Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft
File:                     OhpAdHHRvxyhUl8h997PWmoqZNg.mft (raw, json)
Hash identifier:          X2GIHZqKCi7zYDfeunNLL34oICKt4PYbarJ1YKXhQho=
Subject key identifier:   B9:CD:55:D8:A1:68:57:B8:C4:69:E6:00:59:9F:5C:A9:36:98:67:40
Authority key identifier: 3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8
Certificate issuer:       /CN=A91B7B23/serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8
Certificate serial:       0224
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft
Manifest number:          0219
Signing time:             Mon 05 Oct 2026 03:20:33 +0000
Manifest this update:     Mon 05 Oct 2026 03:20:33 +0000
Manifest next update:     Mon 12 Oct 2026 03:20:33 +0000
Files and hashes:         1: OhpAdHHRvxyhUl8h997PWmoqZNg.crl (hash: 0gfwyswpdmYLgyI42EOB411A5O/4YAJbmTmFfgYxfGU=)
                          2: 7F6FE074B84811F091A01766C4F9AE02.roa (hash: uZ3REObOODN0mr8v9oxhquTJhyemMTdJfu8CSITYUF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl
                          rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7B23, serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8
        Validity
            Not Before: Oct  5 03:20:33 2026 GMT
            Not After : Oct 12 03:20:33 2026 GMT
        Subject: CN=6ac31781-0be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:ac:c0:89:9d:8b:7d:de:1d:b8:f2:d6:2a:
                    06:3a:50:45:a0:1d:41:2b:af:07:1d:7f:2a:0d:4d:
                    e4:ed:1c:19:26:38:c7:3b:9b:8b:74:48:2c:8b:d9:
                    72:e5:e3:93:b0:c1:e2:d1:06:eb:cc:82:cb:1f:38:
                    40:b8:a4:81:4f:49:7c:83:42:8e:85:2c:ca:8f:61:
                    10:04:2b:86:c7:d2:48:42:d2:ac:b1:f6:2f:01:5d:
                    c3:90:3b:01:65:6a:e6:e9:90:10:5f:d0:78:22:84:
                    90:63:1e:8a:b1:c5:9e:ae:d3:1c:8a:a1:25:25:8d:
                    ee:f8:3e:ec:63:fc:11:de:f7:70:1a:69:01:b4:6b:
                    88:04:22:de:20:6c:97:cf:4c:1a:73:a7:53:52:a3:
                    b2:91:fe:b2:a5:5d:7c:1b:4e:83:ce:42:31:42:70:
                    35:8b:df:03:6f:3d:1b:ff:1d:8a:e3:a5:bf:b1:5d:
                    24:f4:03:60:cf:f8:cd:43:f7:a7:30:91:41:32:8a:
                    93:8c:57:20:a5:86:92:a1:3b:73:2a:a8:fb:e6:e4:
                    80:da:ca:8e:ce:2b:fa:50:6c:83:15:9a:ac:3f:6a:
                    55:25:c7:bb:50:44:dc:ee:0a:39:79:3d:95:49:2d:
                    2b:65:fc:70:d9:c2:d2:6b:af:85:82:78:29:24:37:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CD:55:D8:A1:68:57:B8:C4:69:E6:00:59:9F:5C:A9:36:98:67:40
            X509v3 Authority Key Identifier:
                keyid:3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:22:ca:8e:b2:6e:81:9d:7d:2b:e7:80:12:67:18:35:e1:9e:
         d3:0a:f1:7a:7b:a2:2c:01:9a:98:5d:33:5b:f5:fa:ad:a5:82:
         72:78:bb:a2:e9:62:1a:4c:35:68:82:aa:b1:e7:bb:b2:8b:17:
         41:1c:db:6f:34:32:67:47:6c:d3:8a:5d:a1:5a:8d:00:7d:ab:
         7b:61:38:50:54:b8:43:59:84:cb:90:1a:51:4a:55:4d:81:45:
         e5:38:fb:b5:9f:9d:63:4e:3f:dc:eb:78:a1:15:ae:c6:b0:31:
         b2:ba:a9:f0:61:19:22:3d:1d:da:e3:5e:e9:16:91:c9:d6:f1:
         ac:17:68:56:21:5c:11:2b:15:32:06:13:93:58:17:0c:f7:cd:
         70:b2:b7:1a:57:0c:ae:25:62:ce:83:70:25:3f:b0:eb:91:58:
         53:44:45:d6:00:5f:ad:53:38:77:67:79:47:8b:3d:df:e7:6d:
         42:d0:4f:25:02:c8:d3:c2:fb:97:af:28:ac:f2:bf:3a:dd:42:
         f3:95:a4:56:ad:9f:98:ec:73:82:2a:bb:e5:1d:32:26:a3:c2:
         12:ff:f4:e3:32:99:40:a6:63:ef:a7:bd:85:82:be:d6:dd:3d:
         d6:13:e4:ff:29:80:12:31:1b:96:38:90:d9:ed:43:fd:d6:58:
         27:a5:be:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:26:20 2026 by rpki-client