Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
File:                     omYWegT6_uWuGlDgRXCtX9RO1pI.mft (raw, json)
Hash identifier:          lk0UrmMdzgT9jviRWAnC0Oa1MDirnMQB3KHwlFJ9Bt8=
Subject key identifier:   0B:82:CD:93:24:64:52:A8:71:AF:04:EC:4E:D8:07:8E:C2:0A:E5:B0
Authority key identifier: A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92
Certificate issuer:       /CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
Manifest number:          0151
Signing time:             Mon 21 Sep 2026 05:16:42 +0000
Manifest this update:     Mon 21 Sep 2026 05:16:42 +0000
Manifest next update:     Mon 28 Sep 2026 05:16:42 +0000
Files and hashes:         1: omYWegT6_uWuGlDgRXCtX9RO1pI.crl (hash: Ae1RGlZeEQBRDc5PC82nV9zgpsfG7kdRVMU8No5dbDg=)
                          2: B4A76FC8B5EC11EF9287020CC4F9AE02.roa (hash: +19MD4zmg5S2MgEx4GQH/Dwh2+OxNyFWgGwQrcUjjYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl
                          rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A0C0, serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692
        Validity
            Not Before: Sep 21 05:16:42 2026 GMT
            Not After : Sep 28 05:16:42 2026 GMT
        Subject: CN=6ab0bdba-d4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:51:c8:9f:e3:0f:95:5c:62:e9:7a:52:11:
                    61:53:b2:bd:22:8c:62:5f:ad:d3:de:f7:0e:c3:2f:
                    7c:b8:5f:37:c7:40:7d:38:51:77:db:c3:10:38:be:
                    ca:c9:f5:97:6d:33:78:e5:14:b6:f6:34:35:56:c7:
                    4b:7c:31:c8:07:83:fa:d5:20:cd:b9:f9:00:c2:37:
                    8b:9d:86:69:5e:a9:19:f9:f3:d0:5d:11:2c:60:74:
                    fc:1c:3a:bd:df:17:a0:32:9e:c2:0d:54:96:6b:74:
                    79:2c:3e:ca:ac:a0:2e:19:0c:71:34:ae:c5:8a:69:
                    e9:6f:c1:7e:5e:50:12:42:5c:44:3d:c6:fa:3d:a3:
                    ea:a4:66:c3:14:40:4d:9c:f9:43:99:8b:da:a1:f3:
                    ba:e8:9c:d1:ec:21:6c:07:0f:ae:bc:7c:58:e7:70:
                    83:65:9a:79:14:0e:ce:f9:21:cf:d2:6a:4c:8b:ab:
                    f9:27:1f:9b:fc:e1:0f:de:cc:dc:f9:d2:f5:8e:1c:
                    00:93:4e:ed:b1:b8:04:0f:2e:df:95:a5:07:f5:28:
                    a2:9e:9b:1f:29:09:ad:7f:9c:a3:0b:31:9c:ca:ea:
                    0d:fb:f3:ad:c8:47:8f:15:b4:ee:62:73:b8:df:62:
                    5a:27:9b:8f:b0:aa:03:b8:26:73:5c:ae:65:03:7e:
                    5d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:82:CD:93:24:64:52:A8:71:AF:04:EC:4E:D8:07:8E:C2:0A:E5:B0
            X509v3 Authority Key Identifier:
                keyid:A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7c:33:f8:a8:52:9c:be:8d:d7:f8:61:58:00:9d:6b:c2:ee:
         15:ce:94:a1:44:dd:c3:4d:81:16:83:35:44:ee:98:cd:f1:11:
         3f:03:2f:3a:bf:a4:0a:34:39:af:6a:cf:b5:23:52:ef:c5:c0:
         fd:1e:ea:5d:62:b6:9d:43:87:90:cb:01:fa:3e:4b:bd:b3:cd:
         56:b8:ce:c3:ab:c7:86:3b:24:54:fc:bb:53:16:7a:be:bb:38:
         da:86:ba:7c:f3:23:93:21:a6:26:bc:76:00:69:e2:9e:ca:aa:
         11:4d:ef:3f:cf:31:6c:96:07:20:2d:4e:4a:55:16:e1:f9:2e:
         df:8c:e2:3d:d7:53:c1:41:4a:68:c1:45:38:a6:06:5b:bd:35:
         c3:9f:39:2b:3e:ed:c5:15:48:6c:b0:d8:e6:90:ab:b9:1c:02:
         fa:e4:d6:04:c7:1b:c0:6e:3e:fd:89:90:51:da:2b:c5:7a:1b:
         e2:c7:9d:3a:94:0d:6d:7d:92:28:72:69:28:80:0a:9d:11:e0:
         fe:db:64:48:04:32:14:89:35:da:b4:0e:35:d7:ed:1b:0a:4f:
         03:7d:95:36:0d:9b:1d:0d:d4:20:45:d7:3c:55:ff:01:af:4d:
         34:fa:30:20:0b:4c:3a:24:d6:4f:cd:a2:b3:fc:90:b3:19:09:
         18:5e:ee:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:04:28 2026 by rpki-client