Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
File:                     oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json)
Hash identifier:          p5XVv8WjFh/D5Fftk2wUA5qlaJUIr2pQlt9hUNy1WH4=
Subject key identifier:   17:C9:F2:4C:E6:E2:FE:12:71:59:16:CB:29:F5:77:0F:CB:33:F8:AF
Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
Certificate issuer:       /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Certificate serial:       0870
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
Manifest number:          0859
Signing time:             Thu 22 Oct 2026 21:06:42 +0000
Manifest this update:     Thu 22 Oct 2026 21:06:42 +0000
Manifest next update:     Thu 29 Oct 2026 21:06:42 +0000
Files and hashes:         1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: TmNxCkcm3zrcF8q4pGa/W4iiqN1INpk/sxkSIWIxxrM=)
                          2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: a8Wy1m3Rmhsdw7JgMn9q7U8Wx5LEB2V1AB0BFbhhHE0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
                          rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 21:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160 (0x870)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C
        Validity
            Not Before: Oct 22 21:06:42 2026 GMT
            Not After : Oct 29 21:06:42 2026 GMT
        Subject: CN=6ada7ae2-4009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:46:22:69:f7:99:70:b6:fc:1c:1b:cb:24:
                    2a:fe:c9:bd:b4:04:40:5f:0e:5b:23:6d:e4:96:32:
                    6a:45:e2:a8:ff:d9:28:a9:2d:3f:69:fc:79:49:07:
                    65:fc:b9:e2:e1:96:1e:f3:c0:21:b0:95:c6:7b:83:
                    5e:f1:c4:00:76:06:ce:a1:9a:e8:ca:a0:b0:19:28:
                    bf:eb:39:19:8f:e4:fa:93:65:0d:3e:b6:78:3a:39:
                    e1:c3:a1:93:67:90:40:5c:f6:38:69:d9:f7:bd:05:
                    ea:ad:ab:10:93:7a:ae:85:22:a8:7a:32:83:48:4d:
                    81:da:07:99:5d:24:92:a5:fc:02:6b:89:a9:52:68:
                    b3:a4:0d:10:44:62:0c:a5:2a:39:7b:27:94:1f:4a:
                    68:f8:b9:c6:f2:07:3b:98:e9:fd:0e:8c:d0:2a:0c:
                    3f:d6:4c:61:5b:b2:a1:aa:4e:51:03:58:22:86:0f:
                    94:79:74:5c:ba:92:6d:bb:01:f0:6e:f5:e8:6e:07:
                    23:b3:ff:5b:92:e8:92:8d:4d:52:4b:f1:65:55:e9:
                    db:82:a1:e2:b7:de:f4:8d:e1:db:1e:7d:98:18:85:
                    a2:c5:4f:f2:f2:cf:ca:c3:50:12:d5:16:8a:da:49:
                    5f:15:fb:6e:ec:f3:67:53:e3:01:c1:42:d1:6a:60:
                    13:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C9:F2:4C:E6:E2:FE:12:71:59:16:CB:29:F5:77:0F:CB:33:F8:AF
            X509v3 Authority Key Identifier:
                keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:99:30:41:4d:d0:67:bb:9b:63:87:41:26:2b:cd:53:94:61:
         7e:97:4f:e2:b4:a7:d0:0f:0b:ef:40:d9:6c:03:b3:ba:3d:5b:
         16:ae:ac:0e:ca:c5:c0:83:2f:57:9c:b4:38:fa:85:2e:4a:7a:
         5c:6e:8d:e6:be:65:ff:78:f9:2e:45:fe:f8:b9:f0:ad:4f:9f:
         bf:d5:26:b1:ee:ee:c4:50:02:12:e0:f6:32:38:01:97:6c:e0:
         fc:b8:ff:b3:6a:15:e5:b0:0b:63:1e:f0:5b:c6:00:64:3c:e1:
         48:8f:c6:9e:80:2a:7b:e3:8c:d5:c0:d7:d9:22:97:16:83:86:
         b8:7f:24:6b:21:32:64:81:3b:17:df:46:2d:b5:91:39:9c:fc:
         6e:3a:6d:02:ba:31:58:cf:07:bc:4d:78:9f:61:98:ec:b5:f3:
         c6:83:f1:76:85:f0:b3:2d:e9:99:7f:20:89:34:e8:a2:03:9d:
         d3:e6:64:41:fb:31:b7:3d:ea:54:c1:37:5b:f1:ad:46:f9:0f:
         00:48:9a:41:8c:0f:e6:52:38:29:23:45:e6:63:d8:4e:ae:04:
         a1:a0:fa:e5:2c:a5:ed:82:96:30:77:18:0c:70:47:b2:7b:ae:
         be:7f:8d:5d:ee:f9:58:b9:b0:06:c2:21:9f:62:49:f5:8b:75:
         7d:06:28:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 19:30:00 2026 by rpki-client