Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
File:                     oL2xs_Hk5wTrTU8s5f405lA3uUM.mft (raw, json)
Hash identifier:          He/GYkmKDoNESXI0TJM//WUg2glSERfBrufjiTpV74Q=
Subject key identifier:   D3:E9:DD:6F:21:94:FD:64:90:8B:FA:1E:D4:EC:56:E3:EE:FD:40:C0
Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
Certificate issuer:       /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Certificate serial:       0A02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
Manifest number:          09F1
Signing time:             Sat 24 Oct 2026 19:48:59 +0000
Manifest this update:     Sat 24 Oct 2026 19:48:59 +0000
Manifest next update:     Sat 31 Oct 2026 19:48:59 +0000
Files and hashes:         1: oL2xs_Hk5wTrTU8s5f405lA3uUM.crl (hash: pEjFNd7pGPxVz/1jfw6c+OvLWr4xNfw3KcgNoMegju0=)
                          2: 975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (hash: qdHsepzcAOjuAg1w+GnK6uKVgZktZf14YKTA/qN5ags=)
                          3: A21F0938C44B11EB8CF88F1EC4F9AE02.roa (hash: JxvxI6LJ6TE3o05TEr7Y6rv7xRaFRfn8yJoeJorzJAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
                          rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 19:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2562 (0xa02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
        Validity
            Not Before: Oct 24 19:48:59 2026 GMT
            Not After : Oct 31 19:48:59 2026 GMT
        Subject: CN=6add0bab-4679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:34:46:0f:c1:e3:73:44:34:7c:54:53:f4:
                    51:ed:90:e3:db:9c:4d:6e:8a:12:14:51:19:d1:33:
                    c0:d7:81:67:64:d3:12:58:b9:35:a3:a0:75:24:cf:
                    c1:cd:52:d3:ad:ea:b8:8c:46:c8:ec:77:34:d5:b4:
                    6b:4d:d9:cd:58:6e:a4:08:0c:7b:07:67:e4:c9:60:
                    2f:26:83:42:90:b5:9a:bc:39:35:a1:77:bc:fa:02:
                    53:d5:37:25:69:06:a3:42:44:dc:87:06:f2:36:be:
                    7c:2a:64:3d:84:b3:86:9e:61:f0:b1:10:75:6f:e6:
                    d0:08:7c:67:55:f2:0c:a4:6e:b5:07:da:bd:58:c5:
                    46:7d:6e:d7:16:e2:dd:23:61:be:75:aa:c0:32:a4:
                    26:67:5a:8c:ce:1a:e6:c3:17:ad:66:b1:5c:61:b9:
                    d3:1e:8b:1b:c7:8a:40:e8:65:08:62:f2:0c:82:43:
                    52:66:37:55:dc:90:b5:4a:ed:9f:9f:e5:94:5f:b0:
                    5b:1c:a6:30:15:f5:4b:0e:29:cc:a1:00:07:82:6a:
                    7c:39:68:a2:64:10:42:37:0b:4c:f4:76:de:3c:32:
                    a9:c4:1f:28:ad:f5:5d:e6:39:b0:7e:ad:b3:e5:ca:
                    eb:c4:14:84:41:56:eb:93:d0:9c:61:f4:e6:84:6e:
                    b0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E9:DD:6F:21:94:FD:64:90:8B:FA:1E:D4:EC:56:E3:EE:FD:40:C0
            X509v3 Authority Key Identifier:
                keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:35:08:61:6d:73:fa:56:64:2d:16:cc:54:21:59:20:34:e2:
         57:9e:38:a2:18:81:e3:6f:23:ee:5f:3f:ec:e5:06:d8:92:3e:
         21:8e:f0:6a:65:4b:3f:9e:b5:e0:f3:7a:64:67:bb:67:b3:d7:
         75:45:23:11:1f:36:47:1f:16:56:08:fa:7e:9c:a5:79:74:a5:
         3b:54:0c:a7:29:bf:90:64:8b:ad:4f:2b:0b:1a:4e:9a:91:1b:
         73:d4:ae:1e:f6:9e:92:ff:ba:ac:6e:ce:a6:14:9d:42:c0:2c:
         20:ff:db:d9:75:a0:1c:d8:33:4e:2d:0a:43:80:02:3a:6d:69:
         af:d3:aa:9a:e6:31:cf:37:d8:f6:56:92:96:93:e8:7f:f7:65:
         39:73:e7:fe:f5:0a:b2:c0:d5:86:43:65:5c:d1:82:9a:27:05:
         2f:9f:e4:9c:09:13:a8:b4:a1:3f:5d:49:62:b6:42:3f:8c:ea:
         e1:4e:28:23:69:bc:81:fb:b1:b1:fa:cc:89:a2:d8:3b:ed:d8:
         eb:07:0a:14:81:34:16:0a:6a:d0:40:f3:99:09:90:5a:c2:f1:
         04:99:f1:83:05:08:ef:82:b8:6e:a1:39:ef:4f:a0:cf:48:9b:
         15:b7:8a:94:25:f4:95:90:c3:af:2e:fe:e7:fa:1a:7c:f5:32:
         af:bc:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:26:49 2026 by rpki-client