Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
File:                     0VLfcuXWwcb-QrZCN3w7CIEobec.mft (raw, json)
Hash identifier:          7jnh8or9+L1yZfd5jdWECVzEOTFcxGZ965l0RTGV+fU=
Subject key identifier:   24:C4:12:0C:E5:9F:5F:6E:EC:8A:0F:05:E2:FA:A6:83:6E:DF:74:7B
Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7
Certificate issuer:       /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7
Certificate serial:       0620
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
Manifest number:          0617
Signing time:             Fri 02 Oct 2026 23:08:46 +0000
Manifest this update:     Fri 02 Oct 2026 23:08:45 +0000
Manifest next update:     Fri 09 Oct 2026 23:08:45 +0000
Files and hashes:         1: 0VLfcuXWwcb-QrZCN3w7CIEobec.crl (hash: kVWZcnyjinaYoCIhnWDOWctodnUWkl6EeBWy6SD8IR4=)
                          2: 8nJaKxb5MY7_LKqJ9yxP3wJZ9XY.asa (hash: AVAp0KitDrniYVHqOuHrGOVC8mgzj92DP2vaa/6QFgo=)
                          3: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (hash: xInk+uPvf4aq3ONL1LwMHsDb2vf3A3vC4hgRAklJPAc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl
                          rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1568 (0x620)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0FAC, serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7
        Validity
            Not Before: Oct  2 23:08:45 2026 GMT
            Not After : Oct  9 23:08:45 2026 GMT
        Subject: CN=6ac0397d-fdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:ec:75:b2:2c:b2:f8:ec:f5:bb:d1:8c:4e:
                    c9:77:a1:0e:6f:6f:d1:10:3c:05:58:0a:e7:96:f9:
                    b4:0b:c1:71:b5:07:ed:20:f3:e4:17:c0:ca:64:51:
                    11:14:a6:da:6b:cc:ff:4e:cf:fc:2b:3c:3b:a0:66:
                    18:73:18:7d:04:77:37:6f:b0:90:7e:ed:77:bb:80:
                    c6:66:ae:d6:c3:e5:84:f8:7a:f7:74:43:1b:6b:26:
                    01:e1:da:96:1e:1c:b6:95:81:d3:d7:c0:4c:30:40:
                    a5:c3:cb:77:10:a8:50:88:7b:59:96:41:56:98:07:
                    f3:7c:2e:bd:5b:e1:45:9d:a3:53:22:cb:48:02:af:
                    d6:bb:3f:01:35:01:1f:f6:ad:b5:6e:de:92:0d:d9:
                    a5:62:e4:4b:0c:94:70:45:72:a6:a0:dc:62:ca:63:
                    9c:79:4b:4b:a8:40:e5:49:0f:e3:76:8b:c0:54:cf:
                    9b:4c:19:32:0f:d4:b5:33:f4:5c:c0:a7:d2:08:b1:
                    30:af:97:f6:17:a8:f8:87:b6:dc:db:cc:26:b0:15:
                    b9:6f:4e:1e:2a:9d:27:7f:dc:a6:0c:44:8d:d7:23:
                    c9:d6:61:c0:6e:b1:c6:dc:3f:4c:58:8a:64:97:49:
                    1f:cb:19:a3:ab:c9:03:9d:3a:9e:9a:4f:35:30:5e:
                    5e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C4:12:0C:E5:9F:5F:6E:EC:8A:0F:05:E2:FA:A6:83:6E:DF:74:7B
            X509v3 Authority Key Identifier:
                keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3f:a5:5b:27:ab:55:8f:fa:f5:57:ab:3b:bf:0c:6c:8e:7f:
         07:c3:8e:4d:5c:7a:f7:80:d0:68:78:71:b3:51:28:d2:23:5b:
         73:ae:24:a9:9b:36:2e:03:42:2e:37:53:df:73:75:8d:66:d1:
         d3:53:e0:f0:6b:c0:c7:af:38:09:18:14:45:7f:1e:1d:87:17:
         f8:13:0f:a9:6f:de:2c:e1:56:a7:90:62:88:de:ec:27:3f:07:
         71:0d:50:e7:d9:9b:fd:69:33:49:fe:9a:25:ad:d3:05:4d:c0:
         f6:27:4d:fa:70:e7:db:af:69:65:a9:47:3c:df:66:7c:ba:52:
         08:3b:d4:52:5e:33:30:3b:56:98:57:62:60:61:3d:91:8f:17:
         21:17:48:8a:64:d6:b8:72:bb:be:8d:6b:87:8d:29:4d:8b:e9:
         ff:de:bf:91:28:b9:8d:3f:2e:ea:e6:a1:9a:b2:d9:5e:28:42:
         7a:a9:3b:d7:8c:aa:5f:7c:47:13:44:ec:cd:d2:1b:8b:5a:80:
         51:c1:bf:97:70:fb:ee:0b:4f:d9:96:81:97:b2:ae:93:11:c1:
         a2:97:11:19:80:af:74:ad:ca:02:c0:57:fb:da:f6:61:ba:50:
         98:ca:7d:f2:e7:13:97:8e:8e:fd:de:dd:3e:3d:5e:ac:18:91:
         aa:0a:bd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:52:47 2026 by rpki-client