Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
File:                     Omhmsd88LltfrK7gwJkrvHiMXQo.mft (raw, json)
Hash identifier:          okA2xgXPIxzm7iGvov4uag/ExuThJgwR/t4YOcPc7pE=
Subject key identifier:   B8:32:E6:5B:34:FC:A7:5C:C1:27:79:93:C8:6B:07:61:DA:4A:65:C9
Authority key identifier: 3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A
Certificate issuer:       /CN=A911A6D6/serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
Certificate serial:       0257
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
Manifest number:          0251
Signing time:             Thu 23 Jul 2026 03:30:21 +0000
Manifest this update:     Thu 23 Jul 2026 03:30:20 +0000
Manifest next update:     Thu 30 Jul 2026 03:30:20 +0000
Files and hashes:         1: Omhmsd88LltfrK7gwJkrvHiMXQo.crl (hash: /xLxmv0RUwmJJ6PCeQ0IU1BO1iKvopAFhcj9XwICz50=)
                          2: D4D3B47EA27811EE9C29A256C4F9AE02.roa (hash: UrwTDpQ73wZniwDukqZp2ufbIM32Z/byrU5UOJJiolo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl
                          rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A6D6, serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
        Validity
            Not Before: Jul 23 03:30:20 2026 GMT
            Not After : Jul 30 03:30:20 2026 GMT
        Subject: CN=6a618acd-3d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d3:45:f6:e9:81:6d:28:d6:72:12:27:fe:12:
                    7c:c3:48:87:14:28:53:d5:02:af:9d:36:93:b7:af:
                    b5:e8:6c:41:01:bc:f1:38:f3:e4:2b:cc:50:62:75:
                    cd:ca:fb:01:6a:82:7b:24:b6:42:bb:5c:28:4e:2c:
                    61:c4:3a:51:23:b0:8a:86:3f:85:40:57:9d:8f:cb:
                    6c:3f:b9:61:db:6a:6c:63:db:3f:e7:eb:a3:ef:d1:
                    26:34:4f:e0:eb:74:14:b6:d1:91:51:d8:34:a4:79:
                    e2:3a:b2:87:e3:f9:1a:9a:5d:ae:fc:19:50:17:c6:
                    d8:68:cb:c8:90:19:c5:8b:83:a5:49:88:e4:8d:d5:
                    19:88:69:56:24:3f:0a:c9:1f:55:07:75:39:3f:43:
                    3e:82:ad:a1:99:33:8c:25:46:22:df:cc:43:5c:f5:
                    b4:b2:13:f8:d4:3d:2f:0a:33:1f:3b:ce:e7:81:65:
                    da:19:ba:1d:8b:34:bf:96:5e:06:14:0b:84:aa:b3:
                    bc:2f:4f:3f:eb:76:07:67:05:96:cb:e8:d8:79:b1:
                    e3:bb:49:87:01:22:97:61:16:7e:b7:fb:cf:05:a5:
                    30:84:c2:a2:27:7c:78:30:c2:63:ae:d3:bf:ad:3b:
                    25:ce:f1:22:da:11:44:57:0f:0d:f6:2c:6d:e7:81:
                    af:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:32:E6:5B:34:FC:A7:5C:C1:27:79:93:C8:6B:07:61:DA:4A:65:C9
            X509v3 Authority Key Identifier:
                keyid:3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:95:df:3e:3b:69:cc:2c:3c:95:f6:76:34:4b:12:a3:96:
         c8:9d:1d:b1:a0:ec:e3:14:a9:e2:ed:87:31:e9:2d:5d:61:64:
         9f:62:3a:6d:a7:15:9f:2f:60:a7:4c:a8:87:00:65:a9:21:20:
         f0:05:13:26:87:2e:c7:f9:0e:1a:61:06:93:d2:06:b7:a4:d6:
         ee:f9:21:b7:d4:f0:f6:c9:12:b5:cf:82:ec:13:79:26:03:1b:
         24:47:cb:92:7f:7a:28:cd:5e:45:c7:3f:46:6f:fa:1e:a9:cf:
         1d:36:9c:8f:02:4c:33:31:15:fc:aa:37:bf:cf:1c:08:14:ab:
         60:e8:ea:10:16:5c:b6:1a:93:d2:6f:73:97:b1:8e:5a:ad:46:
         ea:d3:f7:ea:1c:0e:ff:bb:c9:21:ff:80:e6:22:c8:75:ec:1e:
         bc:69:08:03:b8:d3:1b:02:80:bf:d6:ad:ae:b3:f7:fe:75:f0:
         83:36:5c:e4:be:21:9a:cc:95:07:14:fe:fc:40:ce:99:db:e4:
         3e:66:0d:43:2c:f7:6a:94:e4:41:71:9f:fe:33:40:d0:b0:b1:
         77:7e:7a:2a:7f:aa:46:b7:3b:c0:31:a0:2f:a0:fa:84:1e:58:
         10:43:e2:6d:88:76:25:bc:44:cd:22:cf:36:43:eb:05:33:c9:
         12:bb:c0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:59:14 2026 by rpki-client