Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
File:                     o4cCGCsJqmF468qrsvz42lSt61M.mft (raw, json)
Hash identifier:          w9hsH8SJV9dsIjAD9iFdt/OKU/XoRvGjOJFfU5khrlw=
Subject key identifier:   22:A1:14:D8:B0:A7:5A:A1:ED:63:9F:26:96:63:61:9C:18:04:6E:9A
Authority key identifier: A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
Certificate issuer:       /CN=A91913D7/serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
Manifest number:          A4
Signing time:             Tue 13 Oct 2026 07:56:38 +0000
Manifest this update:     Tue 13 Oct 2026 07:56:38 +0000
Manifest next update:     Tue 20 Oct 2026 07:56:38 +0000
Files and hashes:         1: o4cCGCsJqmF468qrsvz42lSt61M.crl (hash: RuRZYhhIGgrcbn08KivtU1lp56V9KZYgezb5Wa3KPKg=)
                          2: BD3AE9AC47AF11F1862D4448A9833773.roa (hash: Sa/+2RDFFnvmTt5yGyNUTGOg6sr8HGm5v/QNH+G6roA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
                          rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 07:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91913D7, serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
        Validity
            Not Before: Oct 13 07:56:38 2026 GMT
            Not After : Oct 20 07:56:38 2026 GMT
        Subject: CN=6acde436-c779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:08:f0:6a:cd:85:e5:3e:df:88:a9:b7:0a:
                    84:af:78:89:21:dc:95:94:36:84:b2:19:2f:b0:a9:
                    5f:dd:53:92:cd:40:11:9b:85:2b:e1:99:13:77:c2:
                    59:f6:3f:e7:fe:51:7e:e5:4c:56:6a:bf:05:8c:6e:
                    f4:3d:cc:b0:cc:3e:0d:43:56:f9:f4:0f:6b:af:ed:
                    3d:82:3e:de:fe:30:22:2f:12:58:15:02:9f:c4:18:
                    c8:9c:dc:78:47:e6:60:47:3f:85:78:0a:d1:67:fa:
                    31:4d:e5:98:86:85:85:70:e0:f0:b6:1d:9b:10:54:
                    b9:23:b1:29:ab:80:7f:fa:d5:b7:2c:a0:a9:27:9f:
                    19:74:1b:07:86:86:e1:18:49:c7:05:f2:c9:cd:c5:
                    d1:c8:5a:f9:20:bf:8c:1e:7a:3e:af:54:e7:cd:ea:
                    06:00:46:8b:84:ff:c1:ea:c8:3e:44:24:f7:7f:4a:
                    08:7d:1c:41:0a:d8:56:e0:20:76:fe:28:d5:b0:42:
                    a7:a5:8f:f0:d2:b3:98:58:24:83:cf:ba:f4:56:4f:
                    47:1d:24:4d:9c:dd:e0:11:5c:f4:5f:ac:83:9f:4f:
                    e3:d0:01:b4:79:9c:e7:86:64:97:4c:df:76:17:fd:
                    f2:f9:2c:ae:ea:b8:48:28:6c:0e:38:43:51:55:6c:
                    8e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A1:14:D8:B0:A7:5A:A1:ED:63:9F:26:96:63:61:9C:18:04:6E:9A
            X509v3 Authority Key Identifier:
                keyid:A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:aa:d4:ae:af:29:06:e2:07:21:f1:6b:79:fd:50:fc:77:69:
         c1:32:b9:a7:1f:fa:40:ea:6a:44:de:8b:9c:af:7a:5d:c8:1a:
         46:01:da:c4:66:fd:80:e1:72:89:c7:36:d7:94:7f:3e:22:6d:
         9a:59:32:4b:d4:bf:3e:bd:24:1f:2b:95:7e:8f:e2:a3:06:2f:
         c6:ea:a5:0b:f3:87:19:2f:fd:9d:29:ee:81:15:f4:17:d5:07:
         aa:32:31:a3:bd:f7:78:b2:86:fb:a0:d3:c9:18:6c:8b:5a:99:
         c7:81:87:3c:ae:9c:02:d4:f1:bc:af:3e:d8:dc:72:0d:7f:68:
         f3:f7:32:d3:ad:2b:02:cc:72:aa:f3:b5:f1:3b:46:78:0c:1d:
         ea:77:76:b4:b5:3b:7b:9d:85:27:03:f6:6d:1c:c7:28:81:cb:
         71:62:07:9f:67:4e:f5:df:d6:d6:29:0b:5e:bc:3b:3e:6f:f0:
         f1:c8:fc:00:13:91:84:e8:4e:0f:c2:cf:70:62:8f:66:6e:ef:
         90:e8:1e:19:13:50:98:ce:9b:c6:a2:3c:09:46:d3:89:84:d3:
         17:c4:75:29:ad:e7:7e:58:2f:75:00:70:7f:9e:fc:a2:5a:74:
         7b:33:03:96:d2:b6:60:03:c1:94:22:31:ea:85:34:86:f7:30:
         36:4e:56:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:51:55 2026 by rpki-client