Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
File:                     OhsJQZH-NHU3GcHUgfIIhagIwWs.mft (raw, json)
Hash identifier:          roDJvJQHEtJLv0+7oMLSv8aEyWixiB6hwR+pT+1vhzo=
Subject key identifier:   C8:F4:1F:35:46:CA:7C:79:64:8A:55:D1:18:B9:6A:EB:B6:CF:EF:B8
Authority key identifier: 3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B
Certificate issuer:       /CN=A918C425/serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
Manifest number:          B2
Signing time:             Mon 05 Oct 2026 07:51:10 +0000
Manifest this update:     Mon 05 Oct 2026 07:51:10 +0000
Manifest next update:     Mon 12 Oct 2026 07:51:10 +0000
Files and hashes:         1: OhsJQZH-NHU3GcHUgfIIhagIwWs.crl (hash: BTJKX6PbkkreHnprYJ8v1W/d2hBxk0l5b3oQT9AzE/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl
                          rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C425, serialNumber=3A1B094191FE34753719C1D481F20885A808C16B
        Validity
            Not Before: Oct  5 07:51:10 2026 GMT
            Not After : Oct 12 07:51:10 2026 GMT
        Subject: CN=6ac356ee-0ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b4:d6:ec:97:f0:91:ce:ac:ba:6a:22:94:e7:
                    07:26:1b:8a:7d:c1:2a:ae:94:b8:af:47:8a:4a:96:
                    34:8f:1c:63:a6:62:65:00:4a:54:09:47:8b:62:f2:
                    b5:a8:f1:a0:d1:a3:f2:20:d9:df:f2:1d:fb:4a:c0:
                    55:8c:60:c6:46:9f:db:d3:e4:4d:c8:a4:0e:5c:f9:
                    97:4a:23:ff:6d:ac:d1:47:a8:c9:df:a8:7d:99:92:
                    21:67:d4:d7:eb:4f:46:36:d9:3f:97:a9:e2:69:e3:
                    d2:dd:71:3b:81:63:19:30:ad:fa:1d:f7:6f:cb:b3:
                    b4:a6:4b:96:a6:21:88:cd:72:f1:f0:7b:b8:a2:63:
                    36:f5:f9:f9:0e:f9:77:d2:69:4c:78:f0:06:ed:91:
                    4c:1a:d2:a5:3f:a9:ec:5f:8f:d9:30:b6:f8:77:5d:
                    21:87:ee:12:3c:b3:42:9f:86:9e:54:e1:72:6a:78:
                    33:ac:d0:72:e1:b1:26:c4:ab:e6:93:90:da:4c:3c:
                    22:4e:c6:1b:7f:9d:8d:82:71:4d:e0:8e:69:6d:0b:
                    98:a4:a6:3d:80:41:fc:e7:e3:ad:95:f1:ad:b7:59:
                    14:8b:74:c0:fc:64:32:b2:9a:3f:4c:a1:56:03:70:
                    66:35:61:ff:8d:25:1c:a4:c8:78:48:39:aa:9d:df:
                    76:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F4:1F:35:46:CA:7C:79:64:8A:55:D1:18:B9:6A:EB:B6:CF:EF:B8
            X509v3 Authority Key Identifier:
                keyid:3A:1B:09:41:91:FE:34:75:37:19:C1:D4:81:F2:08:85:A8:08:C1:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhsJQZH-NHU3GcHUgfIIhagIwWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C425/DFBAEE14DBE411F0A8B5BF64366F56BC/OhsJQZH-NHU3GcHUgfIIhagIwWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c0:bf:16:e4:77:9c:c2:94:e2:c4:ee:79:bf:5d:12:56:74:
         69:18:8d:bd:c5:53:0c:dd:99:c3:f5:80:66:c0:3f:f1:fe:cb:
         10:64:17:6e:87:ea:f8:e9:d6:f2:65:19:28:8a:35:87:f7:67:
         09:69:1f:35:a6:0d:44:35:54:ef:71:ba:ed:fb:cb:5f:29:09:
         1e:6a:0d:1f:63:7c:8e:55:43:60:c6:ac:16:9b:18:b8:b4:56:
         45:00:cd:27:2a:63:ff:1d:9d:fd:67:5d:64:66:0f:a5:06:80:
         07:2a:e2:b2:74:be:bf:75:eb:95:c4:bd:d8:37:61:29:dd:59:
         45:ec:17:e9:e8:4c:94:4a:84:84:d6:98:67:69:29:74:fc:73:
         bb:3b:80:53:d5:20:18:fc:87:a8:6e:c1:e1:a0:c5:c1:4b:5e:
         da:bd:10:05:38:f1:32:b0:da:9e:13:0b:71:9d:b4:08:77:a0:
         5c:2c:a3:a0:31:53:9e:87:85:35:ed:2a:bf:b7:98:94:6a:2f:
         94:9a:a9:f6:50:19:9c:a3:ab:30:2a:da:f5:fd:73:7c:ab:5e:
         d0:4d:c3:e5:3c:48:25:2f:68:0e:94:1c:ec:37:2b:eb:1e:6e:
         e6:be:0b:e4:c7:fd:ab:fb:a7:b4:85:bb:1b:e0:80:78:4e:aa:
         21:1d:96:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM0MjUxMTAvBgNVBAUTKDNBMUIwOTQxOTFGRTM0NzUzNzE5QzFENDgxRjIwODg1
QTgwOEMxNkIwHhcNMjYxMDA1MDc1MTEwWhcNMjYxMDEyMDc1MTEwWjAYMRYwFAYD
VQQDEw02YWMzNTZlZS0wZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8LTW7Jfwkc6sumoilOcHJhuKfcEqrpS4r0eKSpY0jxxjpmJlAEpUCUeLYvK1
qPGg0aPyINnf8h37SsBVjGDGRp/b0+RNyKQOXPmXSiP/bazRR6jJ36h9mZIhZ9TX
609GNtk/l6niaePS3XE7gWMZMK36Hfdvy7O0pkuWpiGIzXLx8Hu4omM29fn5Dvl3
0mlMePAG7ZFMGtKlP6nsX4/ZMLb4d10hh+4SPLNCn4aeVOFyangzrNBy4bEmxKvm
k5DaTDwiTsYbf52NgnFN4I5pbQuYpKY9gEH85+OtlfGtt1kUi3TA/GQyspo/TKFW
A3BmNWH/jSUcpMh4SDmqnd92XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMj0HzVG
ynx5ZIpV0Ri5auu2z++4MB8GA1UdIwQYMBaAFDobCUGR/jR1NxnB1IHyCIWoCMFr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzQyNS9ERkJBRUUxNERC
RTQxMUYwQThCNUJGNjQzNjZGNTZCQy9PaHNKUVpILU5IVTNHY0hVZ2ZJSWhhZ0l3
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09oc0pRWkgtTkhVM0djSFVnZklJaGFnSXdXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzQyNS9ERkJBRUUxNERCRTQxMUYwQThCNUJGNjQzNjZGNTZCQy9PaHNKUVpILU5I
VTNHY0hVZ2ZJSWhhZ0l3V3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGcC/FuR3nMKU4sTueb9dElZ0aRiNvcVTDN2Zw/WAZsA/8f7LEGQXbofq+OnW
8mUZKIo1h/dnCWkfNaYNRDVU73G67fvLXykJHmoNH2N8jlVDYMasFpsYuLRWRQDN
Jypj/x2d/WddZGYPpQaAByrisnS+v3XrlcS92DdhKd1ZRewX6ehMlEqEhNaYZ2kp
dPxzuzuAU9UgGPyHqG7B4aDFwUte2r0QBTjxMrDanhMLcZ20CHegXCyjoDFTnoeF
Ne0qv7eYlGovlJqp9lAZnKOrMCra9f1zfKte0E3D5TxIJS9oDpQc7Dcr6x5u5r4L
5Mf9q/untIW7G+CAeE6qIR2WGg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 18:47:24 2026 by rpki-client