Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
File:                     OhsJQZH-NHU3GcHUgfIIhagIwWs.mft (raw, json)
Hash identifier:          vVveSW+A1IlxfmPN/ylw7TyAn0kLMtTs/8nLs0tB0I4=
Subject key identifier:   08:32:53:8E:DE:6F:16:02:9E:FF:F5:12:1A:C7:71:10:C8:3F:C1:BA
Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
Certificate issuer:       /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
Manifest number:          9A
Signing time:             Wed 19 Aug 2026 08:25:07 +0000
Manifest this update:     Wed 19 Aug 2026 08:25:06 +0000
Manifest next update:     Wed 26 Aug 2026 08:25:06 +0000
Files and hashes:         1: OhsJQZH-NHU3GcHUgfIIhagIwWs.crl (hash: EBUUs6oY0mddGN7x3ao+LtaK8QWEhXKmVvw/UY5utpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
                          rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
        Validity
            Not Before: Aug 19 08:25:06 2026 GMT
            Not After : Aug 26 08:25:06 2026 GMT
        Subject: CN=6a856863-2b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:a2:2b:2e:b9:98:7b:46:01:3c:de:18:4b:
                    66:c1:04:fb:22:3f:f2:2a:65:98:9f:f4:26:c5:fa:
                    a6:c0:11:62:e4:8a:60:a1:36:85:50:c3:1e:d0:12:
                    c9:02:b8:9d:e0:fe:d9:fc:59:55:f8:54:54:c9:83:
                    99:6f:62:08:b9:65:8e:51:28:77:f2:a1:1d:59:1e:
                    86:a8:0c:67:59:ba:70:00:84:21:19:50:71:18:4e:
                    a7:56:46:5b:e3:78:a0:68:cb:4e:27:f1:43:de:19:
                    73:09:80:2c:16:1d:ef:35:02:cd:24:e7:13:8a:30:
                    d1:2f:2e:50:bb:a9:1c:da:12:9d:fa:28:a4:7e:41:
                    ee:70:07:b1:9c:26:6c:5b:f8:15:08:f6:82:97:93:
                    9b:c3:f8:ae:15:13:af:15:4b:8a:42:19:0d:1a:e2:
                    a7:3c:21:7e:fb:16:27:22:f4:3d:3c:e7:c7:28:84:
                    38:c8:56:5c:dd:f7:f1:86:24:72:ca:75:ac:65:36:
                    ad:90:11:bd:93:47:12:f8:4a:8a:42:f5:6c:47:f4:
                    dc:3c:38:00:fa:1e:b5:2f:3d:9c:75:3e:f5:18:49:
                    af:66:57:7a:a3:64:5f:2c:cf:39:e0:4f:91:fd:ee:
                    65:c4:22:24:8a:af:5e:d9:21:89:ce:a8:04:3b:78:
                    e1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:32:53:8E:DE:6F:16:02:9E:FF:F5:12:1A:C7:71:10:C8:3F:C1:BA
            X509v3 Authority Key Identifier:
                keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:58:93:60:87:17:5e:e2:00:2b:86:3b:5e:d7:6d:bf:ef:9d:
         1d:e1:ae:e6:10:f1:6c:a0:e7:11:14:c8:24:d8:b0:49:6d:2a:
         7f:0b:c7:5e:03:ec:9f:d3:2f:98:b7:59:df:1f:b8:f7:0f:e0:
         be:02:6b:47:a4:dd:52:5d:e2:cb:a8:9a:52:23:9c:0c:90:72:
         47:ab:e4:f7:e1:61:11:d5:1f:ea:a8:d3:78:05:be:bf:e3:fd:
         bd:9e:4c:a5:db:9f:4f:3d:af:7f:0b:15:cb:fd:2c:18:0d:2e:
         24:c8:7d:22:da:8d:48:84:d0:04:c9:43:e9:21:6d:9d:a1:5a:
         a0:fb:0a:1b:9d:5b:22:08:4b:50:cd:0a:f3:ce:72:18:22:8b:
         85:50:58:75:0f:04:cd:56:70:1b:a0:5c:08:35:eb:eb:71:97:
         63:27:26:73:1f:b8:9e:60:2b:33:fe:bd:5e:f5:f8:05:ec:ef:
         67:64:ff:d1:51:5b:a7:6d:66:ca:78:45:a5:ac:e2:4f:6d:9b:
         84:65:71:27:fd:1e:e3:0d:6d:f8:c7:3a:2e:f2:38:3a:f5:6a:
         98:ff:69:64:ac:cd:43:6d:03:d6:5c:ad:91:73:aa:e3:57:7b:
         34:5e:f3:b5:c7:a1:62:07:a4:9e:85:d4:42:b5:b1:1e:75:34:
         95:b8:05:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM0MjUxMTAvBgNVBAUTKDNBMUIwOTQxOTFGRTM0NzUzNzE5QzFENDgxRjIwODg1
QTgwOEMxNkIwHhcNMjYwODE5MDgyNTA2WhcNMjYwODI2MDgyNTA2WjAYMRYwFAYD
VQQDEw02YTg1Njg2My0yYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZyiKy65mHtGATzeGEtmwQT7Ij/yKmWYn/QmxfqmwBFi5IpgoTaFUMMe0BLJ
Arid4P7Z/FlV+FRUyYOZb2IIuWWOUSh38qEdWR6GqAxnWbpwAIQhGVBxGE6nVkZb
43igaMtOJ/FD3hlzCYAsFh3vNQLNJOcTijDRLy5Qu6kc2hKd+iikfkHucAexnCZs
W/gVCPaCl5Obw/iuFROvFUuKQhkNGuKnPCF++xYnIvQ9POfHKIQ4yFZc3ffxhiRy
ynWsZTatkBG9k0cS+EqKQvVsR/TcPDgA+h61Lz2cdT71GEmvZld6o2RfLM854E+R
/e5lxCIkiq9e2SGJzqgEO3jhjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAgyU47e
bxYCnv/1EhrHcRDIP8G6MB8GA1UdIwQYMBaAFDobCUGR/jR1NxnB1IHyCIWoCMFr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzQyNS9ERkJBRUUxNERC
RTQxMUYwQThCNUJGNjQzNjZGNTZCQy9PaHNKUVpILU5IVTNHY0hVZ2ZJSWhhZ0l3
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09oc0pRWkgtTkhVM0djSFVnZklJaGFnSXdXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzQyNS9ERkJBRUUxNERCRTQxMUYwQThCNUJGNjQzNjZGNTZCQy9PaHNKUVpILU5I
VTNHY0hVZ2ZJSWhhZ0l3V3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOViTYIcXXuIAK4Y7Xtdtv++dHeGu5hDxbKDnERTIJNiwSW0qfwvHXgPsn9Mv
mLdZ3x+49w/gvgJrR6TdUl3iy6iaUiOcDJByR6vk9+FhEdUf6qjTeAW+v+P9vZ5M
pdufTz2vfwsVy/0sGA0uJMh9ItqNSITQBMlD6SFtnaFaoPsKG51bIghLUM0K885y
GCKLhVBYdQ8EzVZwG6BcCDXr63GXYycmcx+4nmArM/69XvX4BezvZ2T/0VFbp21m
ynhFpaziT22bhGVxJ/0e4w1t+Mc6LvI4OvVqmP9pZKzNQ20D1lytkXOq41d7NF7z
tcehYgeknoXUQrWxHnU0lbgFbA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:11 2026 by rpki-client