Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
File:                     O6JVjKXxoDfZaW9WeugTZ8buNeY.mft (raw, json)
Hash identifier:          5oWS9rVq9lkpQzMlguq94inoKAqBGOI6WiHJV6kQpD8=
Subject key identifier:   22:C8:72:73:BB:E9:78:D0:CF:B6:1D:7C:3F:E5:05:46:07:8A:D0:FC
Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Certificate issuer:       /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Certificate serial:       0148
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
Manifest number:          013E
Signing time:             Sun 13 Sep 2026 05:27:40 +0000
Manifest this update:     Sun 13 Sep 2026 05:27:40 +0000
Manifest next update:     Sun 20 Sep 2026 05:27:40 +0000
Files and hashes:         1: O6JVjKXxoDfZaW9WeugTZ8buNeY.crl (hash: 1rzNIaoSL17lmk6p5m6xkSkKD2h8B2OYsJtChmwfJjE=)
                          2: A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa (hash: d0vm5wncisSlyFIQNK+dAA18qYesSQU/iTYEX3JnVQc=)
                          3: 7229FDDCDC3D11F08C062F6F696F56BC.roa (hash: mO+BWuAvLE1cVLG5z10U+LtaeF9p3hAXhHEP7QtGd8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
                          rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Sep 2026 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
        Validity
            Not Before: Sep 13 05:27:40 2026 GMT
            Not After : Sep 20 05:27:40 2026 GMT
        Subject: CN=6aa6344c-66f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:41:03:f0:8a:87:bb:ca:6c:d9:87:90:37:be:
                    91:ec:05:32:3c:cf:76:1f:77:30:51:1a:3e:6e:d3:
                    25:01:ce:6f:44:be:5b:75:9d:45:e0:9e:7d:2d:0e:
                    ac:cc:c8:ba:29:81:e2:2c:73:c2:61:61:ab:e9:78:
                    14:07:34:05:eb:8e:b3:ff:36:07:4d:bd:61:4d:5a:
                    94:b2:3c:44:9f:3c:6a:ff:c2:5e:fa:0a:0b:66:ac:
                    4e:21:b0:e4:25:7f:16:3d:e4:00:3a:60:bb:da:e7:
                    fe:b2:ae:3a:b7:fb:c9:4c:41:b2:b1:85:89:e2:ab:
                    49:e0:d0:50:40:e9:9a:ae:a8:bb:77:98:e7:55:46:
                    f1:5b:7c:30:1f:10:4e:49:31:c2:1e:46:06:9f:3e:
                    0d:32:bb:78:dc:d6:f9:c3:1f:ab:53:de:ff:03:65:
                    c0:6a:e3:5c:a6:5c:27:7f:31:1c:8b:46:7c:f8:93:
                    84:30:7d:c6:b0:f4:e9:41:5c:34:cf:c4:57:57:de:
                    59:7a:83:19:a1:9d:6b:f6:b7:3d:b3:25:69:ed:dd:
                    a2:9d:1d:99:24:10:35:fb:74:f0:92:7b:8c:cb:78:
                    23:50:c4:19:05:1b:07:b5:b3:6a:f6:21:32:8a:07:
                    8e:d8:92:6f:d7:8d:4e:39:f5:2a:71:cf:f9:02:0a:
                    69:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C8:72:73:BB:E9:78:D0:CF:B6:1D:7C:3F:E5:05:46:07:8A:D0:FC
            X509v3 Authority Key Identifier:
                keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b9:63:f6:a7:0a:db:8c:3f:b5:5a:0f:a7:4a:91:b0:f2:92:
         3f:9f:59:7c:27:d1:e1:7b:02:5d:e2:55:86:fc:cb:0d:7d:0a:
         3b:68:62:b9:bb:93:05:59:5a:1c:ad:9a:7d:3e:d3:a7:b9:9b:
         df:30:e2:c9:b8:b3:37:b2:f6:14:25:5f:90:86:b6:c5:65:ad:
         07:32:a3:47:e0:4e:f1:6d:8b:82:ba:50:fb:40:34:b0:2f:96:
         75:52:e0:18:fc:9c:34:7b:78:37:b9:5a:ee:8e:da:1b:90:d3:
         8d:12:33:f8:5d:90:27:7c:c2:22:2c:79:04:f5:d7:bd:69:8b:
         c7:30:57:87:dc:87:f6:19:09:3e:17:33:fa:b0:7e:6f:4d:c9:
         d5:16:ac:ee:56:15:12:b0:5d:63:c8:f0:ae:b7:cb:da:96:92:
         15:b3:41:16:9c:b8:e7:28:78:be:a2:c1:33:14:cb:8d:6c:41:
         7b:66:64:ab:2b:1a:8c:0e:d9:9e:5b:e6:65:f0:81:e9:47:67:
         89:f1:b7:a8:7d:eb:67:b3:7b:19:19:06:cd:2d:90:dd:5a:ad:
         79:8b:2b:e8:b5:6c:6d:30:69:0d:e2:84:e4:8f:df:f9:4d:25:
         e5:92:ce:60:d4:17:23:aa:6f:ce:01:67:b3:b6:69:5f:d3:f9:
         9f:a6:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 07:56:08 2026 by rpki-client