Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
File:                     OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json)
Hash identifier:          btZ5agemyiKqC64xZ5l3NG/9pjeg+G3MOPtJmbHLfNA=
Subject key identifier:   63:6D:B8:24:43:2A:72:98:24:E1:AD:EF:05:52:B3:FF:3C:82:9E:DC
Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41
Certificate issuer:       /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
Certificate serial:       24C0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
Manifest number:          61AD
Signing time:             Wed 22 Jul 2026 14:15:20 +0000
Manifest this update:     Wed 22 Jul 2026 14:15:19 +0000
Manifest next update:     Wed 29 Jul 2026 14:15:19 +0000
Files and hashes:         1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: 5dHJuAi+gJDZvixkPzvi5/V74RnpIdxZkQ8KFTQygbU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9408 (0x24c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
        Validity
            Not Before: Jul 22 14:15:19 2026 GMT
            Not After : Jul 29 14:15:19 2026 GMT
        Subject: CN=6a60d078-f56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5e:71:dc:41:f2:cb:cd:95:9c:5d:46:6c:aa:
                    de:bf:1a:81:5e:1a:08:df:b4:99:9b:6f:d9:8b:2d:
                    9f:14:b4:3b:88:93:35:b2:bd:e4:d2:4b:08:06:0c:
                    2c:e1:80:87:0b:d1:42:da:d2:c3:70:86:98:65:7b:
                    b1:cf:7d:f1:ba:0c:c1:ad:8a:a0:37:5b:1a:ce:ed:
                    b1:e2:cf:f5:71:98:a2:46:dd:30:16:ce:53:02:d6:
                    c2:d8:d2:18:cb:bd:5d:82:39:df:a9:34:d4:e6:50:
                    5e:b7:ca:e6:96:29:9e:2e:76:e4:94:72:16:11:79:
                    5c:94:d4:ed:12:c4:51:f9:2f:a9:eb:0c:68:62:ea:
                    a1:89:73:d9:06:c1:31:c8:73:19:d0:95:ef:51:db:
                    9c:29:0e:67:99:29:f4:88:a8:1e:6b:21:34:4d:77:
                    35:3b:98:07:28:69:b0:a8:a8:ce:e9:82:2b:3a:0d:
                    d1:e0:74:9a:98:76:7d:4c:98:7b:bb:55:a4:af:dc:
                    0d:6d:13:e5:c0:46:c8:d9:e1:00:81:f3:ca:2c:ad:
                    c3:e4:e9:e4:46:bd:30:00:b9:a4:da:2c:9f:15:90:
                    03:84:dc:85:5f:9c:04:41:75:2e:fa:78:03:0e:17:
                    74:11:76:21:3b:fd:4d:36:8e:e4:7e:99:f6:89:1e:
                    09:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6D:B8:24:43:2A:72:98:24:E1:AD:EF:05:52:B3:FF:3C:82:9E:DC
            X509v3 Authority Key Identifier:
                keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7d:4c:6b:8f:fc:0c:04:b9:9c:22:02:ab:25:40:84:98:bc:
         5b:a3:84:83:cd:1d:0d:7b:f6:c4:62:f4:93:ff:52:a0:84:a9:
         aa:e7:c3:58:e1:09:bf:1f:cc:67:ed:e6:f3:70:9b:61:ba:7b:
         85:b1:f6:ab:e4:25:4a:48:c8:89:30:1f:e0:28:29:91:79:58:
         44:32:90:4d:24:70:1e:43:8e:97:47:57:55:6f:31:53:cd:45:
         b0:4f:03:ca:c9:c2:a8:93:94:f8:ad:d6:60:6a:97:15:ce:8f:
         a9:e5:a5:24:43:18:cc:85:42:64:1a:8e:75:ff:3b:3f:87:e9:
         be:d1:16:b8:52:44:36:ba:46:5d:0a:ad:4f:74:17:69:a0:c2:
         96:c1:61:53:1d:50:8a:11:30:a0:53:5b:e1:67:13:e2:37:fa:
         fc:4f:29:db:b8:18:46:0d:2b:5d:4d:bb:6c:04:e9:4e:b0:35:
         c6:42:2d:3c:87:d3:3e:f8:d6:bd:88:4f:01:a4:10:bc:a3:ff:
         67:2f:61:67:8b:ca:51:8d:4b:65:d4:f3:30:6d:28:6c:0a:78:
         b9:24:56:5b:a2:60:9c:44:39:3c:3e:3f:40:ce:7b:c2:9c:43:
         2d:4c:17:1e:1e:f5:d4:23:dc:b8:5a:07:78:4d:e2:b8:9e:01:
         8d:d4:08:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:59:08 2026 by rpki-client