Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft
File:                     0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json)
Hash identifier:          oAeemnDbhG0Vy0ZQFDaZ/5lOqA0fUbgAaotLNWW+Shg=
Subject key identifier:   F1:C8:9B:46:D7:2D:DB:BF:E5:8C:5F:3E:21:D9:72:AB:C3:F0:69:F1
Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82
Certificate issuer:       /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482
Certificate serial:       0F3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft
Manifest number:          0F34
Signing time:             Tue 18 Aug 2026 17:46:29 +0000
Manifest this update:     Tue 18 Aug 2026 17:46:28 +0000
Manifest next update:     Tue 25 Aug 2026 17:46:28 +0000
Files and hashes:         1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: V9mExYAbpev2+TnhUHOogMwr/CK6d9/zwtLzbvAUAYE=)
                          2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: ZJU3E4xLNci2M9TJjjqPAudQ5AtKvMG4lJIWYg4TQLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl
                          rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3901 (0xf3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482
        Validity
            Not Before: Aug 18 17:46:28 2026 GMT
            Not After : Aug 25 17:46:28 2026 GMT
        Subject: CN=6a849a75-9499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d1:e9:a0:f4:4e:05:ad:65:e0:99:ab:67:04:
                    2e:64:f1:55:d8:e5:86:9d:84:83:80:3f:c4:e6:a1:
                    e9:94:f6:a4:f9:12:c3:d1:c7:85:fe:9c:66:54:bd:
                    53:70:36:1e:b2:f5:90:5f:96:c4:6d:f1:67:57:df:
                    ad:16:33:ba:5e:93:97:ac:59:fc:ed:18:f9:34:b5:
                    7f:ac:13:f1:1b:cf:db:00:b4:1f:33:c0:53:f6:ea:
                    03:00:cb:61:2b:0b:ab:46:91:04:40:0d:ef:c2:c0:
                    f9:1f:30:67:6d:51:f6:95:74:9a:be:f8:af:27:8c:
                    64:23:df:42:f5:eb:46:56:54:5d:bc:da:3d:32:39:
                    a0:e1:b4:33:54:f6:33:43:2e:57:7b:ec:f9:03:0d:
                    de:43:48:8e:94:21:69:b6:e5:2f:74:aa:1c:f7:95:
                    9e:ef:f9:30:50:06:a2:a0:a3:d1:83:81:05:56:90:
                    31:ec:6d:cf:1f:aa:cb:6d:70:6e:5e:89:fc:04:9c:
                    56:56:7d:d6:65:72:2a:33:b4:c0:9b:57:63:7f:80:
                    af:da:23:8e:a5:3b:61:9e:f3:5a:66:5a:a9:85:33:
                    1d:14:ea:d6:c3:8e:d6:2a:8a:ad:e2:34:69:52:22:
                    13:36:be:af:0f:ab:bf:8a:4a:37:11:cd:38:8f:ae:
                    b6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C8:9B:46:D7:2D:DB:BF:E5:8C:5F:3E:21:D9:72:AB:C3:F0:69:F1
            X509v3 Authority Key Identifier:
                keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:12:9b:8e:73:33:36:70:71:33:e9:fe:ab:a6:1e:0f:3e:73:
         63:f9:33:97:95:78:17:05:86:10:74:4d:70:b8:9d:aa:00:c8:
         d9:d6:aa:16:eb:35:3d:95:cd:a8:fe:c2:4c:24:21:be:9f:e9:
         28:42:ef:a4:94:a3:7d:e6:00:32:ab:f6:04:03:e3:2b:85:8b:
         57:2e:6f:bb:b8:61:63:ff:84:0f:36:ed:b7:72:d8:fc:f9:39:
         ea:6b:7c:9a:10:4f:f4:a8:2e:4b:84:7e:8f:3a:44:a5:b6:3c:
         dd:56:60:5b:71:6d:b2:63:60:6e:c2:46:fb:08:0d:08:76:d6:
         95:bd:bd:27:85:0b:55:f8:7a:03:e7:8b:2c:07:f7:06:b2:62:
         2a:be:93:7c:9a:0e:8b:47:af:a0:eb:cb:3b:c4:6b:db:49:df:
         37:28:79:2c:b5:f9:48:5c:ef:ae:df:28:84:07:43:85:5b:60:
         63:fc:77:28:94:cc:51:3b:08:fe:e7:fc:d3:5e:3d:e4:da:f5:
         65:01:52:1f:11:e0:29:0c:de:86:1b:69:52:20:4d:c4:fd:ad:
         aa:f5:b5:4a:48:3d:78:86:be:55:e3:2d:e8:a9:17:62:cb:6c:
         9f:3c:6b:9c:d3:3f:ac:95:fb:c3:fc:8e:fc:ed:9a:13:c5:a4:
         23:df:7d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:30:02 2026 by rpki-client