Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
File:                     0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json)
Hash identifier:          mUUyBP/MRdZdHj+Qw9Axy36+lvxMAsxAuLXDadiJwEI=
Subject key identifier:   85:3A:7A:F6:FF:A0:F8:81:5D:F2:11:35:C4:4B:9F:14:DB:1B:16:99
Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94
Certificate issuer:       /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
Manifest number:          0113
Signing time:             Fri 12 Jun 2026 22:56:12 +0000
Manifest this update:     Fri 12 Jun 2026 22:56:11 +0000
Manifest next update:     Fri 19 Jun 2026 22:56:11 +0000
Files and hashes:         1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: RAoGXhE3K21GCLshFajUD1tNvVagyS7HyHIw61i73Xw=)
                          2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: I4oc7m/xRaD9qjT6EvNaPSVC974na0zNUvD6aBlYtfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl
                          rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
        Validity
            Not Before: Jun 12 22:56:11 2026 GMT
            Not After : Jun 19 22:56:11 2026 GMT
        Subject: CN=6a2c8e8c-2546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ad:08:f2:f6:89:11:13:9c:25:09:0d:1c:4a:
                    56:ea:c5:50:17:84:49:24:12:1d:e7:61:a4:8f:d5:
                    cd:cd:71:8f:0a:3e:db:f7:73:29:9e:50:3e:b6:bb:
                    26:c2:5f:80:d9:d8:89:05:e9:99:ff:f9:7a:19:8f:
                    2a:a2:10:d4:db:72:ea:01:29:2b:df:a5:3c:bf:f8:
                    ef:1f:98:f3:ee:e3:02:da:8c:d8:c4:bc:5f:4e:37:
                    e2:5f:f3:f2:25:2b:97:d8:5e:dd:c3:19:3b:f2:57:
                    57:3d:82:30:20:1d:de:1c:26:0b:66:91:b7:92:f4:
                    3a:ce:66:08:8d:76:d0:0a:7c:ed:ad:50:14:e3:e5:
                    6b:6f:5d:d6:35:11:2e:ed:97:18:ed:e5:a4:2e:4c:
                    4c:52:30:25:2e:ad:0f:1e:cc:9b:3e:b3:0f:c1:50:
                    26:b1:f7:0b:d9:c5:64:c4:ec:f1:53:d5:57:eb:e0:
                    dc:b0:7b:ba:41:2c:1d:06:b7:42:49:cb:28:f9:ba:
                    d9:be:5a:bb:59:e5:88:ce:b5:16:3d:d7:2f:fb:1c:
                    4f:83:2e:75:6e:bf:93:4a:a2:4b:41:35:6b:c2:04:
                    06:f4:bf:94:2b:85:6e:fc:80:f9:da:c0:4b:64:b6:
                    26:e2:28:0f:71:1a:1b:b9:b3:b4:29:0c:81:75:f5:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3A:7A:F6:FF:A0:F8:81:5D:F2:11:35:C4:4B:9F:14:DB:1B:16:99
            X509v3 Authority Key Identifier:
                keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:29:4e:31:1b:9d:b3:dc:9c:07:14:2b:87:65:d4:93:4c:e1:
         57:91:82:b1:f7:26:04:15:75:35:56:c4:71:13:c4:da:63:f4:
         52:93:0a:13:f7:7c:14:3f:05:5c:60:fc:48:12:b0:08:77:f5:
         53:7d:42:92:11:0f:d1:e9:5a:57:3f:38:1e:d1:4c:29:54:26:
         6e:e4:5c:9a:95:ed:5d:a5:a8:45:9a:98:de:a9:e1:2c:e4:36:
         ec:d5:52:9a:1f:eb:f2:bd:16:25:99:10:eb:f7:f7:39:c7:94:
         31:f4:b1:61:79:f4:33:c8:df:63:52:23:5c:a2:8c:ce:e3:19:
         ec:2d:ef:b1:c2:f5:a8:7f:96:d8:38:3c:9f:98:a8:c5:89:cd:
         f8:c4:40:2d:9b:55:f0:2c:ae:36:ce:ec:7e:e7:3e:6a:d7:15:
         ee:cd:25:04:d7:62:1c:64:e0:9b:c6:1c:0f:a8:25:0f:af:f1:
         3c:94:36:d0:10:16:65:f0:99:a0:11:d8:1a:a7:81:7b:84:55:
         2a:1c:91:a9:a9:60:38:0d:0d:60:fa:e4:46:3e:39:4f:5f:39:
         b5:80:16:50:68:9e:ea:ae:4b:76:e6:d1:a6:18:b4:ee:b3:ae:
         cd:38:fb:c4:89:7b:1f:66:55:73:31:cb:9d:76:90:a1:11:45:
         c6:74:ef:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:30:33 2026 by rpki-client