Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
File:                     omYWegT6_uWuGlDgRXCtX9RO1pI.mft (raw, json)
Hash identifier:          XiV+AGqrqeR+M8G5zCtBEmYSzEwKDkiJ4BLHbc7UJz8=
Subject key identifier:   9B:E5:B2:62:E9:FE:A5:E8:79:21:50:DC:29:90:D1:67:E2:9B:B8:DD
Authority key identifier: A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92
Certificate issuer:       /CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
Manifest number:          E8
Signing time:             Sun 01 Mar 2026 07:34:52 +0000
Manifest this update:     Sun 01 Mar 2026 07:34:51 +0000
Manifest next update:     Sun 08 Mar 2026 07:34:51 +0000
Files and hashes:         1: omYWegT6_uWuGlDgRXCtX9RO1pI.crl (hash: PvqHilxKDKz65EIvND5ytHvNgMIFUnP1gGT7tPXroGM=)
                          2: B4A76FC8B5EC11EF9287020CC4F9AE02.roa (hash: QXT3cVNbWun3VB2ihMPWHvsqvergvyd+yJnrduGZFxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl
                          rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A0C0, serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692
        Validity
            Not Before: Mar  1 07:34:51 2026 GMT
            Not After : Mar  8 07:34:51 2026 GMT
        Subject: CN=69a3ec1c-94f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:34:55:69:43:f5:e1:38:09:f9:d0:0e:db:
                    77:34:41:ef:6b:be:cd:f6:89:14:9f:cf:9e:06:08:
                    a0:d0:57:ff:3c:b9:3a:79:7c:fb:69:a8:88:51:ea:
                    5e:a3:12:a6:ff:2d:57:5f:f3:b2:01:64:02:89:39:
                    5a:fe:62:16:c2:75:01:cc:4a:a3:85:39:74:8b:0c:
                    e1:5f:55:7e:28:b1:f1:dc:5b:59:d3:72:0e:ad:81:
                    04:be:2d:85:8a:3b:13:a2:4e:58:d2:8f:d7:db:59:
                    5c:11:03:6e:47:22:ea:b3:ef:0e:cb:e6:60:d5:23:
                    7d:0a:f9:c3:39:bb:c1:2b:10:7d:2b:d5:5e:20:d9:
                    33:7a:cf:ca:a5:30:f5:97:db:06:a0:2f:3c:b6:6f:
                    fe:08:f0:78:79:b5:3e:44:9f:e3:73:f7:11:d5:bf:
                    c7:b1:9a:5f:4d:a8:0f:c3:e6:0d:a6:82:cd:25:d8:
                    f5:fb:a0:f7:32:68:cf:cc:97:67:d1:b1:4d:19:f7:
                    16:cc:a8:32:e8:4d:31:63:45:38:be:dc:ca:38:7f:
                    c5:b9:45:a1:b9:f3:20:f6:a3:e5:d3:d9:b2:56:f1:
                    d9:e3:bc:b8:65:d3:45:20:85:73:ac:e0:01:02:54:
                    f8:36:56:d9:bf:cf:37:de:bc:dd:b9:9e:8b:29:06:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E5:B2:62:E9:FE:A5:E8:79:21:50:DC:29:90:D1:67:E2:9B:B8:DD
            X509v3 Authority Key Identifier:
                keyid:A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a6:c3:6a:eb:fc:ec:71:e2:d4:e5:a2:ba:99:e8:44:17:8c:
         d8:bf:2e:ae:f6:b4:42:c1:dc:8e:aa:33:10:15:b4:99:0b:10:
         8c:0b:c8:e6:44:52:e9:75:63:67:97:a8:0f:a7:93:0a:47:4e:
         2f:50:97:28:c2:10:7b:11:dc:1e:36:fd:1b:e5:ca:e5:ac:e4:
         1b:04:26:84:d1:fd:5e:97:5d:0c:ec:81:83:4c:04:b0:4d:df:
         f5:a8:8b:cd:c8:39:ec:14:89:3e:e3:83:76:ea:03:5e:0a:93:
         6e:79:ef:27:a7:24:3a:21:dd:fe:64:28:d4:ed:77:58:b3:60:
         85:9b:ae:0f:cb:b3:72:ba:0c:97:45:bd:f4:f8:fb:56:f5:fd:
         81:03:5a:49:e9:d7:44:29:96:c7:22:9d:2a:e4:71:6f:17:53:
         3d:de:52:bd:18:ac:e2:ac:e0:f0:e9:01:f9:4a:39:95:7e:42:
         01:05:f1:b6:f0:ec:50:5c:bd:76:78:90:48:cc:3e:64:8c:81:
         48:7b:34:c3:41:f8:0b:cf:7f:e7:e1:65:af:9f:dc:98:fe:58:
         90:c1:60:1a:fd:6c:6d:92:d1:9a:0f:31:d2:02:27:21:43:d9:
         3d:01:90:be:cd:cd:35:8c:18:d1:ce:b7:02:85:22:df:e6:32:
         d3:ed:32:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:47:33 2026 by rpki-client