Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
File:                     oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json)
Hash identifier:          m0Xn7FVrGnwio9cPJyPx/9xMsK7AwBcSdoPn+Sou0GY=
Subject key identifier:   B1:1A:0F:03:36:9F:B9:9C:2F:43:F7:EF:2E:4B:02:A7:F7:6C:EA:B5
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Certificate issuer:       /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial:       3694
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
Manifest number:          3606
Signing time:             Tue 06 Oct 2026 14:26:21 +0000
Manifest this update:     Tue 06 Oct 2026 14:26:20 +0000
Manifest next update:     Tue 13 Oct 2026 14:26:20 +0000
Files and hashes:         1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: b4H47KFeWjoDC0VIOyNbBHJQCaKRAf1XnLVuHvEljko=)
                          2: 02C97520985011F083EA2077C4F9AE02.roa (hash: elpetSZnc/cw/UNBwFiiaE6GRjUvr9tLQSkFah9iq8Y=)
                          3: 72378020EE2A11F0BE1A1CA2486F56BC.roa (hash: aKgJ5Lr0RjgCGZC/3syl2BTMU1aaDSTAss+LizAPlBc=)
                          4: 6C1B853CB93811F09BBA425FC4F9AE02.roa (hash: GDg6tzHTkf4U+SPLrShf4CtKLD6rp4wOgPpuQzEBJ6s=)
                          5: CC23ED70990811F08BF0CB55C4F9AE02.roa (hash: +E2YvC30N7G4XyfUFImEIGM741TQeBV6oc6cEcKy0A4=)
                          6: DFC15BFCEE2A11F08F37AFA2486F56BC.roa (hash: SDyY9CxWbpTxTv2y+7w0t15rfAMVOucoRmveZEJG2J4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
                          rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13972 (0x3694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
        Validity
            Not Before: Oct  6 14:26:20 2026 GMT
            Not After : Oct 13 14:26:20 2026 GMT
        Subject: CN=6ac5050d-4ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:f6:04:ed:72:ce:cd:c2:c3:2c:aa:54:bc:
                    07:c0:72:d7:92:d9:61:9e:09:c5:64:ff:85:d1:f8:
                    fd:8f:60:20:e7:fd:70:24:7a:4a:5a:65:8e:81:df:
                    85:5c:f4:8f:83:43:43:e0:83:16:68:83:fa:c2:d5:
                    c9:67:fd:b9:3e:06:cc:cf:ef:9d:de:26:ce:22:b4:
                    83:75:b1:c9:5d:0c:fe:d3:71:55:ba:67:80:d7:ed:
                    ed:ef:97:dc:e5:9e:aa:69:16:e0:12:0c:3c:59:09:
                    96:e1:76:a8:e0:a8:c6:44:48:64:fb:92:a9:b1:2d:
                    88:72:c8:1d:f7:63:32:12:89:cb:fd:9c:ac:f3:4c:
                    ae:74:ba:18:a6:2a:77:48:97:4a:86:97:83:be:35:
                    7f:29:0f:78:f7:27:6b:c0:94:76:e8:43:34:2a:4b:
                    9b:9f:dd:48:da:09:89:4c:2f:58:b2:20:2f:e1:32:
                    33:f6:ec:f5:61:a1:52:f4:03:d0:71:b3:53:b9:e3:
                    15:88:0d:c5:c6:99:58:fd:3c:d2:68:51:20:79:66:
                    a2:50:85:4b:46:8f:58:00:d0:02:c6:a1:32:b9:b2:
                    f7:9c:15:e5:0a:25:7b:f0:ee:dc:52:dc:87:21:d7:
                    76:be:09:0d:e9:2e:fa:4d:54:86:79:a1:58:6f:27:
                    4e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1A:0F:03:36:9F:B9:9C:2F:43:F7:EF:2E:4B:02:A7:F7:6C:EA:B5
            X509v3 Authority Key Identifier:
                keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f1:73:8c:4b:35:60:d7:82:c1:b3:3c:ff:33:86:af:1a:16:
         44:9a:c0:f8:e5:db:7b:91:16:90:a2:b3:c1:73:1d:be:41:63:
         f0:55:45:cc:af:04:66:98:7d:cd:01:46:a7:c0:73:da:b2:9b:
         2e:48:db:51:65:d6:52:01:94:d5:f8:ae:f7:54:5b:4a:02:94:
         b8:f6:f1:a7:45:10:81:be:4b:2e:d2:00:cf:4e:30:ee:5a:0b:
         0c:e9:16:8c:8d:eb:ea:b2:49:09:61:39:91:e9:5a:81:ec:39:
         f1:e1:d3:64:4e:56:29:a1:31:0f:e1:2d:65:d7:48:d7:3f:46:
         cc:11:4b:6d:88:36:78:b6:0a:e0:0c:9f:77:c7:ba:64:41:0c:
         76:3a:52:13:66:c0:fd:1f:bc:fc:67:15:6d:54:e4:8a:00:10:
         96:42:93:bc:75:6f:66:2a:25:2c:ab:03:35:29:9e:2e:e5:a1:
         80:b9:aa:e0:a0:49:89:7f:2d:04:8d:86:60:47:fc:6d:df:d8:
         3b:77:ed:5f:9a:5d:10:1a:1c:12:5b:54:56:bb:1a:58:52:88:
         06:e9:cc:64:25:49:ec:a3:d8:59:47:a2:c0:c5:12:c4:76:43:
         ed:f0:75:d5:8f:57:9f:f9:9e:b3:ea:a4:c0:c3:ba:7d:47:ec:
         1d:cc:c9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:32:52 2026 by rpki-client