Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
File:                     oJnQLNC3-WiJZGVjnxrwazPkaqI.mft (raw, json)
Hash identifier:          gJzXcqPfHa0jq7S5HN+TewfDUih4PYrjjxoe+5zHzIA=
Subject key identifier:   BA:E4:B1:66:63:6F:CF:9C:96:35:A8:FB:64:42:78:86:63:94:52:EE
Authority key identifier: A0:99:D0:2C:D0:B7:F9:68:89:64:65:63:9F:1A:F0:6B:33:E4:6A:A2
Certificate issuer:       /CN=A91A36F2/serialNumber=A099D02CD0B7F968896465639F1AF06B33E46AA2
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
Manifest number:          4D
Signing time:             Sun 25 Oct 2026 08:46:10 +0000
Manifest this update:     Sun 25 Oct 2026 08:46:10 +0000
Manifest next update:     Sun 01 Nov 2026 08:46:10 +0000
Files and hashes:         1: oJnQLNC3-WiJZGVjnxrwazPkaqI.crl (hash: CZpPv2HU+IQQGFU31rPclJCIVWui9Z89NZmvYRKe/Z8=)
                          2: 368A4C9869E911F1A073B420A247A888.roa (hash: m8oJx9hXPNbmDxAhEro4ptD49DaHfsx1w8kJNIUKkpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.crl
                          rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 08:46:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A36F2, serialNumber=A099D02CD0B7F968896465639F1AF06B33E46AA2
        Validity
            Not Before: Oct 25 08:46:10 2026 GMT
            Not After : Nov  1 08:46:10 2026 GMT
        Subject: CN=6addc1d2-55e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9f:5e:42:f2:a1:bc:e4:bb:9a:32:33:2a:03:
                    75:43:68:f9:09:7d:62:02:41:45:56:9a:5e:75:0d:
                    fb:4f:9f:f5:77:99:b6:f0:f6:4e:d4:74:0a:11:28:
                    f8:23:fd:e4:de:dc:8c:6d:e1:8a:f8:6b:73:eb:83:
                    5b:67:0a:e8:9b:fe:4d:62:f3:dc:d0:29:06:04:f0:
                    61:a7:44:6c:ba:ca:97:7b:e3:ac:96:6e:1d:75:47:
                    de:d7:e9:f7:77:ab:e3:f6:d9:51:ad:37:ab:be:35:
                    26:88:47:4c:d1:5a:32:6f:57:03:35:49:5e:d5:62:
                    17:a7:4f:48:c7:28:73:27:04:f0:0a:cd:71:2b:fe:
                    0b:55:81:f4:51:1d:90:71:da:d3:f0:f1:02:a5:81:
                    97:46:4f:4e:c9:37:28:66:ec:ce:b4:05:1f:3c:57:
                    13:ac:84:0c:45:b7:ae:8a:74:4c:3f:e7:7f:42:1e:
                    0d:a0:e4:42:51:86:11:76:66:6f:c5:3f:3d:5f:e7:
                    1c:41:68:28:30:c2:d9:27:0a:47:68:5c:1d:5b:d2:
                    c1:96:48:33:45:0e:2c:99:cc:01:f6:84:7b:85:40:
                    bf:8f:35:b4:22:b4:97:6e:48:d1:a4:3c:1c:8f:da:
                    2d:33:26:00:7b:9e:4a:cf:ff:43:3b:e6:cd:f7:6a:
                    53:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E4:B1:66:63:6F:CF:9C:96:35:A8:FB:64:42:78:86:63:94:52:EE
            X509v3 Authority Key Identifier:
                keyid:A0:99:D0:2C:D0:B7:F9:68:89:64:65:63:9F:1A:F0:6B:33:E4:6A:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oJnQLNC3-WiJZGVjnxrwazPkaqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36F2/5E0F7B3C63B611F199CD50E07847A888/oJnQLNC3-WiJZGVjnxrwazPkaqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:e2:af:75:03:4c:0b:fd:f6:ba:7a:0d:ab:d7:59:39:6e:7a:
         2f:81:34:5a:eb:af:3f:49:46:ca:d2:4c:b8:c5:98:77:74:c7:
         ab:3e:4a:37:60:90:d2:bf:f0:0c:44:3b:4a:1b:a9:f9:6f:2e:
         78:77:97:a0:8c:da:e4:00:33:5d:16:4f:b7:d7:7b:b2:78:48:
         f7:6a:7c:87:84:3d:fa:a5:98:75:09:52:c9:1b:28:cf:c4:cf:
         63:78:f7:d1:74:91:86:9a:7b:e2:ee:40:19:c3:90:67:05:05:
         9d:3f:8e:d6:73:3c:39:64:6f:cd:f1:03:6b:d2:ea:69:31:99:
         b0:0d:33:af:87:96:4e:ac:09:49:ed:c3:2b:b3:ca:d3:0c:76:
         d3:1c:78:78:8d:38:2b:d2:d3:1f:fe:7a:d4:5e:b7:0a:59:80:
         64:6a:d3:ff:11:be:65:b1:72:21:6a:02:47:da:6f:88:77:77:
         80:6c:95:41:16:89:7b:36:1e:c5:ad:5d:48:cb:a9:93:f4:91:
         f8:41:df:69:aa:e2:cf:c9:2c:88:1d:15:80:29:12:6f:1f:15:
         de:45:ce:2e:bc:3e:b6:6d:37:b3:93:9c:2d:c7:8b:8f:93:67:
         95:6d:63:52:25:a2:83:b7:b4:e3:9a:0b:9b:ab:df:28:9f:d4:
         0c:57:db:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:07:09 2026 by rpki-client