Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
File:                     OQo4N6umkSos8p5hDaSVVd8sb6U.mft (raw, json)
Hash identifier:          TiIGCp5KTQV520V+7vg+s5zzweQ3iuEZJR/fGrLUKRQ=
Subject key identifier:   3C:E8:7A:85:41:0D:42:D1:96:77:A3:B8:98:34:8E:66:1F:B2:4A:18
Authority key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
Certificate issuer:       /CN=A91982B6/serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
Manifest number:          015F
Signing time:             Fri 09 Oct 2026 05:56:59 +0000
Manifest this update:     Fri 09 Oct 2026 05:56:59 +0000
Manifest next update:     Fri 16 Oct 2026 05:56:59 +0000
Files and hashes:         1: OQo4N6umkSos8p5hDaSVVd8sb6U.crl (hash: l6tOyzCS1+LmKcPsLdE7JEaPnpWAjBgMRA9/ymsAsUs=)
                          2: 8CC6B54CB44011F0ACFB4D45C4F9AE02.roa (hash: 8h9Rkyj4zjajWzGw5jayk/XGQjzAGuusfuMh7luHUj4=)
                          3: 4B34CDD888EB11F09EC0EE50C4F9AE02.roa (hash: mcnL8lsesYFVf7+cGRszhKENi52W4KfHZx6RDabUMA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
                          rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 05:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
        Validity
            Not Before: Oct  9 05:56:59 2026 GMT
            Not After : Oct 16 05:56:59 2026 GMT
        Subject: CN=6ac8822b-caba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7c:17:a2:84:eb:bd:27:6f:d7:89:03:6c:72:
                    83:b8:00:71:28:c4:7a:da:b2:ec:4b:6c:28:c2:b9:
                    5a:fd:37:8e:38:77:d0:47:bc:d0:bd:29:5f:c4:76:
                    c0:4f:87:1b:ef:9d:d7:0f:b8:35:1d:e6:2b:47:cb:
                    ed:dd:fd:4c:68:20:a8:b9:5f:79:11:4f:df:0c:23:
                    0a:06:a6:dd:5e:49:5a:e7:44:ba:62:c3:b8:2e:61:
                    f8:ca:09:fb:56:ff:76:54:c5:d2:5a:ab:84:a6:6d:
                    42:0e:d5:d0:fa:b5:7b:5e:0a:81:7e:cb:07:c2:8d:
                    81:0c:cd:7e:a3:d4:93:01:25:29:6b:87:4b:b9:5c:
                    c9:90:e3:d9:4b:6c:36:2f:70:e8:fa:f2:d1:17:9e:
                    36:2a:6e:7b:c6:34:0e:4f:35:cf:92:22:64:47:db:
                    4f:7d:86:87:82:66:c9:28:d0:9f:2b:91:88:3d:db:
                    9d:fb:13:58:b5:d6:06:00:49:a4:1f:43:b4:6f:85:
                    2b:7a:53:62:48:20:12:9d:1a:a1:3b:6b:37:b8:62:
                    a2:46:60:37:ae:6e:ce:a6:5c:77:ee:43:01:90:6e:
                    65:0e:07:01:7a:d1:bc:2b:a3:40:51:b9:8b:88:ce:
                    4d:0d:c4:b7:3f:75:28:59:06:77:18:e9:2a:a9:63:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E8:7A:85:41:0D:42:D1:96:77:A3:B8:98:34:8E:66:1F:B2:4A:18
            X509v3 Authority Key Identifier:
                keyid:39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:78:c1:78:f2:64:9c:a8:eb:b4:71:41:ac:21:9c:cf:aa:f1:
         7d:97:53:ec:e8:a3:4e:51:c6:23:b9:0b:02:71:21:ea:a2:3d:
         03:0a:d5:c9:1b:b6:d0:b9:d2:93:ec:ba:7f:75:79:8b:74:66:
         2a:cd:7f:bb:2e:9a:bc:36:87:90:86:cf:3e:8f:28:23:1a:c9:
         43:b5:42:55:1e:96:e3:55:19:73:9e:31:98:30:d2:3b:37:71:
         9b:36:6b:c1:a4:74:77:28:db:b5:24:8f:75:5a:37:f7:a8:c4:
         ec:90:f7:1a:a2:3c:1b:46:66:71:9c:cb:f1:e5:b0:ab:c1:6a:
         d5:ce:2f:08:77:50:c0:49:9a:e6:53:c5:a9:19:c7:df:8e:36:
         9a:ea:5b:e2:b7:ea:e1:12:87:0b:c6:14:9c:6e:4b:18:73:43:
         1e:40:40:5f:7f:df:91:73:32:ce:fb:48:82:32:ff:8b:c8:de:
         68:02:86:7e:fb:09:45:e6:11:de:b7:53:dd:3a:c0:96:41:77:
         9d:7a:7a:a5:3e:f7:e3:44:bc:c5:49:9b:40:0c:15:a6:c4:13:
         08:ad:f4:e1:52:84:f2:71:00:e0:e5:06:1b:39:f0:ad:5f:ab:
         36:89:12:b0:8a:e5:76:e4:b2:a6:67:39:62:6d:97:2d:74:ea:
         d9:1a:46:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgyQjYxMTAvBgNVBAUTKDM5MEEzODM3QUJBNjkxMkEyQ0YyOUU2MTBEQTQ5NTU1
REYyQzZGQTUwHhcNMjYxMDA5MDU1NjU5WhcNMjYxMDE2MDU1NjU5WjAYMRYwFAYD
VQQDEw02YWM4ODIyYi1jYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnnwXooTrvSdv14kDbHKDuABxKMR62rLsS2wowrla/TeOOHfQR7zQvSlfxHbA
T4cb753XD7g1HeYrR8vt3f1MaCCouV95EU/fDCMKBqbdXkla50S6YsO4LmH4ygn7
Vv92VMXSWquEpm1CDtXQ+rV7XgqBfssHwo2BDM1+o9STASUpa4dLuVzJkOPZS2w2
L3Do+vLRF542Km57xjQOTzXPkiJkR9tPfYaHgmbJKNCfK5GIPdud+xNYtdYGAEmk
H0O0b4UrelNiSCASnRqhO2s3uGKiRmA3rm7Oplx37kMBkG5lDgcBetG8K6NAUbmL
iM5NDcS3P3UoWQZ3GOkqqWOrhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzoeoVB
DULRlnejuJg0jmYfskoYMB8GA1UdIwQYMBaAFDkKODerppEqLPKeYQ2klVXfLG+l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJCNi9ERTdFMzIxRUNC
NTkxMUVGODY5MTVCNjFDNEY5QUUwMi9PUW80TjZ1bWtTb3M4cDVoRGFTVlZkOHNi
NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09RbzRONnVta1NvczhwNWhEYVNWVmQ4c2I2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODJCNi9ERTdFMzIxRUNCNTkxMUVGODY5MTVCNjFDNEY5QUUwMi9PUW80TjZ1bWtT
b3M4cDVoRGFTVlZkOHNiNlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsHjBePJknKjrtHFBrCGcz6rxfZdT7OijTlHGI7kLAnEh6qI9AwrVyRu20LnS
k+y6f3V5i3RmKs1/uy6avDaHkIbPPo8oIxrJQ7VCVR6W41UZc54xmDDSOzdxmzZr
waR0dyjbtSSPdVo396jE7JD3GqI8G0ZmcZzL8eWwq8Fq1c4vCHdQwEma5lPFqRnH
3442mupb4rfq4RKHC8YUnG5LGHNDHkBAX3/fkXMyzvtIgjL/i8jeaAKGfvsJReYR
3rdT3TrAlkF3nXp6pT7340S8xUmbQAwVpsQTCK304VKE8nEA4OUGGznwrV+rNokS
sIrlduSypmc5Ym2XLXTq2RpGlw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 19:21:34 2026 by rpki-client