Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
File:                     OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft (raw, json)
Hash identifier:          JsvzWQiqylR8iwRG7WV3FE+Zb8lgEw+TPeXXbyKIw14=
Subject key identifier:   87:F2:3A:01:31:FF:F2:17:CD:AB:70:16:E0:07:FA:6B:AE:EE:48:AE
Authority key identifier: 3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC
Certificate issuer:       /CN=A91CAB4E/serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
Certificate serial:       1490
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
Manifest number:          1483
Signing time:             Sun 04 Oct 2026 16:52:44 +0000
Manifest this update:     Sun 04 Oct 2026 16:52:44 +0000
Manifest next update:     Sun 11 Oct 2026 16:52:44 +0000
Files and hashes:         1: OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl (hash: 56VzC9rKjn4dfRL/OqYstyP2AOcvsvLJ5ARM+VhVOlE=)
                          2: 7F662C72997011E8B0FDEF57C4F9AE02.roa (hash: ejmgdYeuM6vja8yeymu+bvz8ubQIFSHH83aK9capx78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl
                          rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5264 (0x1490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAB4E, serialNumber=3A149425BE3285D6114B01F6C2FC88A17AFF4BEC
        Validity
            Not Before: Oct  4 16:52:44 2026 GMT
            Not After : Oct 11 16:52:44 2026 GMT
        Subject: CN=6ac2845c-7187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c1:f6:ee:67:69:e6:dd:2f:ca:2f:47:6a:fa:
                    c2:14:bf:e6:91:2e:70:f2:d7:e8:77:73:ca:46:86:
                    c7:cb:62:5d:26:ee:f8:14:89:e2:73:80:bd:99:0c:
                    93:01:8e:1d:46:3b:14:09:83:1a:9d:1e:4f:cb:17:
                    6d:80:f6:f2:0c:50:b2:76:97:37:47:92:75:1e:b2:
                    63:92:ec:e0:a7:f2:80:f2:ca:63:37:27:e8:b8:88:
                    60:3c:89:42:03:8c:57:24:0a:ea:36:16:ce:d0:14:
                    29:93:b1:6e:54:90:92:69:82:ec:ae:48:2e:ab:15:
                    15:c1:4a:ee:66:cf:15:9b:4e:d6:79:e3:a3:b5:4f:
                    50:11:2c:be:b1:97:33:14:a8:bc:83:33:8b:22:18:
                    26:58:4b:90:61:a6:98:c6:6b:bc:b8:88:3b:9c:22:
                    21:02:a8:d5:6c:1a:f5:bd:bb:49:1e:86:72:8f:cf:
                    9b:3c:3b:36:f7:92:1d:a0:3f:be:55:a4:71:3b:09:
                    55:ea:f6:d7:d7:ce:8f:30:91:09:d7:ba:8c:75:78:
                    d9:37:20:41:10:ef:2a:30:a2:4f:4c:54:bc:91:29:
                    ba:23:19:bd:cb:41:1d:77:ee:41:21:88:85:e5:d7:
                    eb:e3:05:82:c6:a4:ae:43:b2:79:1a:b3:a4:c5:1a:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F2:3A:01:31:FF:F2:17:CD:AB:70:16:E0:07:FA:6B:AE:EE:48:AE
            X509v3 Authority Key Identifier:
                keyid:3A:14:94:25:BE:32:85:D6:11:4B:01:F6:C2:FC:88:A1:7A:FF:4B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhSUJb4yhdYRSwH2wvyIoXr_S-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAB4E/2CA47066997011E8861DD057C4F9AE02/OhSUJb4yhdYRSwH2wvyIoXr_S-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:75:7a:31:08:ef:49:d2:7f:38:0b:77:08:b6:3d:6e:a8:89:
         fd:e9:83:da:8b:ca:1a:28:94:59:6b:0f:fb:37:b6:29:86:bf:
         96:b9:4a:29:db:97:bd:05:2f:47:81:42:2e:5f:2a:f2:01:92:
         03:98:c4:cb:a9:30:65:fa:a8:58:ce:8b:d8:36:42:db:43:39:
         0b:55:2a:13:01:de:69:77:67:ea:b4:4b:bb:9d:01:bb:a2:82:
         bb:ed:b4:ab:e6:5f:2f:75:b7:e9:c3:b9:99:fe:5a:93:82:fb:
         3f:35:1f:e5:6b:2d:38:d4:a1:09:31:94:9b:b7:78:bd:f3:8a:
         93:1b:ef:1b:75:f0:da:e9:4a:3b:ad:5a:2c:fa:29:2e:5e:e2:
         e0:c3:d1:ee:31:51:6d:8a:4b:7f:1b:1f:94:f3:03:92:57:8f:
         ef:ef:b1:90:9d:5b:79:32:5d:57:c4:7a:1a:5d:02:3f:34:a0:
         2f:3e:f8:c6:87:e8:6c:87:3f:b2:09:d7:13:52:70:3a:c1:4c:
         8e:bd:11:57:72:31:7c:0c:02:84:44:47:b3:6c:5f:a0:5a:9d:
         99:56:59:76:81:f3:a9:a5:a7:78:8f:b8:df:17:25:90:16:8a:
         70:a0:22:23:34:e0:97:c2:e1:c6:82:dc:77:ae:bd:14:8b:31:
         ac:ec:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:18:13 2026 by rpki-client