Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
File:                     OUPUJhV5zeDoKgXKKrVLOHulGTM.mft (raw, json)
Hash identifier:          mJc1U36ZzWck0mazQYdb0ec4+C0/IKjKYvREyDndUbY=
Subject key identifier:   70:42:93:F8:87:B1:79:D5:BE:2D:B6:70:6D:AD:D8:79:30:25:BD:DF
Authority key identifier: 39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33
Certificate issuer:       /CN=A919D88F/serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
Manifest number:          017F
Signing time:             Sat 31 Oct 2026 05:07:46 +0000
Manifest this update:     Sat 31 Oct 2026 05:07:46 +0000
Manifest next update:     Sat 07 Nov 2026 05:07:46 +0000
Files and hashes:         1: OUPUJhV5zeDoKgXKKrVLOHulGTM.crl (hash: e/igYpEaFo0QgOyQieuGx2ZebAEIs84mieiPMwNeJNY=)
                          2: ObvLfY5VdjElleF6R91j-5QRFZ4.asa (hash: YCi63JsRE46FI7sX4VFOWqFn9fCA5LYV5XYP2uTl0cY=)
                          3: 31C36B64905F11EFAF49EB6BC4F9AE02.roa (hash: dKI7uA/SKO3RusYnEdr0A/ZscE+vPWKaXvZ4/iotjxI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl
                          rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 05:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D88F, serialNumber=3943D4261579CDE0E82A05CA2AB54B387BA51933
        Validity
            Not Before: Oct 31 05:07:46 2026 GMT
            Not After : Nov  7 05:07:46 2026 GMT
        Subject: CN=6ae577a2-5e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:53:09:f9:e1:23:bf:df:29:b7:0c:32:64:db:
                    81:06:da:2d:d2:52:c3:33:98:b7:31:5e:19:7b:7b:
                    2d:3e:1e:d9:4c:c0:fa:69:8f:4e:13:ca:55:59:81:
                    1b:a4:9b:de:fc:af:08:5f:7a:bd:cc:3b:ac:d6:bb:
                    26:0a:cd:0c:67:e6:81:53:72:60:2b:d2:c5:a4:c2:
                    4e:65:4a:dd:c3:d3:74:3b:62:da:07:08:05:ef:3e:
                    e0:58:1d:eb:7a:c0:d4:c8:f7:2e:fe:af:6b:83:b4:
                    5d:b7:b4:3d:2a:56:7f:09:1a:9e:a4:b4:b5:ce:7e:
                    02:2b:e2:a7:54:95:92:53:41:45:d7:a8:eb:7b:4e:
                    c3:19:a9:ee:65:52:8b:ac:a2:bd:aa:bd:2f:6d:d5:
                    ef:65:6b:d7:e6:7e:9e:88:85:60:f1:8b:e9:86:aa:
                    ed:80:52:44:4f:1c:93:8d:ba:78:07:1f:d6:2a:05:
                    57:60:79:99:e6:29:6d:63:7b:91:5a:18:42:a7:c7:
                    f0:f3:22:04:fa:57:09:8f:03:17:89:2c:ab:00:cb:
                    2b:4c:05:df:38:4c:ed:0b:99:f5:a3:a5:d5:9b:f1:
                    e9:ec:7f:1b:8a:e2:2f:29:24:53:88:d3:f6:26:ad:
                    ff:85:9d:69:ea:6c:ac:37:8d:e8:45:5f:a6:59:dd:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:42:93:F8:87:B1:79:D5:BE:2D:B6:70:6D:AD:D8:79:30:25:BD:DF
            X509v3 Authority Key Identifier:
                keyid:39:43:D4:26:15:79:CD:E0:E8:2A:05:CA:2A:B5:4B:38:7B:A5:19:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUPUJhV5zeDoKgXKKrVLOHulGTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D88F/84A5BC80905D11EFA4F31D2EC4F9AE02/OUPUJhV5zeDoKgXKKrVLOHulGTM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:eb:96:26:50:a0:e5:9f:8b:0c:01:a8:09:b6:7e:ce:7d:80:
         5e:44:a3:ed:56:16:c2:f7:ca:c3:be:16:eb:bb:44:88:cf:31:
         29:df:20:ff:c5:6f:f1:3f:50:4a:69:9b:dc:0b:67:a3:ac:06:
         f0:67:33:62:66:ce:91:8e:d7:b0:45:98:cd:62:05:69:b7:ee:
         59:65:61:17:b7:8a:26:be:23:d4:45:aa:81:8d:f9:6e:f5:a6:
         dd:cc:1c:7e:eb:af:ba:00:e9:20:94:dc:24:48:f0:65:10:61:
         6c:b0:b7:c3:01:34:78:a0:12:03:72:3d:56:03:bb:be:13:c5:
         0e:0b:10:96:fa:05:e0:64:c9:ad:95:70:11:b9:40:7a:ef:38:
         ae:07:65:82:12:1f:9e:73:cc:ce:0a:46:35:87:24:c1:3e:27:
         85:51:79:82:72:bd:b3:5f:92:71:28:a3:3a:2b:8b:17:f8:3d:
         99:e4:b5:ae:7a:e5:44:a2:31:1d:8c:f7:5d:20:25:7d:d1:b9:
         38:59:84:42:5d:a3:02:2a:ba:2c:3a:78:5d:df:5d:cb:47:a6:
         25:1d:7a:a4:86:89:49:db:11:24:8d:b7:84:3d:81:05:b7:1f:
         e3:59:3d:5b:0d:ee:32:95:bd:45:7c:37:f5:83:8b:34:00:76:
         d5:90:1f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:28:43 2026 by rpki-client