Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft
File:                     b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft (raw, json)
Hash identifier:          nLe/B3UihE18RIVVXuYmMj6YMzRFsHh3WRQG2gU66mI=
Subject key identifier:   B7:96:A2:10:E8:1C:99:0C:EB:3F:55:DC:57:C7:E9:A5:1E:1B:64:B9
Authority key identifier: 6F:E3:B1:09:F6:35:B0:EF:83:76:AE:76:B9:6A:D3:73:D0:D7:6C:1A
Certificate issuer:       /CN=A91B3454/serialNumber=6FE3B109F635B0EF8376AE76B96AD373D0D76C1A
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-OxCfY1sO-Ddq52uWrTc9DXbBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft
Manifest number:          0D
Signing time:             Sat 03 Oct 2026 09:54:43 +0000
Manifest this update:     Sat 03 Oct 2026 09:54:42 +0000
Manifest next update:     Sat 10 Oct 2026 09:54:42 +0000
Files and hashes:         1: b-OxCfY1sO-Ddq52uWrTc9DXbBo.crl (hash: kJAqQxh8441sOCGu6A189g+VeKTQ9jp4NJJvruSrAs4=)
                          2: 62E1AF04B7CB11F18192031E6111F970.roa (hash: HWWm8Q00Gt9LaTKw9ci2EeXZ7/ohCtlrP5F8reRfwKs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.crl
                          rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-OxCfY1sO-Ddq52uWrTc9DXbBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3454, serialNumber=6FE3B109F635B0EF8376AE76B96AD373D0D76C1A
        Validity
            Not Before: Oct  3 09:54:42 2026 GMT
            Not After : Oct 10 09:54:42 2026 GMT
        Subject: CN=6ac0d0e2-6e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:a2:eb:c7:c1:51:72:f2:83:5a:a4:d7:e4:
                    94:7f:d2:d7:96:45:65:41:e0:11:a0:e9:0a:20:00:
                    32:6d:4c:c7:ec:ea:e7:99:9e:dd:f6:27:4a:ac:a1:
                    96:ca:57:95:85:6e:ef:c5:8d:d2:73:0b:8f:9e:e8:
                    9b:9f:ad:45:75:ee:66:33:30:c5:0d:1e:57:18:a9:
                    f1:eb:bc:ef:c4:82:e6:8c:4b:55:fc:bc:da:80:78:
                    74:5d:eb:9c:7a:76:57:a7:45:0e:e3:70:47:a0:cf:
                    4c:1c:79:d2:f6:65:8d:05:61:8e:52:96:1f:47:cf:
                    3e:98:9a:f0:ec:d6:bf:6d:90:c3:52:2b:66:64:f3:
                    39:06:36:6e:bf:34:f9:82:27:83:f1:e2:ae:20:93:
                    60:2c:e3:03:c2:ab:0c:57:bc:d8:38:1f:3c:42:e5:
                    55:c6:1a:8e:83:09:3d:da:45:e7:68:bc:61:a0:2b:
                    73:33:75:b7:f7:49:c9:d2:64:48:d5:a3:d4:aa:7b:
                    e1:e1:c0:ae:a2:c3:5e:10:d2:ca:e6:40:0b:ce:32:
                    4b:85:a0:8e:b1:94:69:68:3d:f3:fa:bf:dd:f0:15:
                    da:76:af:2a:f6:99:ca:ef:03:e3:fd:96:ea:5d:d0:
                    15:d8:fd:22:2f:3d:5b:b2:ad:62:77:23:2c:5a:9d:
                    9e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:96:A2:10:E8:1C:99:0C:EB:3F:55:DC:57:C7:E9:A5:1E:1B:64:B9
            X509v3 Authority Key Identifier:
                keyid:6F:E3:B1:09:F6:35:B0:EF:83:76:AE:76:B9:6A:D3:73:D0:D7:6C:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-OxCfY1sO-Ddq52uWrTc9DXbBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3454/4C653218AFC011F1A6D1265F4F11F970/b-OxCfY1sO-Ddq52uWrTc9DXbBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1b:bc:d9:b1:94:10:4e:90:6c:db:79:58:33:85:ed:e0:3f:
         e6:48:83:4c:d4:ea:20:a1:9e:40:d8:e7:e9:32:5e:a4:92:34:
         98:9c:19:5a:b7:00:e1:24:bb:9e:3d:3c:13:48:68:1b:2a:a3:
         82:e9:dc:65:c1:bb:28:4a:8c:34:63:c8:21:42:22:59:08:8d:
         d2:20:35:f4:ad:30:27:90:88:af:d9:39:fb:8e:83:ac:55:fd:
         1e:49:2a:99:9b:94:a3:9f:c0:14:c7:e4:88:20:63:0c:cf:90:
         5f:c9:3e:fc:06:3d:de:7c:b6:d5:45:a2:c8:e4:cc:5d:4e:17:
         02:05:8f:6c:85:f5:03:05:4b:01:c3:ad:50:a9:be:4f:cf:27:
         a6:ab:43:95:c2:1a:6d:12:f7:5c:4e:2a:0f:88:27:3c:e2:3e:
         e7:3b:f1:10:0e:d2:6e:e1:98:3f:92:d0:d3:5a:a0:89:59:b4:
         1b:cd:c4:72:7a:ba:64:1d:60:b2:c3:d7:54:0d:b0:e5:3d:8b:
         54:08:31:42:f8:4c:5c:d5:af:9b:ca:1e:86:84:06:45:5b:ee:
         0d:2b:f2:69:77:84:a3:49:3e:20:f0:7d:77:11:d8:0c:dc:31:
         bc:72:a6:75:26:db:49:0a:05:43:63:1b:52:3c:06:1c:47:71:
         29:57:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:52:44 2026 by rpki-client