Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
File:                     oXyIfuladLPXOMFccI_s_Wu4xmo.mft (raw, json)
Hash identifier:          PX0ADxvz7HmuL/nWVYJQYpooVHnThtvwsnL9Mp54Osk=
Subject key identifier:   33:EF:34:74:75:F0:77:7B:FC:D0:38:FE:68:7B:27:F0:9E:1E:95:53
Authority key identifier: A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A
Certificate issuer:       /CN=A918F646/serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
Certificate serial:       12DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
Manifest number:          12C0
Signing time:             Sun 04 Oct 2026 17:05:28 +0000
Manifest this update:     Sun 04 Oct 2026 17:05:28 +0000
Manifest next update:     Sun 11 Oct 2026 17:05:28 +0000
Files and hashes:         1: oXyIfuladLPXOMFccI_s_Wu4xmo.crl (hash: 5/Sv7ZU0sYHvDSdeTtzw7XWxbq1NrekHIDtzf3aJN8Q=)
                          2: 5D5FEDE0D3AE11EB908D6529C4F9AE02.roa (hash: UmgWUU8NA1nNiK28pvWu8eBpGFgthPvzpWq/tN/hgM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl
                          rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 17:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4831 (0x12df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F646, serialNumber=A17C887EE95A74B3D738C15C708FECFD6BB8C66A
        Validity
            Not Before: Oct  4 17:05:28 2026 GMT
            Not After : Oct 11 17:05:28 2026 GMT
        Subject: CN=6ac28758-fcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:36:ff:e4:6d:04:2d:29:2f:b4:98:3d:a9:
                    25:97:47:15:99:d5:cc:de:7b:5a:36:45:84:63:09:
                    57:be:7b:ef:fa:b5:ca:5b:c7:a1:ee:eb:6c:09:da:
                    e8:ee:ec:81:48:d0:9d:be:78:33:37:40:15:3b:0d:
                    2c:2b:03:83:de:30:ad:11:8a:0a:2d:0e:62:0a:b5:
                    74:75:f2:4d:64:f0:b5:c7:90:e6:47:45:8e:07:09:
                    a8:b6:2d:54:46:3d:40:d8:66:25:be:2b:be:90:0c:
                    4c:90:e8:b9:a0:38:90:42:fa:f2:fa:50:75:16:bb:
                    1c:02:11:6e:ac:77:c2:4e:7d:07:7d:6a:06:fc:e3:
                    06:e4:2a:95:34:54:92:05:f5:f5:c3:7f:de:39:ba:
                    c3:68:49:97:a5:da:0d:90:e8:48:09:f7:12:4e:05:
                    57:51:18:12:7a:73:ad:c0:c5:36:e9:37:6e:e0:ed:
                    bc:07:6d:a7:40:c5:c0:18:d9:22:15:d4:ac:58:f3:
                    20:d7:d1:6d:24:ed:b9:2c:b0:f4:29:73:87:31:be:
                    ee:28:a9:40:52:b1:fe:b8:d3:12:c2:c3:c7:98:f6:
                    26:dc:49:37:ab:77:9e:d5:80:14:6d:b3:6c:27:c5:
                    74:a8:f2:a5:8e:24:e9:52:b7:7e:58:10:92:ec:39:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EF:34:74:75:F0:77:7B:FC:D0:38:FE:68:7B:27:F0:9E:1E:95:53
            X509v3 Authority Key Identifier:
                keyid:A1:7C:88:7E:E9:5A:74:B3:D7:38:C1:5C:70:8F:EC:FD:6B:B8:C6:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oXyIfuladLPXOMFccI_s_Wu4xmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/D92DD038F48E11E8B14A341EC4F9AE02/oXyIfuladLPXOMFccI_s_Wu4xmo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:cd:23:da:38:92:58:d0:62:59:ad:e0:4b:ff:5a:b5:0d:ed:
         b0:6c:fa:c2:16:ad:8c:75:7e:63:89:cc:1a:ec:1c:fc:a9:d3:
         3c:52:5c:d1:31:d7:46:f5:a1:a9:d6:dd:77:dd:cc:0f:ad:b3:
         8a:be:28:70:ac:ab:3d:68:7b:45:ec:e7:3e:16:af:40:ba:ba:
         17:56:35:64:9b:9a:02:22:aa:06:39:f3:e3:3b:b9:8d:20:e5:
         9f:e3:7f:88:ca:13:38:ce:ba:6d:5d:62:d5:63:2e:0d:be:b5:
         ec:a3:80:89:90:75:8f:aa:3c:01:4c:04:83:e4:51:09:02:52:
         3f:10:3d:13:f8:ac:ed:a0:36:2b:bc:39:e3:96:ae:ad:a5:f8:
         fe:12:8d:2f:15:2e:47:c9:b8:bf:17:31:ab:e8:34:9d:f4:5d:
         9b:a6:0d:60:a2:3a:89:58:9a:5a:c8:f3:05:68:8f:bb:cb:84:
         69:67:62:73:56:81:a8:06:0e:2c:3c:0f:63:5a:ee:ce:5f:8d:
         5f:f8:6a:d0:f6:8c:5b:8e:24:60:f0:5c:de:8c:da:d6:45:4a:
         bc:78:5a:39:e6:d4:70:5f:31:80:2f:6e:81:3f:da:37:e1:86:
         b6:30:d6:7d:04:24:e3:4b:4b:19:b8:9d:a2:b0:e7:8a:e6:de:
         d5:e4:4a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:15:37 2026 by rpki-client