Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
File:                     oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft (raw, json)
Hash identifier:          TPBR9MF9Q3M7Qg6zk9HJ1V618bw4rYIx98vEBA9uy6o=
Subject key identifier:   BB:CB:7F:98:2F:23:7E:F3:44:EA:62:EA:6D:33:5C:35:0B:33:6A:60
Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
Certificate issuer:       /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Certificate serial:       04D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
Manifest number:          04B8
Signing time:             Wed 21 Oct 2026 00:01:43 +0000
Manifest this update:     Wed 21 Oct 2026 00:01:42 +0000
Manifest next update:     Wed 28 Oct 2026 00:01:42 +0000
Files and hashes:         1: oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl (hash: N8xCyrQyp5faoMDRot7NMYb7Q25d5FkEkMPCC/zy304=)
                          2: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (hash: mD2HqpNx7VAE/fzRvuWKCUkO1WROa4R3hNCfEouu84g=)
                          3: 5A76CDC2989511EC821F343DC4F9AE02.roa (hash: /ti17IFC7q1Ah/qPnVmsDmKH5schjMG9yp+KWaohlII=)
                          4: 17D3C6A89B2611EC8880303EC4F9AE02.roa (hash: FT+yGA0UMj3t+pSIyryVQQ/sEofGBhdL514V1fKn2KU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl
                          rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
        Validity
            Not Before: Oct 21 00:01:42 2026 GMT
            Not After : Oct 28 00:01:42 2026 GMT
        Subject: CN=6ad800e6-04ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:d6:61:c7:16:d6:06:18:27:c2:8f:8d:99:
                    de:1c:61:f5:84:be:8e:86:29:79:62:fc:ec:73:bb:
                    b2:9d:d5:b0:5e:03:e4:55:34:7c:60:94:b3:13:99:
                    1f:fe:6b:8e:74:fa:3b:2c:c6:c1:1f:5f:5a:2b:dc:
                    64:8c:e4:b5:67:ea:9e:f9:5a:3f:da:58:97:61:5f:
                    f0:f1:3f:c7:43:91:33:54:3e:58:00:08:db:3e:15:
                    57:af:55:dc:55:1a:8a:67:9d:8c:8c:aa:1d:0c:57:
                    b3:cb:4c:77:ab:7a:02:a0:b3:9c:2e:a9:d8:ac:10:
                    d2:15:ec:ba:fa:78:a0:fd:dd:d2:f8:f1:42:ed:0b:
                    d7:f5:ab:1d:7a:58:cf:4f:2a:56:6a:f1:14:d4:34:
                    72:0f:e6:66:cf:87:fc:ee:9a:5d:17:6f:ef:68:cc:
                    17:43:8a:6e:0b:6f:00:45:88:98:2e:12:9b:5b:b0:
                    e9:0c:f5:df:ce:36:e9:b0:95:c3:9e:95:27:e2:c1:
                    96:d8:b3:14:bd:18:e5:ec:ed:5c:88:ae:4d:da:5d:
                    59:e3:4b:61:a7:ef:48:c8:0a:af:13:71:b3:55:41:
                    7f:28:1a:24:c3:40:d1:e3:d3:6d:9e:b8:72:ad:29:
                    af:0d:90:4d:a9:0c:b6:dc:45:be:78:dc:74:e6:ed:
                    02:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CB:7F:98:2F:23:7E:F3:44:EA:62:EA:6D:33:5C:35:0B:33:6A:60
            X509v3 Authority Key Identifier:
                keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:d3:6b:34:e7:b8:f0:e3:da:27:7b:37:3d:9d:5c:20:16:
         24:6c:f3:c2:ac:ea:a8:07:da:8a:2b:85:58:0d:bd:60:ae:13:
         f0:6a:26:f4:7b:0c:84:97:df:f7:ba:b6:93:4f:9b:c5:ba:ad:
         98:e3:ac:79:90:e0:5d:83:66:22:3a:b3:cd:88:b5:d3:1a:a4:
         ae:dc:81:1f:f0:fe:82:69:39:4d:98:62:54:e7:7b:13:21:da:
         6f:e1:48:92:4a:f7:79:86:d7:56:1c:7e:11:81:f4:e2:f7:b8:
         eb:bd:9b:92:c0:04:16:d9:66:13:28:5a:e5:a3:92:3f:19:90:
         74:a9:d6:20:06:15:69:e2:dd:d4:d5:da:5e:b4:a0:8a:aa:39:
         46:45:bc:1c:c0:0f:6d:e1:5a:77:9c:2e:44:c3:9b:a6:99:10:
         2c:53:5c:e7:b4:f6:61:e2:fc:b2:9d:e8:6c:63:54:10:30:25:
         f2:5f:89:cd:6d:70:52:b2:36:4f:e5:28:62:f2:34:71:97:0a:
         1c:90:f4:89:41:40:34:bb:d8:ac:31:f2:2a:19:c2:9b:34:b9:
         cb:ca:5b:e4:f4:99:1d:c3:ba:07:e6:75:ed:ee:45:a0:94:be:
         74:8f:cd:aa:a0:d0:e6:5c:6a:bd:16:fe:6d:20:0e:6b:48:93:
         2b:55:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:55:05 2026 by rpki-client