Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.mft
File:                     ODccJCQrL_Lf4ARRSO5BshNUqls.mft (raw, json)
Hash identifier:          zcOwE4FAx4kf1mu1h0tNdL24sXKyh6hALSSTBv3yF1A=
Subject key identifier:   B7:61:19:36:C0:56:38:5E:42:C3:AE:11:22:F6:E5:09:65:74:26:D8
Authority key identifier: 38:37:1C:24:24:2B:2F:F2:DF:E0:04:51:48:EE:41:B2:13:54:AA:5B
Certificate issuer:       /CN=A91E38D3/serialNumber=38371C24242B2FF2DFE0045148EE41B21354AA5B
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ODccJCQrL_Lf4ARRSO5BshNUqls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.mft
Manifest number:          1F
Signing time:             Fri 09 Oct 2026 09:45:41 +0000
Manifest this update:     Fri 09 Oct 2026 09:45:40 +0000
Manifest next update:     Fri 16 Oct 2026 09:45:40 +0000
Files and hashes:         1: ODccJCQrL_Lf4ARRSO5BshNUqls.crl (hash: 0CA8zIa16767It4yl1zXy5PN3PHcFAVFyTp+CJ7wvtY=)
                          2: 7735E9749B8E11F1B01CD25F4711F970.roa (hash: Dn/lygEx/cri14p8G6aMYCPWxOy9p7ueQx407UvV7KY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.crl
                          rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ODccJCQrL_Lf4ARRSO5BshNUqls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E38D3, serialNumber=38371C24242B2FF2DFE0045148EE41B21354AA5B
        Validity
            Not Before: Oct  9 09:45:40 2026 GMT
            Not After : Oct 16 09:45:40 2026 GMT
        Subject: CN=6ac8b7c5-0c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a5:b2:06:3a:e7:8a:53:2e:c3:45:23:c4:35:
                    e7:64:21:e5:39:dd:9a:b5:84:1c:5e:21:3a:80:50:
                    f6:19:d0:4d:76:09:11:a3:a5:27:6b:01:3d:d4:35:
                    77:27:1c:fc:ca:39:2e:61:30:ff:f8:13:30:50:bf:
                    71:c5:26:61:f2:4c:dd:40:5f:f8:0a:67:e8:6b:9a:
                    b7:19:bf:14:80:65:03:e6:d6:b8:9c:f0:02:dd:92:
                    98:26:16:c1:8d:90:e8:92:0e:c1:71:74:79:71:8e:
                    58:2e:b9:01:a2:3f:c1:45:e8:e3:7f:4f:49:f3:72:
                    dc:5f:e6:d1:58:0c:71:74:0b:d3:e3:81:6e:4e:b9:
                    bb:72:e4:92:75:d7:57:a2:04:42:e8:7a:8a:f8:be:
                    f9:26:a2:e1:7c:bb:ba:0f:96:67:bc:c8:95:4d:4a:
                    7d:93:81:72:d5:74:17:28:d9:63:a5:29:82:c7:36:
                    d0:02:d3:b4:75:d9:08:ac:2f:0a:04:b0:01:03:8d:
                    43:79:2c:ec:07:c9:e6:3b:10:d6:6f:d3:88:ed:f0:
                    c3:2d:03:26:ee:8e:f1:9a:e1:39:8b:5b:72:13:a8:
                    f3:bc:75:be:81:f4:20:e9:bb:8b:8b:96:61:ae:27:
                    aa:7e:a0:1c:69:38:a2:c2:b9:80:13:a3:4a:00:88:
                    ef:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:61:19:36:C0:56:38:5E:42:C3:AE:11:22:F6:E5:09:65:74:26:D8
            X509v3 Authority Key Identifier:
                keyid:38:37:1C:24:24:2B:2F:F2:DF:E0:04:51:48:EE:41:B2:13:54:AA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ODccJCQrL_Lf4ARRSO5BshNUqls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E38D3/3092519C9B8E11F19777A8574711F970/ODccJCQrL_Lf4ARRSO5BshNUqls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e2:f8:da:b3:0a:68:a8:59:dd:36:6d:10:3b:b2:1d:ee:d2:
         87:5d:18:1e:ae:03:32:3e:15:4f:5d:35:60:f9:63:9a:34:e1:
         17:89:3d:c9:c9:41:73:cb:3c:5a:1a:e9:4a:84:71:0e:c0:1d:
         3c:ef:0c:d2:4d:e0:cf:38:e8:14:96:a2:37:34:98:8e:66:0d:
         55:20:ae:87:10:ba:a8:45:9e:87:78:3b:e9:d7:86:02:ec:6a:
         f6:23:59:27:b1:fd:65:77:88:54:04:88:2d:ab:fe:d2:ce:d8:
         5d:f3:82:82:fd:87:5c:54:de:20:81:2f:6b:cb:0d:ab:cf:ad:
         5c:f2:dd:91:ca:a9:3d:8b:82:2f:d8:18:b2:2e:fc:43:c0:cf:
         2a:29:29:62:0b:ef:b8:df:a3:93:ff:15:6d:5d:e8:53:f3:38:
         90:45:ec:2a:26:4e:53:25:dc:b3:ed:4d:cd:29:b1:24:ae:d4:
         71:71:1c:46:da:3f:41:fd:70:01:d3:15:f6:9d:34:5a:b8:30:
         24:ef:c9:c2:9b:e0:93:b1:34:4d:38:dc:3c:39:18:b6:b6:af:
         d2:e3:9e:4f:04:1d:e2:2d:b6:c9:5e:66:5b:9a:3e:d9:5a:ac:
         77:79:77:8f:e7:62:a3:1c:ed:6e:6a:10:66:f1:97:cd:ae:3a:
         91:ca:39:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:23:12 2026 by rpki-client