Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
File:                     oUnn_U15BvwaY0EphlXagYXykBQ.mft (raw, json)
Hash identifier:          t3T/KSylgPUximWwGnc8zsgA3dEX4HpAPkgq5w2R6gw=
Subject key identifier:   BF:06:0F:B5:3C:96:04:79:3C:A4:37:76:86:12:FC:08:8F:E7:22:FD
Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
Certificate issuer:       /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Certificate serial:       14B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
Manifest number:          14A3
Signing time:             Mon 14 Sep 2026 16:47:50 +0000
Manifest this update:     Mon 14 Sep 2026 16:47:49 +0000
Manifest next update:     Mon 21 Sep 2026 16:47:49 +0000
Files and hashes:         1: oUnn_U15BvwaY0EphlXagYXykBQ.crl (hash: lRDA2xej2NZQvtlYvOI5+LI1YfngG8DmJRdCbNadTlk=)
                          2: A9FF43AE9ABD11F1884A0E584611F970.roa (hash: XmkyGDgjhGiUJuJ/QakCaJv3BagtT8L6vuw2bfv1WzM=)
                          3: 9D1CF15E90EE11E8960E8480C4F9AE02.roa (hash: ur4N/Ym7730gLMcmvZVXxmLVxzyESrZWQJd4vnZemkQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 16:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5298 (0x14b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
        Validity
            Not Before: Sep 14 16:47:49 2026 GMT
            Not After : Sep 21 16:47:49 2026 GMT
        Subject: CN=6aa82536-9143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d6:fe:fd:0e:17:8f:8f:df:ba:e6:ea:20:a9:
                    d8:8e:a6:40:16:7e:32:64:02:30:c3:8e:0c:14:d2:
                    28:f7:98:7b:77:a5:98:c5:bf:be:ba:c9:de:a3:b6:
                    95:5e:0d:04:11:17:57:d6:d8:37:98:b3:b2:d5:05:
                    a3:e5:82:29:24:9e:35:80:97:df:5b:22:84:35:9b:
                    87:6f:2c:fd:c8:59:f7:88:51:8f:ce:10:a3:a7:a4:
                    ed:af:64:5d:31:fc:40:cd:aa:4f:4c:91:36:8b:30:
                    f1:6a:57:c6:2b:cf:c9:8a:94:53:fa:98:5f:99:9c:
                    7d:e4:bf:d4:33:43:1f:d5:56:dd:c5:80:82:b7:fe:
                    12:a0:2a:3d:8e:39:3f:b1:a6:ab:a1:d1:6f:84:52:
                    5e:67:e5:57:a5:81:19:9c:03:e3:71:9b:f1:a1:dc:
                    5b:68:e0:e6:8d:db:f4:8b:15:25:28:3d:38:b5:ba:
                    a8:66:f2:4b:7b:0e:45:3c:7b:65:b4:b9:98:96:bd:
                    de:37:bd:86:09:c4:57:fb:bb:8b:c5:37:61:3a:05:
                    41:f4:aa:b1:44:d2:d2:a2:60:5b:6e:32:aa:f9:5f:
                    ac:e7:31:bc:01:8c:64:85:4e:ca:18:54:ba:43:69:
                    8c:fc:f4:b1:90:ab:b5:82:f6:92:48:2c:53:61:23:
                    ec:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:06:0F:B5:3C:96:04:79:3C:A4:37:76:86:12:FC:08:8F:E7:22:FD
            X509v3 Authority Key Identifier:
                keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:35:a9:7b:6e:d6:45:29:23:1b:c1:43:65:12:41:8a:42:41:
         46:cd:89:fa:2f:c8:c0:ee:65:d3:e6:ae:9a:1c:f3:9c:44:18:
         89:38:d3:d0:cd:2b:4c:2c:8d:23:e3:59:c2:eb:e8:e8:6b:a3:
         99:26:de:78:c6:19:bb:96:b2:a4:28:8d:0d:5a:51:a2:3d:79:
         98:dd:91:e0:a3:8f:a3:02:4c:ef:ed:15:f3:52:99:0f:ea:31:
         07:af:9e:a1:58:64:36:be:19:a0:73:a6:df:d5:3d:76:c5:da:
         a1:8f:ba:e8:de:8c:fa:7b:9b:cd:a8:7b:ac:23:34:c0:93:d4:
         01:cc:1e:fd:05:3f:29:30:9f:16:85:1a:90:7b:0d:8c:d8:cf:
         de:07:4c:f9:8a:82:39:5a:2c:cb:5b:dd:4d:21:b2:33:0f:d9:
         ca:92:34:6a:09:c2:8a:d6:81:bc:ca:e9:eb:ae:b7:37:ec:8f:
         de:52:00:f8:6a:7e:6c:9d:a2:24:28:15:26:3f:2c:d6:92:bd:
         5c:a4:6b:81:c7:9e:fe:e2:83:5c:a5:ea:7b:3f:b5:9e:07:dc:
         91:0b:ed:e5:27:e4:13:e0:4d:aa:5e:51:1b:0a:57:fd:3a:8d:
         dc:a7:83:ee:ae:f0:88:70:88:37:4f:b0:af:1a:a3:ca:b1:16:
         3d:b9:c3:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY2MzkxMTAvBgNVBAUTKEExNDlFN0ZENEQ3OTA2RkMxQTYzNDEyOTg2NTVEQTgx
ODVGMjkwMTQwHhcNMjYwOTE0MTY0NzQ5WhcNMjYwOTIxMTY0NzQ5WjAYMRYwFAYD
VQQDEw02YWE4MjUzNi05MTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh9b+/Q4Xj4/fuubqIKnYjqZAFn4yZAIww44MFNIo95h7d6WYxb++usneo7aV
Xg0EERdX1tg3mLOy1QWj5YIpJJ41gJffWyKENZuHbyz9yFn3iFGPzhCjp6Ttr2Rd
MfxAzapPTJE2izDxalfGK8/JipRT+phfmZx95L/UM0Mf1VbdxYCCt/4SoCo9jjk/
saarodFvhFJeZ+VXpYEZnAPjcZvxodxbaODmjdv0ixUlKD04tbqoZvJLew5FPHtl
tLmYlr3eN72GCcRX+7uLxTdhOgVB9KqxRNLSomBbbjKq+V+s5zG8AYxkhU7KGFS6
Q2mM/PSxkKu1gvaSSCxTYSPswQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL8GD7U8
lgR5PKQ3doYS/AiP5yL9MB8GA1UdIwQYMBaAFKFJ5/1NeQb8GmNBKYZV2oGF8pAU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzOS9BRUYwNjhCODkw
RUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2d2FZMEVwaGxYYWdZWHlr
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29Vbm5fVTE1QnZ3YVkwRXBobFhhZ1lYeWtCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjYzOS9BRUYwNjhCODkwRUMxMUU4ODNDM0Q0N0JDNEY5QUUwMi9vVW5uX1UxNUJ2
d2FZMEVwaGxYYWdZWHlrQlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcDWpe27WRSkjG8FDZRJBikJBRs2J+i/IwO5l0+aumhzznEQYiTjT0M0rTCyN
I+NZwuvo6GujmSbeeMYZu5aypCiNDVpRoj15mN2R4KOPowJM7+0V81KZD+oxB6+e
oVhkNr4ZoHOm39U9dsXaoY+66N6M+nubzah7rCM0wJPUAcwe/QU/KTCfFoUakHsN
jNjP3gdM+YqCOVosy1vdTSGyMw/ZypI0agnCitaBvMrp6663N+yP3lIA+Gp+bJ2i
JCgVJj8s1pK9XKRrgcee/uKDXKXqez+1ngfckQvt5SfkE+BNql5RGwpX/TqN3KeD
7q7wiHCIN0+wrxqjyrEWPbnDOw==
-----END CERTIFICATE-----
Generated at Wed Sep 16 16:32:23 2026 by rpki-client