Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
File:                     oRHoHEs-J72m4nEkl_bbugz7CCY.mft (raw, json)
Hash identifier:          +NEYPN3PXX0Fez53RPGxTBElc93/RSHSl5N6xAvl+PQ=
Subject key identifier:   87:83:F1:91:3C:2A:D9:B1:04:BC:E8:D3:95:AB:37:78:A4:88:16:E2
Authority key identifier: A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26
Certificate issuer:       /CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
Certificate serial:       1452
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
Manifest number:          1443
Signing time:             Tue 18 Aug 2026 17:03:48 +0000
Manifest this update:     Tue 18 Aug 2026 17:03:47 +0000
Manifest next update:     Tue 25 Aug 2026 17:03:47 +0000
Files and hashes:         1: oRHoHEs-J72m4nEkl_bbugz7CCY.crl (hash: 0X84MPHwdIPSkAwQufLELO7TJ7AiMUZn/5Dn0F9YcfE=)
                          2: 6D6692CAAA0211EEAADA3D32C4F9AE02.roa (hash: 2PmqHELB1hwleGl17N3DUTadd9q9hQXwA/8mpl3xfuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5202 (0x1452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1DB8, serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826
        Validity
            Not Before: Aug 18 17:03:47 2026 GMT
            Not After : Aug 25 17:03:47 2026 GMT
        Subject: CN=6a849074-7660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:91:08:d7:08:f3:f5:1c:f8:c6:f8:f9:2f:57:
                    75:fa:6b:40:23:a2:b6:0f:2a:ea:d3:56:fc:94:17:
                    f6:a0:fb:4b:c7:9b:a9:24:06:dd:19:1b:7a:76:07:
                    13:5d:84:72:87:71:29:ba:6b:4e:c5:75:a3:b0:e2:
                    f0:34:00:4f:75:40:d2:a4:17:4f:6e:cd:6b:64:15:
                    f1:54:f9:30:61:9d:8d:e7:c7:e4:8d:af:c7:88:3d:
                    39:73:16:12:72:c8:c5:b9:3e:1b:20:c0:c4:10:00:
                    76:7b:6e:d7:c2:26:4d:93:65:21:3c:28:d5:fb:5b:
                    28:73:d9:db:d4:13:66:21:9f:36:62:48:bb:30:09:
                    42:4f:dc:5f:d8:e8:33:bd:57:e8:a4:c0:36:04:d6:
                    cd:58:4a:7d:92:29:19:32:22:c8:23:24:6f:92:36:
                    a3:29:dc:79:76:8f:79:70:c4:f6:a5:f5:9d:b9:ce:
                    4e:74:fd:4c:f7:b4:0d:f9:e2:db:52:29:22:2d:1e:
                    9a:3b:56:25:d5:54:0a:4e:85:c3:ce:1c:f6:6b:21:
                    e0:68:9f:55:0d:19:98:95:b6:ef:4b:eb:31:fd:69:
                    2e:76:e7:9e:0e:cc:d0:d1:7f:ef:85:ec:e7:e6:d8:
                    a3:46:98:0f:2c:72:b6:ca:8a:93:fd:02:19:39:ce:
                    1e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:83:F1:91:3C:2A:D9:B1:04:BC:E8:D3:95:AB:37:78:A4:88:16:E2
            X509v3 Authority Key Identifier:
                keyid:A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:35:f4:25:23:89:3d:7b:1f:78:fd:dd:8e:32:51:ec:05:9d:
         38:93:3e:cb:5e:76:57:2d:eb:e0:6f:b5:ed:6a:2a:51:72:75:
         bd:5c:b7:05:0a:48:c0:27:fb:81:a7:e4:20:3c:7d:9a:8a:99:
         15:40:42:32:68:96:b5:4b:63:8a:3d:80:f9:80:31:d4:d4:a4:
         9e:1a:37:36:ac:91:63:91:a7:fa:c9:28:f8:f5:ea:8b:f0:24:
         35:cf:98:0b:06:8e:1e:48:35:a7:05:16:5a:8b:d3:cf:e8:45:
         b7:cd:70:b6:75:fd:57:c1:60:8a:86:c4:91:c9:6a:6c:10:be:
         f0:d6:79:b0:d5:03:f0:48:9c:61:9c:ba:4d:5e:7a:bf:b9:51:
         40:72:22:29:f6:2f:31:1e:5f:09:bc:2c:ce:b3:bb:88:c8:27:
         7d:c8:12:1d:6a:fd:0b:bb:ef:00:79:05:f9:6b:89:00:d1:86:
         2d:b8:a3:92:fa:93:0c:28:82:7f:ec:e9:74:62:89:39:1a:e2:
         33:df:e7:10:08:87:6e:25:30:80:91:1e:40:4e:d4:04:e7:04:
         cf:cf:6c:ed:eb:d6:b7:d2:4d:af:2f:47:b2:1e:f1:c1:f6:5e:
         25:57:fd:2e:c1:15:2f:0d:22:1c:39:4b:97:4c:75:1c:ba:6d:
         44:6f:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:47 2026 by rpki-client