Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
File:                     Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft (raw, json)
Hash identifier:          n1hqL4ywF31xgZGUpMG75QKEhS72VuOkBuCKcuqAvzM=
Subject key identifier:   EA:85:53:C8:A7:C5:E2:52:0B:71:4B:4E:9A:C1:83:F4:4A:70:47:23
Authority key identifier: 39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48
Certificate issuer:       /CN=A91DF863/serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
Certificate serial:       3435
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
Manifest number:          33C0
Signing time:             Thu 10 Sep 2026 15:22:39 +0000
Manifest this update:     Thu 10 Sep 2026 15:22:38 +0000
Manifest next update:     Thu 17 Sep 2026 15:22:38 +0000
Files and hashes:         1: Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl (hash: 7og4zrEMiWrx1rO78ZDKJJDfJO/Q8jMzgk8l/xham28=)
                          2: 834D7D565BAA11EFBAF22B7FC4F9AE02.roa (hash: D3M6wzI4okhGRiWpslBcCzchggkeDwBoIQLL3NU2Nsk=)
                          3: 902F4AAC567011EFA451BD7CC4F9AE02.roa (hash: ywYO0R2h+KCbkByqxPNiOzqIp/WyrJLVsBz2TrN/mq0=)
                          4: 3729B51E870611F18212677BADEE528E.roa (hash: KmqkE4g5dl2qjiw7G2tcNNphjk7q9UbrdXY3bWAn7D8=)
                          5: 909AA4DC567011EFA451BD7CC4F9AE02.roa (hash: YkWYNrxgO0n51u4sQpXTHmpzMu712XYl/YRt4XSQRKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13365 (0x3435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF863, serialNumber=39CE15DB36739A22CAEE64E0CF8BA31F5A6B9348
        Validity
            Not Before: Sep 10 15:22:38 2026 GMT
            Not After : Sep 17 15:22:38 2026 GMT
        Subject: CN=6aa2cb3f-1325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:df:74:51:44:e4:c7:f3:a0:aa:44:6c:dd:16:
                    82:2f:67:95:43:6b:2a:0d:ba:5d:fa:d2:5d:33:35:
                    ed:d0:1f:9b:5f:1d:96:ce:06:ce:3e:3b:8d:48:8a:
                    fd:07:10:8b:e5:85:66:89:2c:73:54:e5:65:38:1e:
                    fe:e3:98:e0:da:4b:10:7b:cf:a2:3c:00:8f:75:c0:
                    89:f9:8e:d8:9a:d9:c3:f5:17:ef:da:01:98:8c:f3:
                    05:81:2d:e0:9a:28:c8:27:bc:61:e7:8e:92:dc:26:
                    93:27:f0:0d:22:70:75:44:97:d8:57:5f:4f:a2:20:
                    e8:9a:52:b7:f1:54:e1:8e:10:30:7d:15:5c:e5:97:
                    2d:2a:db:58:52:22:fe:df:be:db:69:76:d0:98:a9:
                    e8:85:88:af:13:83:6d:cd:5b:e8:31:af:71:0f:5a:
                    94:db:b3:af:79:f8:a8:48:2d:80:3d:e0:d0:3e:90:
                    d6:5f:c7:28:0d:57:8f:1f:84:d9:bb:66:ac:f5:7c:
                    91:49:97:2d:da:dd:85:24:ce:44:dd:ce:6c:7d:29:
                    2a:39:7f:4b:c5:8f:7d:d2:db:66:81:f1:28:a4:77:
                    e4:8f:c5:47:9c:9b:d9:90:6c:45:3f:6a:53:01:cb:
                    91:8d:51:65:3f:a5:23:49:a8:51:64:e6:06:c2:ab:
                    41:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:85:53:C8:A7:C5:E2:52:0B:71:4B:4E:9A:C1:83:F4:4A:70:47:23
            X509v3 Authority Key Identifier:
                keyid:39:CE:15:DB:36:73:9A:22:CA:EE:64:E0:CF:8B:A3:1F:5A:6B:93:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oc4V2zZzmiLK7mTgz4ujH1prk0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF863/BFE54A68815B11E29B58A73B3292B5E8/Oc4V2zZzmiLK7mTgz4ujH1prk0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:10:8c:4c:54:f2:7d:74:68:fb:80:bd:e0:a8:84:5d:aa:5f:
         bb:19:d0:a8:64:d2:d1:c8:40:6b:8b:fe:d5:5b:eb:68:f9:76:
         75:74:01:24:35:a6:0e:7d:4b:54:7f:74:a2:da:f0:eb:db:ae:
         3d:51:68:d9:ef:5f:7f:d2:08:50:9c:24:18:5f:c2:46:8d:bb:
         f6:18:e7:5a:80:0f:45:d3:c8:8e:f2:e3:c9:f8:4e:a9:16:b8:
         f5:a8:29:d4:e9:b9:c4:70:66:06:48:36:b9:38:1a:28:2f:3f:
         37:3f:15:ca:4e:d5:7d:b6:d4:e1:f5:73:e7:10:94:a7:45:1a:
         4c:ff:3c:97:3c:e1:e3:73:9f:eb:23:34:75:83:4e:38:ce:93:
         07:a3:cd:49:d5:bb:e4:94:31:fb:3b:8e:17:16:78:00:33:7b:
         f2:ff:15:7f:50:61:f2:32:82:95:0c:9e:13:51:4e:35:be:6b:
         33:cd:ce:97:bd:c2:91:da:f3:9a:3e:f6:1a:47:13:a4:15:45:
         f1:cf:12:04:4a:9e:6f:af:57:ec:4d:2e:19:cd:3c:0c:72:49:
         d5:30:8d:3e:2f:aa:46:fe:4c:07:89:18:9e:f3:df:dc:f1:d1:
         4f:44:28:f4:48:4e:e6:05:9a:1d:a4:24:d6:7b:87:08:98:f4:
         aa:55:8c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:10:33 2026 by rpki-client