Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
File:                     OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft (raw, json)
Hash identifier:          hn5fpIpaQwtF/I28enRagPj2yEueQHvtkA5mNU4YauE=
Subject key identifier:   B3:FF:A2:E6:4D:F7:79:29:2A:49:CC:D4:FB:EC:64:77:E1:C1:28:C3
Authority key identifier: 38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2
Certificate issuer:       /CN=A91D1200/serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2
Certificate serial:       0292
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
Manifest number:          0280
Signing time:             Mon 27 Jul 2026 03:25:32 +0000
Manifest this update:     Mon 27 Jul 2026 03:25:31 +0000
Manifest next update:     Mon 03 Aug 2026 03:25:31 +0000
Files and hashes:         1: OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl (hash: G6onAzdrwydZ9YtFX447fP+FH0ugOWc7rctOCV3kqdY=)
                          2: 3FD9A0B2CC6411EDA7970484C4F9AE02.roa (hash: xhoAB8F3nbGTu7WfpGnVkOCBQJhj/jWvO8tM9P0b/FE=)
                          3: 3F3E2A10CC6411EDA7970484C4F9AE02.roa (hash: i7fPg095F7w1Gp8Ev4N5gXFYKYbqtFZ/mtpgHv4F5ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl
                          rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1200, serialNumber=38C0B1C58D00DE3F73AD5B5887D4249BDEE7BBA2
        Validity
            Not Before: Jul 27 03:25:31 2026 GMT
            Not After : Aug  3 03:25:31 2026 GMT
        Subject: CN=6a66cfab-4824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:92:47:e3:71:e2:73:22:50:b3:d8:ad:ad:46:
                    74:af:2f:04:b5:27:41:e1:55:0b:fa:56:ff:86:ed:
                    7d:1e:80:b6:cc:2b:d3:5a:ba:b7:a1:a4:19:b4:ac:
                    4d:9f:0c:3d:6f:9a:c0:89:8a:be:e0:21:b8:b3:3d:
                    5e:c4:7e:0a:17:db:18:87:e1:a1:14:9b:a2:4d:af:
                    f5:f2:c4:e0:d2:8c:c3:04:30:d6:f5:cf:f0:eb:30:
                    4a:a1:4c:92:c3:71:bb:7c:9e:c5:08:1b:03:5a:bd:
                    0f:c3:74:d8:ad:99:16:6a:22:66:83:4a:0f:f7:9a:
                    2d:35:8c:f6:09:23:5b:62:03:e4:c4:3e:33:4e:26:
                    67:76:bf:16:85:22:8a:5b:63:b2:5e:df:0f:d6:a3:
                    7c:c6:d2:c3:38:52:ea:ad:76:d0:07:c9:04:11:17:
                    71:10:8c:c8:e9:40:d4:81:ae:67:ac:05:b9:81:d2:
                    c8:ac:7c:c6:b8:31:9a:e9:76:31:79:d6:11:59:6d:
                    d4:8b:90:58:46:d4:04:91:c0:2f:34:a8:1c:49:43:
                    60:35:a7:48:c3:70:ce:df:85:90:5c:50:bb:f7:ed:
                    36:89:40:20:78:54:45:67:ba:38:96:9c:a4:0e:9b:
                    b8:f0:06:2b:97:d4:f4:27:f6:03:75:27:88:82:5e:
                    66:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FF:A2:E6:4D:F7:79:29:2A:49:CC:D4:FB:EC:64:77:E1:C1:28:C3
            X509v3 Authority Key Identifier:
                keyid:38:C0:B1:C5:8D:00:DE:3F:73:AD:5B:58:87:D4:24:9B:DE:E7:BB:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OMCxxY0A3j9zrVtYh9Qkm97nu6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1200/F5A952E0CC0311EDA97ACA5DC4F9AE02/OMCxxY0A3j9zrVtYh9Qkm97nu6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:2a:8a:fc:04:92:b0:71:f9:f0:bb:00:df:84:4b:ab:29:ec:
         63:72:40:5b:ae:bf:a1:50:d4:38:dc:43:96:32:bd:d3:8d:98:
         2d:6b:4b:01:4b:fd:c9:5a:fe:60:0c:04:26:81:9b:d8:80:a5:
         4e:26:d1:99:af:e2:30:11:ac:3e:d9:d6:10:08:ad:ac:a8:74:
         4e:0c:19:f4:96:6f:22:2f:4f:43:90:21:d9:d0:24:f2:10:f2:
         5c:e0:0c:ab:f2:87:79:88:5b:4b:31:0a:24:54:33:ed:22:73:
         53:6c:61:35:b0:e3:d1:60:41:b5:7b:54:96:ed:2b:79:1a:db:
         14:0a:9a:b1:e9:98:1b:5e:45:8e:9c:0e:0b:ca:f5:f1:4a:ec:
         15:66:67:4b:eb:dd:83:f7:5d:32:5a:d5:78:54:86:fd:74:41:
         41:87:10:61:39:68:a1:ab:21:d1:ee:a1:84:9f:62:b9:e8:22:
         9b:e1:15:25:f1:34:f3:61:0e:fa:93:eb:c6:bc:27:40:f1:fc:
         0a:76:50:90:a2:00:d2:0b:be:23:64:d4:7c:a6:99:f3:e2:f3:
         bc:b7:e9:50:e0:91:bb:67:ef:db:b8:5d:ac:ba:df:66:d7:da:
         c2:a9:6c:9c:a5:89:a3:1f:f1:b2:2a:a7:30:f8:50:fc:33:71:
         e4:c7:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:42:03 2026 by rpki-client