Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft
File:                     oCcZWkgg89cmSk1X7pqdTCoQySM.mft (raw, json)
Hash identifier:          yrX+9Ia5F7v/CUPkoPzteYQppHRr2eUqJumXlH2TaSk=
Subject key identifier:   F7:1F:1F:91:F7:98:01:AE:EA:5E:42:4A:15:5B:9F:C9:F3:55:A8:38
Authority key identifier: A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23
Certificate issuer:       /CN=A91C1621/serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft
Manifest number:          013F
Signing time:             Fri 04 Sep 2026 14:16:18 +0000
Manifest this update:     Fri 04 Sep 2026 14:16:18 +0000
Manifest next update:     Fri 11 Sep 2026 14:16:18 +0000
Files and hashes:         1: oCcZWkgg89cmSk1X7pqdTCoQySM.crl (hash: SUNQEEr9C+MTrsDcfo2BwgtdJImR9C1hV6F1qaDR7mw=)
                          2: 8AE793B2E9E311F0A43C19FF656F56BC.roa (hash: iLjsYldebmEc4jQ39cKvj356cAs2Ip03tkyos/Cg+/w=)
                          3: 81E4D4A2053011F09C73001FC4F9AE02.roa (hash: DA85ff4aMzWQg5AImUfIHcT74CRXr+XSDwxZJMl53Eg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl
                          rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1621, serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923
        Validity
            Not Before: Sep  4 14:16:18 2026 GMT
            Not After : Sep 11 14:16:18 2026 GMT
        Subject: CN=6a9ad2b2-733b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:27:89:89:1e:17:4b:6c:3f:32:28:8b:78:12:
                    f6:87:f3:94:cb:3e:d5:a9:fa:46:31:f8:6b:d3:97:
                    c8:79:b9:05:fc:26:a4:a0:ea:c2:be:c4:6f:63:2f:
                    cb:e7:1c:15:25:1b:18:69:b1:8b:13:f0:24:84:52:
                    73:1f:08:97:55:5a:8b:77:e0:5f:22:15:34:37:d8:
                    73:aa:41:da:0d:71:d3:10:36:15:93:05:57:ae:12:
                    de:84:c5:6a:4e:76:9c:4a:52:74:a3:33:aa:32:45:
                    83:97:a5:29:44:b3:00:79:7e:3c:c6:c5:30:38:41:
                    c5:d1:ca:3a:5e:3e:ca:e0:b1:d6:1a:99:a8:18:10:
                    0b:d9:f9:21:12:f6:e1:12:f7:1e:8a:b5:1c:75:e9:
                    39:73:e7:69:05:24:65:cd:2a:29:1b:fc:cd:7e:a9:
                    e8:bf:06:a4:c7:1c:28:c4:01:1c:69:db:94:56:4d:
                    4d:24:a6:78:7a:31:13:38:c3:c1:ff:51:cc:ed:78:
                    47:0b:56:a8:7a:6a:a0:eb:3d:14:91:49:12:a7:65:
                    8e:83:fe:04:dc:07:cf:16:80:4c:de:3d:cb:ad:ee:
                    56:7d:04:f0:03:bf:f9:c7:b5:87:c0:f6:89:23:0a:
                    74:4f:ad:76:2c:88:2a:9c:0e:fa:52:c0:58:f8:0b:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1F:1F:91:F7:98:01:AE:EA:5E:42:4A:15:5B:9F:C9:F3:55:A8:38
            X509v3 Authority Key Identifier:
                keyid:A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7f:d5:a1:60:fb:58:6e:f2:0c:bc:b0:bc:e6:b3:7d:c6:15:
         b1:ea:66:58:cc:83:57:5f:16:e9:d6:48:8e:0e:f9:03:df:8a:
         15:5b:ef:b1:e7:ce:93:12:5d:a9:16:16:0d:2d:57:d2:75:41:
         37:a2:79:32:0b:a7:43:83:41:93:0a:57:a4:1b:4f:7a:bc:53:
         45:c6:20:c2:9a:3a:61:95:ec:cb:a7:3a:ff:c7:1f:cd:ff:b9:
         97:23:ad:0c:64:a1:9c:4f:88:03:d1:c1:05:d2:62:5d:23:88:
         43:67:3b:bb:5a:61:e2:62:87:76:ca:f8:76:2b:a6:9e:d1:ec:
         7b:7a:41:70:23:af:7f:5c:0b:b4:e8:8b:3b:e9:04:98:43:ea:
         07:90:d1:98:5b:a0:aa:d1:21:5a:9a:ee:9b:8f:25:33:7f:67:
         6b:f9:b6:ae:2e:08:c0:ed:a0:f8:a4:98:ff:a2:5b:f5:ff:49:
         99:d5:fe:00:f0:90:fe:d5:49:e6:e1:c7:e0:77:6f:a4:14:a0:
         81:e0:01:7f:16:d9:e1:79:f6:84:22:e3:60:89:8b:7a:d4:0d:
         be:f3:da:88:5c:50:79:77:45:1b:ae:12:7c:25:80:14:2d:a9:
         99:89:76:d8:79:7f:41:24:82:1c:49:70:2a:bf:00:43:cf:38:
         0b:12:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:25:12 2026 by rpki-client