Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
File:                     oSTS0QT3ck-7jw8maUnikFSMAbE.mft (raw, json)
Hash identifier:          OZrjMUVAUpzGt1Hgg/S144FXx3CHSdip1jpkPKHeUIY=
Subject key identifier:   61:5A:21:7B:48:E9:93:D8:74:81:5B:75:4F:86:D2:61:8F:4A:78:EC
Authority key identifier: A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1
Certificate issuer:       /CN=A91CD0DE/serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
Manifest number:          C3
Signing time:             Tue 27 Oct 2026 07:06:13 +0000
Manifest this update:     Tue 27 Oct 2026 07:06:12 +0000
Manifest next update:     Tue 03 Nov 2026 07:06:12 +0000
Files and hashes:         1: oSTS0QT3ck-7jw8maUnikFSMAbE.crl (hash: Bivu9LPWXiFBRxMv3V6luBMtvX5PcnqQiPFNmuPvzPs=)
                          2: 60F50042A99411F0A4CF2116C4F9AE02.roa (hash: wg4WDf8sbivCuwbmBy1I5oZUwGy7RezhuhBYVLggq7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl
                          rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 07:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD0DE, serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1
        Validity
            Not Before: Oct 27 07:06:12 2026 GMT
            Not After : Nov  3 07:06:12 2026 GMT
        Subject: CN=6ae04d65-46a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8b:20:9f:d6:a8:fe:f1:90:f0:20:b1:fc:c3:
                    17:27:14:cf:81:f8:60:fc:35:4e:e7:d4:f3:ba:1b:
                    cd:d4:17:c0:69:96:e6:db:cd:2d:0b:fa:e3:25:f5:
                    20:1d:2c:5d:da:6b:40:e6:d1:ad:78:3f:28:49:7c:
                    54:de:80:87:e3:b9:1e:de:9d:e8:8d:89:b8:39:6d:
                    20:05:c4:da:e2:28:61:2f:6e:a5:e8:a4:ff:be:68:
                    40:66:79:33:26:c2:b5:cd:32:bb:5d:b3:a0:ad:d6:
                    46:ec:86:7d:52:56:6a:fe:c1:f7:f4:5d:0d:7e:83:
                    04:ff:e0:04:09:75:aa:f6:d0:d9:d1:69:be:cb:eb:
                    35:f3:20:17:2d:6f:bf:72:38:53:b2:25:ac:90:9f:
                    eb:a0:59:f8:98:ff:3c:7c:0c:e5:91:8f:05:36:05:
                    c0:5a:27:fa:d5:78:19:79:49:42:b6:01:d7:11:1e:
                    ff:41:52:14:bc:29:d0:d7:43:0f:73:d8:2b:e4:8e:
                    24:54:a6:8c:a3:e0:80:28:72:50:58:10:e4:a0:96:
                    c4:54:27:0e:62:64:41:a4:8f:02:a9:9a:6b:6f:3c:
                    47:59:ed:c7:b7:de:3a:58:ec:7c:c8:cc:fa:ce:83:
                    81:e3:93:50:f0:c2:23:ee:65:7a:21:76:02:82:58:
                    1e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5A:21:7B:48:E9:93:D8:74:81:5B:75:4F:86:D2:61:8F:4A:78:EC
            X509v3 Authority Key Identifier:
                keyid:A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:40:0b:55:84:c9:ec:6f:d1:b9:c7:4e:79:57:65:18:f7:56:
         57:84:e1:2d:c3:dd:06:ed:19:df:b5:42:63:55:4c:52:df:7b:
         0e:8d:67:98:dd:e0:e0:9c:1e:e4:c3:4b:ef:d8:a8:be:79:98:
         69:98:e4:c1:9d:5b:c8:49:d9:9f:d1:51:06:cd:df:3c:01:40:
         5b:b1:4f:3f:32:47:01:ec:88:ac:fd:1b:a5:d0:1d:19:5b:4e:
         0c:3b:7b:65:c4:97:94:58:f6:83:de:ff:33:30:25:f1:20:ff:
         62:1a:c3:93:50:86:49:d1:8d:3d:40:45:98:e2:a3:ab:2d:42:
         d5:88:9e:07:fe:c6:43:0e:bb:e1:a7:a6:ea:f9:3d:b2:92:fe:
         be:8f:82:1c:2a:cd:80:69:a3:4e:f2:ee:74:2f:51:71:4c:1b:
         7e:f4:56:cb:01:63:6c:2f:dd:de:a3:5a:d4:82:42:aa:37:f6:
         c1:d4:64:e8:1f:07:27:5e:92:43:1c:39:b5:73:9c:be:9c:2a:
         d8:ad:c5:71:35:21:0b:9f:19:1b:d6:20:d6:85:47:56:c0:9a:
         64:16:96:a0:c3:bf:51:b6:58:3d:40:ce:a3:18:35:0e:a2:3f:
         ef:ee:5a:16:4b:5e:4e:ca:4b:8f:1f:cc:17:a8:0a:ea:97:af:
         6c:88:e5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:33:45 2026 by rpki-client