Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
File:                     O6JVjKXxoDfZaW9WeugTZ8buNeY.mft (raw, json)
Hash identifier:          3C2s7k38II4HJoZI/yCuyd+ECmt+GNX9yH/Vi2wiXNQ=
Subject key identifier:   66:F6:48:73:92:C2:38:83:DC:F6:C2:3A:66:6D:37:53:BF:63:68:E4
Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Certificate issuer:       /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
Manifest number:          0141
Signing time:             Sat 19 Sep 2026 05:36:05 +0000
Manifest this update:     Sat 19 Sep 2026 05:36:05 +0000
Manifest next update:     Sat 26 Sep 2026 05:36:05 +0000
Files and hashes:         1: O6JVjKXxoDfZaW9WeugTZ8buNeY.crl (hash: w7Tl4JKxGFnr5dsjDWUJUmLngdRbcoyVuwFJe+hI63o=)
                          2: A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa (hash: d0vm5wncisSlyFIQNK+dAA18qYesSQU/iTYEX3JnVQc=)
                          3: 7229FDDCDC3D11F08C062F6F696F56BC.roa (hash: mO+BWuAvLE1cVLG5z10U+LtaeF9p3hAXhHEP7QtGd8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
                          rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
        Validity
            Not Before: Sep 19 05:36:05 2026 GMT
            Not After : Sep 26 05:36:05 2026 GMT
        Subject: CN=6aae1f45-6e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:5b:11:ff:e8:53:7e:40:10:03:8f:77:67:
                    05:61:8f:e8:36:99:4a:97:0c:49:31:71:93:4a:cf:
                    42:2c:ad:67:3a:9a:55:b0:4c:44:3d:06:14:a6:41:
                    2b:06:c9:0b:2c:9a:2b:ba:3b:ed:67:cf:ec:32:df:
                    15:f5:de:41:2d:70:73:3f:f3:41:d9:80:87:7b:28:
                    cf:bd:2e:49:20:a5:65:59:d9:46:61:40:22:4b:05:
                    2d:c5:5e:d4:2a:ef:ce:bf:97:8e:10:a8:5a:28:1c:
                    43:ec:f7:08:8e:f1:bc:a9:0b:6e:5e:1b:50:5e:13:
                    61:dd:9f:7d:8a:6d:fc:bb:55:30:74:6c:a8:68:a1:
                    ec:4c:ca:97:6c:a6:f9:66:b6:f2:2c:ad:e8:8e:e0:
                    af:e8:6e:86:5e:24:aa:b9:53:f0:92:1b:61:01:2f:
                    6d:52:d9:80:16:c9:f4:7c:39:22:75:40:97:cf:85:
                    4c:7d:fb:25:57:6e:ef:34:60:86:40:3d:84:35:ed:
                    50:1c:70:d8:b6:a5:8c:3c:1e:f8:f0:d1:67:a0:84:
                    93:49:ee:df:d5:15:bc:cc:51:fd:7e:14:e2:b6:42:
                    03:c3:8a:fd:ce:12:1d:6d:f6:98:05:4b:e3:07:74:
                    ba:09:07:83:77:44:e7:b5:a1:45:09:b3:b1:86:4c:
                    91:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F6:48:73:92:C2:38:83:DC:F6:C2:3A:66:6D:37:53:BF:63:68:E4
            X509v3 Authority Key Identifier:
                keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:34:95:b0:e0:19:cd:2d:e7:ed:0b:d9:b4:83:a7:6b:ce:f0:
         cc:e8:a3:d9:6b:25:8e:2b:c8:96:69:2d:16:a8:18:20:1c:ac:
         8b:83:15:43:e6:c6:09:6b:87:4f:57:5a:28:5e:ff:b5:a4:be:
         5e:27:a0:b9:1c:2d:77:4a:6b:27:a8:97:65:4d:51:82:51:77:
         a9:e3:6b:39:01:35:e8:23:a3:ad:b5:bb:37:1b:e0:89:8c:d2:
         d0:78:88:30:b5:63:2c:e3:2e:85:33:4e:e7:aa:8a:ab:48:09:
         41:95:b9:1a:9e:ca:5e:0e:54:92:b2:f7:95:cd:04:19:95:38:
         da:eb:c4:83:91:2b:8f:1c:85:a1:03:a4:49:24:23:3f:2e:ef:
         e5:7f:eb:c4:76:fc:8b:c8:e1:f5:2b:66:ea:6e:dc:b9:b0:03:
         a8:af:38:1d:99:74:5a:cf:60:62:96:59:fe:7d:8d:08:04:82:
         37:06:42:84:d3:5e:33:d3:93:a9:4d:5c:eb:1e:de:4b:0a:63:
         4c:66:a3:c4:d5:85:f9:89:62:c9:3e:4f:13:ca:e5:41:74:97:
         ce:80:4a:3f:d3:5a:cc:92:53:53:53:f3:69:63:78:58:f6:26:
         06:64:6b:c4:ad:bf:be:bd:b0:6e:24:ef:dd:9b:3a:8c:3a:d6:
         3a:27:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:06:28 2026 by rpki-client