Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
File:                     0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json)
Hash identifier:          o/D7uDT4j8xnqibh5/XVevNfxnmAU5lqSOW7QjNzPhY=
Subject key identifier:   5B:7F:64:96:5D:0B:18:BF:78:6D:3A:A6:A0:C0:A4:3E:A0:C7:FB:0F
Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94
Certificate issuer:       /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
Manifest number:          0127
Signing time:             Wed 22 Jul 2026 23:34:33 +0000
Manifest this update:     Wed 22 Jul 2026 23:34:32 +0000
Manifest next update:     Wed 29 Jul 2026 23:34:32 +0000
Files and hashes:         1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: gKKBu+ChJcrBlHtnNgs/y/dp7bnNXQNjHMQDaq8kK1I=)
                          2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: I4oc7m/xRaD9qjT6EvNaPSVC974na0zNUvD6aBlYtfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl
                          rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:34:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
        Validity
            Not Before: Jul 22 23:34:32 2026 GMT
            Not After : Jul 29 23:34:32 2026 GMT
        Subject: CN=6a615389-9cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:58:fb:6f:2a:0e:6f:6c:7e:76:ae:c6:1c:a6:
                    01:7d:5e:0a:03:84:e8:d3:19:0f:be:dc:5a:b1:0d:
                    f1:02:ea:fb:27:3e:d3:d1:09:3e:19:90:96:26:db:
                    b8:eb:7b:78:e8:8a:44:43:69:04:25:14:53:32:b2:
                    f0:52:d4:0d:bf:ce:fe:42:2f:07:01:a8:72:b1:6a:
                    d8:dd:20:54:00:d3:a0:cf:d9:69:14:7c:9b:23:04:
                    87:43:09:18:33:e7:0f:0f:a1:ae:09:57:e6:78:55:
                    57:40:0e:be:55:03:ed:35:8c:1d:04:01:64:49:b2:
                    f5:9f:b8:b8:cf:0e:59:28:6f:2f:43:fc:a5:16:9f:
                    58:b7:4b:46:77:88:7d:9a:6b:c9:e6:fb:2b:03:4a:
                    b3:81:b3:81:a3:a5:33:6f:e1:2a:2c:b9:86:46:ad:
                    20:ab:2b:f5:8a:d4:fa:72:4b:bf:08:c1:39:95:95:
                    43:7e:ce:62:dd:45:b1:cb:61:c1:a2:2a:51:33:14:
                    3a:9d:d0:d2:ec:5b:27:87:40:6f:b5:a5:e8:36:1c:
                    fa:fa:60:44:f0:61:8c:6d:ca:40:98:9e:b0:d2:2c:
                    6b:ce:96:0b:6b:7e:83:2b:23:91:2e:8c:90:21:05:
                    a8:ef:7e:b9:d8:fa:89:4b:04:76:c8:dc:98:8a:1e:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7F:64:96:5D:0B:18:BF:78:6D:3A:A6:A0:C0:A4:3E:A0:C7:FB:0F
            X509v3 Authority Key Identifier:
                keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:09:cd:97:c0:eb:e4:b2:e3:71:a7:9e:69:b5:71:51:d3:4c:
         77:e4:ee:d8:88:fb:3b:08:2f:f0:c1:7d:8b:fe:f5:b5:77:ec:
         6c:30:17:72:ef:7a:6b:9a:5e:84:06:cb:64:2d:ee:63:51:97:
         c1:9a:b3:cd:1b:b4:5f:61:43:fb:70:6d:23:d1:73:ff:9b:02:
         d0:fb:dd:cc:b8:1d:ea:a5:7b:89:cf:ae:22:c1:7d:34:aa:db:
         b8:8c:d7:db:c4:84:f9:fb:50:76:f3:fe:85:68:36:31:c1:58:
         c2:9e:89:a1:45:59:ef:8e:9d:6c:63:14:36:ce:a8:de:c3:9a:
         01:c2:14:16:e1:56:a3:29:25:2f:e9:c2:78:fc:1f:2e:e7:48:
         4d:f7:0f:d0:8b:b0:e6:1d:8e:fd:7b:3d:41:e8:0b:a2:af:7b:
         50:45:81:7d:f9:58:ed:5f:23:7d:5f:7e:48:c6:04:3f:c1:47:
         a1:82:86:64:15:50:a6:39:29:2d:c1:3a:77:b4:f2:0d:4c:66:
         03:48:dd:44:e0:49:16:60:76:3c:66:da:db:c9:8a:87:89:f4:
         85:98:c3:15:3b:0d:de:08:df:fc:63:a2:17:0c:52:68:e9:71:
         fe:88:9a:56:f1:53:b2:65:ad:4b:a7:7a:2b:4b:dd:e1:06:91:
         0b:bc:30:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFDODMxMTAvBgNVBAUTKEQyODk4QkFEOTI2NzkxQ0UwOTMzQzA5Mjc5REY5Nzk4
RDdERUI2OTQwHhcNMjYwNzIyMjMzNDMyWhcNMjYwNzI5MjMzNDMyWjAYMRYwFAYD
VQQDEw02YTYxNTM4OS05Y2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzlj7byoOb2x+dq7GHKYBfV4KA4To0xkPvtxasQ3xAur7Jz7T0Qk+GZCWJtu4
63t46IpEQ2kEJRRTMrLwUtQNv87+Qi8HAahysWrY3SBUANOgz9lpFHybIwSHQwkY
M+cPD6GuCVfmeFVXQA6+VQPtNYwdBAFkSbL1n7i4zw5ZKG8vQ/ylFp9Yt0tGd4h9
mmvJ5vsrA0qzgbOBo6Uzb+EqLLmGRq0gqyv1itT6cku/CME5lZVDfs5i3UWxy2HB
oipRMxQ6ndDS7Fsnh0BvtaXoNhz6+mBE8GGMbcpAmJ6w0ixrzpYLa36DKyORLoyQ
IQWo73652PqJSwR2yNyYih7PgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFt/ZJZd
Cxi/eG06pqDApD6gx/sPMB8GA1UdIwQYMBaAFNKJi62SZ5HOCTPAknnfl5jX3raU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My8yMEE2MTM3RUND
OTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtjNEpNOENTZWQtWG1OZmV0
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUM4My8yMEE2MTM3RUNDOTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtj
NEpNOENTZWQtWG1OZmV0cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArgnNl8Dr5LLjcaeeabVxUdNMd+Tu2Ij7Owgv8MF9i/71tXfsbDAXcu96a5pe
hAbLZC3uY1GXwZqzzRu0X2FD+3BtI9Fz/5sC0PvdzLgd6qV7ic+uIsF9NKrbuIzX
28SE+ftQdvP+hWg2McFYwp6JoUVZ746dbGMUNs6o3sOaAcIUFuFWoyklL+nCePwf
LudITfcP0Iuw5h2O/Xs9QegLoq97UEWBfflY7V8jfV9+SMYEP8FHoYKGZBVQpjkp
LcE6d7TyDUxmA0jdROBJFmB2PGba28mKh4n0hZjDFTsN3gjf/GOiFwxSaOlx/oia
VvFTsmWtS6d6K0vd4QaRC7ww0w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:38 2026 by rpki-client