Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
File:                     0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json)
Hash identifier:          ql3/rd94XbRSFRD22NJWDegA+c7Rwxr3ECq2d0HnZ5w=
Subject key identifier:   F0:6C:49:E3:5B:C9:0D:CD:E7:31:B3:61:5B:0D:22:EC:63:9F:AF:CC
Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94
Certificate issuer:       /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
Manifest number:          0146
Signing time:             Sun 20 Sep 2026 22:36:45 +0000
Manifest this update:     Sun 20 Sep 2026 22:36:44 +0000
Manifest next update:     Sun 27 Sep 2026 22:36:44 +0000
Files and hashes:         1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: TWV0lNODOe9rmM+fQdalPCzGd1LtfvxhTGpEKu9/6wc=)
                          2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: I4oc7m/xRaD9qjT6EvNaPSVC974na0zNUvD6aBlYtfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl
                          rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
        Validity
            Not Before: Sep 20 22:36:44 2026 GMT
            Not After : Sep 27 22:36:44 2026 GMT
        Subject: CN=6ab05ffc-fc87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:f0:72:3e:b8:98:b3:a0:32:b4:f0:92:47:
                    31:d2:d8:e0:ce:88:44:11:18:4b:40:88:40:26:00:
                    9a:57:36:bb:8d:03:1d:d5:4b:f7:c1:f8:e8:00:d7:
                    26:c1:b8:54:57:ee:cd:70:04:3c:d2:79:2e:a0:47:
                    3a:14:f5:58:2b:6f:cf:e7:34:65:1e:4d:6f:a6:18:
                    14:05:aa:c9:36:29:54:7d:7b:83:49:54:99:2c:ad:
                    d0:12:a4:b0:2b:24:e2:14:48:e7:72:5a:c5:96:98:
                    9f:d3:3c:95:be:09:96:7c:80:9f:0e:68:39:ca:b0:
                    2c:4e:48:d4:f4:51:68:84:08:ac:84:cc:f3:66:bc:
                    f6:ab:8e:a7:25:a4:90:47:91:07:f4:6a:3c:9a:f1:
                    e3:6f:7c:90:66:6a:9e:da:84:fe:ef:f0:8e:d0:15:
                    6b:56:d7:ea:cb:c9:0a:33:59:41:15:b4:5c:22:74:
                    b6:af:56:4c:80:93:64:c0:9e:8e:eb:f0:a2:79:64:
                    6a:a1:38:ab:b8:15:d5:ee:2a:ab:c1:58:43:20:a2:
                    f3:1f:e7:be:a3:17:ba:67:92:ca:80:14:06:b7:b8:
                    61:74:ea:22:27:0a:0e:9f:e1:7e:08:98:9d:65:67:
                    41:64:45:f5:2c:57:b1:2d:b5:70:28:65:af:74:05:
                    90:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6C:49:E3:5B:C9:0D:CD:E7:31:B3:61:5B:0D:22:EC:63:9F:AF:CC
            X509v3 Authority Key Identifier:
                keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:67:41:ca:b6:5e:9b:1f:87:5e:c9:98:8f:d0:53:7c:17:cb:
         25:c7:3b:5e:f6:4f:78:ab:cf:4e:ec:db:77:c4:e9:53:eb:fc:
         7b:3d:5f:19:b9:00:f9:5d:cc:1a:77:98:b3:cb:69:66:45:0b:
         f0:77:be:0a:a9:74:7f:5c:0a:b9:f0:06:12:21:be:e2:33:d5:
         3a:36:ac:ac:80:c4:03:88:62:e9:10:11:13:87:47:af:a2:1e:
         52:e7:37:77:0a:dd:1d:97:a2:27:a5:2d:3e:02:8f:da:67:bf:
         8b:41:79:b7:79:a5:ab:90:b5:4a:06:d0:16:5c:ea:1e:f7:73:
         04:01:61:41:d0:26:13:9a:71:2e:35:af:4f:1c:11:aa:3d:16:
         4a:36:5d:9a:d3:f5:f7:6f:9d:38:10:bd:41:88:06:f2:76:96:
         49:d7:33:98:55:ef:e3:fd:69:7b:28:d4:1f:81:65:12:cb:e6:
         76:44:3e:7c:4d:e0:04:1b:f8:cb:8b:92:a3:f8:db:d2:a9:92:
         ab:03:e2:86:70:33:23:e1:b5:07:67:ee:ad:6c:7e:08:40:dc:
         19:02:8e:98:17:f0:de:4f:2e:21:57:1c:a1:5b:ae:14:cb:cc:
         c0:2c:2b:8e:49:17:9b:ae:fa:81:75:78:09:08:e6:3f:81:bd:
         bc:cf:aa:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFDODMxMTAvBgNVBAUTKEQyODk4QkFEOTI2NzkxQ0UwOTMzQzA5Mjc5REY5Nzk4
RDdERUI2OTQwHhcNMjYwOTIwMjIzNjQ0WhcNMjYwOTI3MjIzNjQ0WjAYMRYwFAYD
VQQDEw02YWIwNWZmYy1mYzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjFDwcj64mLOgMrTwkkcx0tjgzohEERhLQIhAJgCaVza7jQMd1Uv3wfjoANcm
wbhUV+7NcAQ80nkuoEc6FPVYK2/P5zRlHk1vphgUBarJNilUfXuDSVSZLK3QEqSw
KyTiFEjnclrFlpif0zyVvgmWfICfDmg5yrAsTkjU9FFohAishMzzZrz2q46nJaSQ
R5EH9Go8mvHjb3yQZmqe2oT+7/CO0BVrVtfqy8kKM1lBFbRcInS2r1ZMgJNkwJ6O
6/CieWRqoTiruBXV7iqrwVhDIKLzH+e+oxe6Z5LKgBQGt7hhdOoiJwoOn+F+CJid
ZWdBZEX1LFexLbVwKGWvdAWQFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBsSeNb
yQ3N5zGzYVsNIuxjn6/MMB8GA1UdIwQYMBaAFNKJi62SZ5HOCTPAknnfl5jX3raU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My8yMEE2MTM3RUND
OTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtjNEpNOENTZWQtWG1OZmV0
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUM4My8yMEE2MTM3RUNDOTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtj
NEpNOENTZWQtWG1OZmV0cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApmdByrZemx+HXsmYj9BTfBfLJcc7XvZPeKvPTuzbd8TpU+v8ez1fGbkA+V3M
GneYs8tpZkUL8He+Cql0f1wKufAGEiG+4jPVOjasrIDEA4hi6RARE4dHr6IeUuc3
dwrdHZeiJ6UtPgKP2me/i0F5t3mlq5C1SgbQFlzqHvdzBAFhQdAmE5pxLjWvTxwR
qj0WSjZdmtP192+dOBC9QYgG8naWSdczmFXv4/1peyjUH4FlEsvmdkQ+fE3gBBv4
y4uSo/jb0qmSqwPihnAzI+G1B2furWx+CEDcGQKOmBfw3k8uIVccoVuuFMvMwCwr
jkkXm676gXV4CQjmP4G9vM+q8g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:29:37 2026 by rpki-client