Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
File:                     OdCbSlNggIIFqdaRRxnguYnPVgs.mft (raw, json)
Hash identifier:          DJJ8blk2AbVpo138ffdxwDk12oiLyhAfUWQPLv0OqDk=
Subject key identifier:   F0:F3:95:D2:7A:AF:B8:B3:38:9E:6C:FA:20:90:3D:71:02:08:6D:EE
Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B
Certificate issuer:       /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B
Certificate serial:       1897
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
Manifest number:          188B
Signing time:             Sun 04 Oct 2026 16:30:50 +0000
Manifest this update:     Sun 04 Oct 2026 16:30:49 +0000
Manifest next update:     Sun 11 Oct 2026 16:30:49 +0000
Files and hashes:         1: OdCbSlNggIIFqdaRRxnguYnPVgs.crl (hash: 605qzAscOIFcnic79nsRJuRU1crGM7MaDM51aVuiD8M=)
                          2: D8D34E92100411EE9849087AC4F9AE02.roa (hash: 7JNmlbMqJmYKkSRMUqjjlP0pR2Q9I21oeD7RxmLV6bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl
                          rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6295 (0x1897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDCF0, serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B
        Validity
            Not Before: Oct  4 16:30:49 2026 GMT
            Not After : Oct 11 16:30:49 2026 GMT
        Subject: CN=6ac27f3a-a0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c5:46:31:b9:8d:4e:f7:f4:89:76:43:94:28:
                    32:24:54:fe:f6:36:35:01:03:c7:95:e4:fc:24:e9:
                    91:7c:b6:29:47:ca:98:b9:94:c4:2d:4a:53:13:7f:
                    32:44:3d:2a:be:18:ba:4d:81:2b:99:48:d8:e3:c7:
                    a9:6d:f6:45:ed:5e:bd:2a:bf:2e:ea:5d:8f:ba:bc:
                    2e:f3:5a:1b:2f:ed:54:2a:9f:f3:30:ad:12:ce:eb:
                    ca:d9:2a:c4:84:e2:7a:30:81:a9:3e:03:d8:9a:d5:
                    2d:3f:f0:9f:48:8b:0b:ab:c3:b8:2c:1e:3a:cf:18:
                    b0:0e:09:01:a7:73:ac:14:48:c0:08:4d:1d:2c:5b:
                    38:fd:20:8f:24:42:a0:d9:4c:78:b5:4d:d8:af:87:
                    ee:29:e6:ce:96:65:66:6d:22:76:ac:27:43:77:a8:
                    89:b4:ae:05:c1:d7:5b:3a:60:b8:b9:54:e0:ed:8c:
                    4a:5b:4a:45:8b:63:7d:30:5f:28:d1:32:d6:cb:45:
                    bb:b7:a4:e1:bd:ae:5d:d7:77:48:51:b9:2e:53:36:
                    97:e0:73:20:eb:c9:e4:d2:db:f5:2b:73:6b:b4:6f:
                    6e:84:5c:d9:6e:f7:b1:97:49:d5:dd:c8:67:f5:55:
                    c6:4e:1e:20:6a:e9:5c:e3:a4:8f:f6:b7:07:c9:e2:
                    84:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F3:95:D2:7A:AF:B8:B3:38:9E:6C:FA:20:90:3D:71:02:08:6D:EE
            X509v3 Authority Key Identifier:
                keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d2:ce:53:05:6d:d3:d0:1b:d5:64:a1:0e:81:84:8c:9c:b0:
         1c:cb:3a:d0:da:a6:d4:1d:58:02:52:12:49:4e:e7:77:ce:6f:
         2e:8a:f1:ea:f4:72:0d:39:61:20:10:42:2e:c8:5c:d5:ae:b9:
         79:2d:1b:74:40:f3:22:e8:d7:fa:45:70:d1:35:b9:6c:68:ab:
         5d:2b:d4:06:c1:e3:c3:4d:2c:37:67:61:f7:03:a6:2a:f9:14:
         7c:c7:9f:1d:f3:c0:b9:7c:57:0f:d0:ca:36:48:d7:09:30:1c:
         62:c0:50:95:08:3d:f3:38:57:c9:42:9a:c9:9b:d5:33:55:d3:
         26:a5:87:14:8f:4b:12:63:38:a9:b6:a0:c3:5d:2f:ea:9f:63:
         18:c9:06:09:16:5f:83:d6:28:57:04:3d:16:39:5e:13:15:7d:
         4b:0e:90:be:e8:8f:cf:51:aa:ca:b8:a9:4a:9f:bf:29:ae:a3:
         da:46:13:04:b5:c4:de:7b:de:14:73:d8:44:c9:35:03:73:f1:
         e5:7e:60:f8:89:fa:d3:7d:dc:ce:bf:ff:be:c9:cc:53:7b:4f:
         b6:40:73:61:48:db:29:63:f2:5c:93:0f:a0:3a:63:2e:4c:f9:
         0f:99:75:51:8e:63:dc:90:1f:2a:e7:71:61:6b:ca:96:99:a0:
         47:1b:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:36 2026 by rpki-client