm/OG8ParGdDVWKapchKMYooC3n6Om94oqfGGI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl
                          rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2876 (0xb3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C158, serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA
        Validity
            Not Before: Aug 18 19:33:05 2026 GMT
            Not After : Aug 25 19:33:05 2026 GMT
        Subject: CN=6a84b372-866f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:14:41:f0:22:a7:fc:a6:39:6a:8f:cd:22:2e:
                    0f:86:a6:7d:45:a8:40:05:1b:3e:0a:24:37:5b:89:
                    aa:88:ac:f3:49:99:22:65:d1:11:f5:7a:24:5a:22:
                    39:35:5b:89:e6:2f:b2:1b:4f:76:7c:26:39:5a:3d:
                    94:c0:c3:03:5f:74:90:cb:24:34:94:5b:81:51:e8:
                    93:f7:42:c2:80:88:09:f5:13:35:63:f9:60:d4:62:
                    2e:e3:74:ac:1d:8b:ac:a8:f7:a0:8d:ec:74:d3:cb:
                    70:c4:22:48:3c:75:12:b1:f1:5c:5e:a0:30:84:47:
                    04:a8:90:6c:f0:9d:ca:18:69:14:51:80:d7:9f:e3:
                    05:e4:9d:9c:37:6c:33:8c:4e:ce:92:45:f1:68:c7:
                    58:1e:e5:b4:3a:4f:8e:4a:e8:f0:50:29:07:e0:2c:
                    a1:ba:e7:6a:96:16:dc:99:2a:e3:4f:3a:d8:cc:c9:
                    2c:e1:44:86:57:41:a7:9d:39:cd:26:16:1e:7c:ba:
                    ae:4d:7c:35:a2:c5:cf:4d:60:8b:53:e8:6a:8b:8c:
                    ad:ad:67:25:e3:d5:27:f2:b2:e0:24:7f:a2:3d:9d:
                    6c:d8:21:ec:f1:e1:da:3f:9e:fe:56:fa:e9:a3:e7:
                    5f:cb:a5:c4:53:74:33:b0:7a:f8:fb:af:61:2b:bb:
                    7a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:92:E2:97:F5:7D:C0:C9:91:78:AD:45:C7:A2:A0:E5:17:EB:C6:27
            X509v3 Authority Key Identifier:
                keyid:3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:70:d1:19:be:54:1d:60:fc:39:e9:0b:58:ac:68:49:b6:da:
         81:c0:3c:3f:78:28:20:86:41:46:da:0d:88:dd:c7:c9:6d:62:
         28:e4:d9:63:22:77:2d:57:9e:b2:71:1c:82:fb:59:91:ce:7c:
         1a:81:c2:65:77:d4:8d:f0:89:e2:98:0a:d5:3a:e2:c7:0c:15:
         94:3b:fc:5e:dd:49:89:48:db:2d:32:03:6a:ec:dc:5b:89:eb:
         2a:98:9d:21:b2:bf:16:51:a8:ba:3e:22:e6:f5:e0:fe:6c:85:
         1d:6a:73:d1:22:1c:36:09:0e:8a:3b:87:0b:af:9c:e1:ab:8f:
         14:8a:09:40:71:4f:97:7c:1d:2b:ac:c6:09:7b:1b:27:66:1e:
         c2:55:4e:d0:6d:4d:5c:95:3d:14:6b:35:87:3a:98:83:50:87:
         59:83:ab:4d:6e:13:6d:df:de:76:9b:6d:88:59:cf:a3:17:f6:
         8f:95:7d:54:ac:71:ee:bd:de:28:42:00:51:14:9c:45:63:28:
         83:56:fa:e2:a4:36:54:06:46:5d:b9:a5:5a:c1:a8:24:c2:71:
         b3:a4:6a:3e:c1:39:f5:cf:69:1b:aa:69:13:d2:37:9b:1c:31:
         2f:a3:e6:5a:83:c4:6a:e0:2b:82:e5:61:90:8d:76:3b:39:17:
         a6:1d:c6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:34 2026 by rpki-client