Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
File:                     o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft (raw, json)
Hash identifier:          HSVY09jixCKnmp27fwp4rAV6CB7/NKfXvAXu+Sbl8cI=
Subject key identifier:   B0:EA:09:98:BF:84:C4:E8:C2:5D:FF:D0:DE:56:09:E5:A7:A4:EE:38
Authority key identifier: A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20
Certificate issuer:       /CN=A91AFB4B/serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
Certificate serial:       0421
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
Manifest number:          041A
Signing time:             Sat 05 Sep 2026 00:03:50 +0000
Manifest this update:     Sat 05 Sep 2026 00:03:50 +0000
Manifest next update:     Sat 12 Sep 2026 00:03:50 +0000
Files and hashes:         1: o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl (hash: 2dDRUT2rB/Ndi+RPRGDTASxzj3DbvMoD/feLZugr2sA=)
                          2: E2F2A470C76411EC85896F5EC4F9AE02.roa (hash: omBdwTJjBpYLM0wYV64/jRWywyvUBhT0d+jsji8w+eY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl
                          rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 00:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFB4B, serialNumber=A35561DA45A955F02D122A0D88E8C76239EDF920
        Validity
            Not Before: Sep  5 00:03:50 2026 GMT
            Not After : Sep 12 00:03:50 2026 GMT
        Subject: CN=6a9b5c66-f33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0a:50:fd:66:74:9a:d9:ae:f3:af:90:90:31:
                    d0:fd:62:f3:92:10:49:1a:21:20:b5:fd:8b:58:0c:
                    39:31:fe:1f:75:55:ab:33:36:cd:3a:e5:2c:63:e3:
                    e9:65:6f:3e:b9:70:51:a5:d1:b1:cf:95:c5:0c:90:
                    06:15:9a:a4:a4:56:f4:fb:d9:8a:d0:9b:26:8c:04:
                    f8:fe:b0:4c:3e:6e:f9:83:23:3f:65:15:ca:e6:e9:
                    c4:ca:bd:40:ff:0b:e5:dd:7b:c6:93:9c:12:9f:73:
                    3b:e0:7d:90:af:5f:02:b4:70:39:d5:3d:87:7c:6f:
                    4b:ca:3a:a0:23:c8:cb:8e:b4:15:4d:9f:44:e0:2d:
                    9f:a4:75:e5:9c:0c:b4:e4:36:ab:ac:b7:60:17:0d:
                    2b:53:99:0d:00:ba:9a:60:b7:ab:59:65:c5:07:63:
                    a5:8f:cd:cb:8c:7e:01:a8:df:c9:d5:22:f6:2b:40:
                    d5:a9:68:bc:eb:6b:b0:5f:ae:56:41:e8:1a:aa:26:
                    8d:f8:1a:39:1a:e6:9c:d9:b8:59:51:e0:32:ab:7e:
                    c0:8b:ec:b9:f5:54:ce:7f:74:40:3c:8f:40:33:8b:
                    31:af:1a:2a:e1:0d:67:0e:0c:74:bd:8e:81:b7:34:
                    f7:ab:98:24:a8:14:d5:bd:25:e4:8f:d6:13:e8:38:
                    9e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EA:09:98:BF:84:C4:E8:C2:5D:FF:D0:DE:56:09:E5:A7:A4:EE:38
            X509v3 Authority Key Identifier:
                keyid:A3:55:61:DA:45:A9:55:F0:2D:12:2A:0D:88:E8:C7:62:39:ED:F9:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1Vh2kWpVfAtEioNiOjHYjnt-SA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4B/8E162430C76011EC8E7D9629C4F9AE02/o1Vh2kWpVfAtEioNiOjHYjnt-SA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:0d:30:31:88:67:ea:73:71:b3:1f:42:70:5f:fe:01:fb:b3:
         aa:98:71:47:d6:c0:28:8f:1d:22:04:b4:a9:7a:21:92:e8:30:
         a9:8c:fb:16:a6:78:9c:52:26:cc:33:40:2a:28:b7:61:10:6a:
         6f:04:f3:c3:3c:25:9f:a9:bb:71:41:f6:b5:76:12:92:17:e4:
         9c:c3:92:e5:90:4f:88:20:10:a9:b3:8a:ef:ad:0a:17:11:a7:
         94:b6:88:8d:1b:2f:c2:99:31:e1:4c:bf:dc:f8:a4:95:07:2b:
         75:65:88:09:c7:84:40:d3:eb:b5:b1:48:a3:89:8f:4f:03:6a:
         d0:a3:85:f5:3e:5c:86:1d:84:01:05:e9:c3:59:5a:52:80:5e:
         43:14:ac:ba:f4:5b:4b:dc:3a:33:8c:33:ea:05:f8:c9:67:b6:
         16:08:be:cb:2d:ed:1c:54:e1:14:eb:48:59:8c:cc:e9:f0:2e:
         be:a5:34:37:22:39:3d:25:97:4e:17:3b:8f:86:39:a7:96:91:
         37:38:1b:15:3f:b3:7f:36:41:23:4e:92:3a:d5:1f:6c:b1:c8:
         0c:2f:ea:2e:3c:df:98:8f:9b:d8:25:ee:6f:c9:15:cf:8d:c1:
         d3:e0:c6:26:7b:83:06:86:fb:7e:9b:2a:ca:4d:a6:48:b5:25:
         08:64:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:04:02 2026 by rpki-client