Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
File:                     0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json)
Hash identifier:          48OtfMd63QLUIc8q4X3hMcNwFz1c/ixLsIviiJP/7dM=
Subject key identifier:   A6:C1:B7:5F:EC:6F:EA:61:4D:8B:62:94:0E:A4:E9:0B:36:09:14:FE
Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94
Certificate issuer:       /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
Manifest number:          0148
Signing time:             Thu 24 Sep 2026 22:37:18 +0000
Manifest this update:     Thu 24 Sep 2026 22:37:17 +0000
Manifest next update:     Thu 01 Oct 2026 22:37:17 +0000
Files and hashes:         1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: ar20l+RKxnQixKWwrhmlfdIQvf36TR/kQRttIvQE9H8=)
                          2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: I4oc7m/xRaD9qjT6EvNaPSVC974na0zNUvD6aBlYtfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl
                          rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 22:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
        Validity
            Not Before: Sep 24 22:37:17 2026 GMT
            Not After : Oct  1 22:37:17 2026 GMT
        Subject: CN=6ab5a61e-c756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:a2:09:de:21:ad:78:3b:c0:35:67:a6:08:
                    ed:45:a1:e5:56:d3:8f:f2:39:e8:a5:2f:8f:ca:7b:
                    db:f2:d2:4a:75:c2:c1:09:84:c8:3d:7b:07:2f:dd:
                    ce:23:57:65:cf:66:b1:6b:5c:cb:c2:2e:45:be:aa:
                    a6:db:ab:28:da:db:da:b7:14:aa:cf:56:3c:fc:58:
                    b8:6d:f7:58:6f:20:60:d9:60:c0:99:5b:3d:44:5e:
                    f6:4b:b0:24:5c:bf:9c:fc:cd:9d:06:2f:17:57:88:
                    b9:e7:5c:6e:cd:1b:f4:27:3c:cf:9a:7f:f8:cf:ee:
                    15:21:a1:79:2f:2a:2a:5a:2a:59:96:33:16:2c:5a:
                    20:f1:81:76:02:c5:9e:f5:a6:40:cd:20:79:4e:a9:
                    a0:7e:98:af:0a:a9:9e:b4:23:fe:de:34:aa:4c:00:
                    b8:44:f2:44:0c:1c:ed:d7:d1:23:b7:66:01:cc:6f:
                    8e:1a:3c:6c:72:75:fa:6c:c8:1d:06:6e:2f:ae:fc:
                    9d:5b:98:a7:c1:07:38:f4:65:65:2c:8d:48:ce:e8:
                    92:bc:3c:3f:84:6d:aa:4f:b4:b6:5d:ae:4c:b5:bb:
                    55:53:ef:41:67:7e:7d:03:b7:9f:cd:0d:d0:ed:4f:
                    29:f9:32:ef:ae:17:df:ae:a8:90:61:0c:95:fb:d6:
                    dd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C1:B7:5F:EC:6F:EA:61:4D:8B:62:94:0E:A4:E9:0B:36:09:14:FE
            X509v3 Authority Key Identifier:
                keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:1d:9f:ef:67:55:21:08:c3:e0:4a:1a:2b:01:cf:98:66:e1:
         f8:a2:88:bc:00:64:b6:02:c1:32:7d:7e:8f:eb:b1:74:23:ac:
         ee:93:f7:8b:ab:d8:18:d7:21:52:39:c2:c8:fd:fe:38:7f:f3:
         9a:fd:c0:cb:36:55:4e:ae:04:42:26:2e:ed:dc:55:a5:a6:dc:
         3c:04:7d:3f:ce:b0:dd:ce:69:ae:ca:76:53:e1:07:9f:b7:ee:
         3d:06:22:83:7e:3f:47:89:d0:22:13:86:c6:11:46:36:fa:29:
         3d:b5:37:d2:3f:1d:05:15:7c:a3:75:30:c2:94:23:6c:08:3f:
         6c:2f:05:04:07:08:0d:50:98:97:23:e5:33:21:be:f4:20:11:
         93:b6:e7:52:8c:27:be:37:53:41:a1:e3:09:62:c0:f7:3f:52:
         f9:40:fd:95:a1:63:23:48:b7:81:c5:16:0c:bb:22:f5:ce:1e:
         7a:4c:3d:01:42:f1:aa:10:5d:e1:8b:df:2c:98:fa:16:e7:f8:
         02:d9:ac:3b:e4:36:83:c3:d0:e3:5a:ca:e2:72:8b:53:d8:95:
         24:c5:38:b7:f2:de:49:91:b7:90:6d:33:48:77:96:93:34:84:
         ce:4f:18:86:d7:31:4f:2c:f8:bd:8f:ea:0d:e5:4d:8b:73:03:
         00:73:0f:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFDODMxMTAvBgNVBAUTKEQyODk4QkFEOTI2NzkxQ0UwOTMzQzA5Mjc5REY5Nzk4
RDdERUI2OTQwHhcNMjYwOTI0MjIzNzE3WhcNMjYxMDAxMjIzNzE3WjAYMRYwFAYD
VQQDEw02YWI1YTYxZS1jNzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvoOiCd4hrXg7wDVnpgjtRaHlVtOP8jnopS+Pynvb8tJKdcLBCYTIPXsHL93O
I1dlz2axa1zLwi5Fvqqm26so2tvatxSqz1Y8/Fi4bfdYbyBg2WDAmVs9RF72S7Ak
XL+c/M2dBi8XV4i551xuzRv0JzzPmn/4z+4VIaF5LyoqWipZljMWLFog8YF2AsWe
9aZAzSB5TqmgfpivCqmetCP+3jSqTAC4RPJEDBzt19Ejt2YBzG+OGjxscnX6bMgd
Bm4vrvydW5inwQc49GVlLI1IzuiSvDw/hG2qT7S2Xa5MtbtVU+9BZ359A7efzQ3Q
7U8p+TLvrhffrqiQYQyV+9bdHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKbBt1/s
b+phTYtilA6k6Qs2CRT+MB8GA1UdIwQYMBaAFNKJi62SZ5HOCTPAknnfl5jX3raU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My8yMEE2MTM3RUND
OTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtjNEpNOENTZWQtWG1OZmV0
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUM4My8yMEE2MTM3RUNDOTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtj
NEpNOENTZWQtWG1OZmV0cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqR2f72dVIQjD4EoaKwHPmGbh+KKIvABktgLBMn1+j+uxdCOs7pP3i6vYGNch
UjnCyP3+OH/zmv3AyzZVTq4EQiYu7dxVpabcPAR9P86w3c5prsp2U+EHn7fuPQYi
g34/R4nQIhOGxhFGNvopPbU30j8dBRV8o3UwwpQjbAg/bC8FBAcIDVCYlyPlMyG+
9CARk7bnUownvjdTQaHjCWLA9z9S+UD9laFjI0i3gcUWDLsi9c4eekw9AULxqhBd
4YvfLJj6Fuf4AtmsO+Q2g8PQ41rK4nKLU9iVJMU4t/LeSZG3kG0zSHeWkzSEzk8Y
htcxTyz4vY/qDeVNi3MDAHMP9w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 12:08:43 2026 by rpki-client