Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
File:                     OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json)
Hash identifier:          mWuPF9e4hyMMXOKtQpYYWeL/UkfQZOkpJLwwnfDSqL8=
Subject key identifier:   07:FF:3A:2E:71:58:CC:44:BC:1C:94:C9:39:05:C4:0E:AA:9F:F2:AC
Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41
Certificate issuer:       /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
Certificate serial:       249C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
Manifest number:          6165
Signing time:             Tue 12 May 2026 14:15:19 +0000
Manifest this update:     Tue 12 May 2026 14:15:18 +0000
Manifest next update:     Tue 19 May 2026 14:15:18 +0000
Files and hashes:         1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: VDixMD/u/OOOqptT1bAsrebWL33VgPNvEivOPz9fXgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9372 (0x249c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241
        Validity
            Not Before: May 12 14:15:18 2026 GMT
            Not After : May 19 14:15:18 2026 GMT
        Subject: CN=6a0335f7-a1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:12:72:56:b6:00:23:dd:23:d3:91:1f:63:
                    f0:15:1a:57:3f:9a:b7:6c:1c:13:bb:26:6f:57:3d:
                    b9:37:5b:02:87:b5:8b:00:1a:7a:16:18:b6:a6:03:
                    f2:af:37:9f:a9:25:12:35:f1:71:fb:1b:6e:7d:43:
                    74:52:07:e2:19:08:aa:48:17:44:c2:f3:9e:6f:c0:
                    0e:c7:a4:14:8b:4e:c9:d9:01:d7:b5:8a:cf:47:76:
                    52:60:be:04:f4:da:ca:d6:dc:7e:e7:85:16:89:35:
                    6f:d0:8f:ed:d0:e5:8f:a7:01:f3:01:69:3a:7b:ee:
                    6f:74:ea:5f:1c:b6:83:87:f3:10:bc:2e:95:23:5d:
                    ae:98:23:2d:33:0d:d3:ca:74:b5:7c:8e:a4:86:13:
                    3a:c9:c9:38:28:8e:a3:08:10:ca:fc:df:f7:3c:11:
                    32:6b:dd:56:e3:a1:a9:ab:68:15:df:7e:17:aa:5f:
                    4f:11:51:bc:3f:4b:92:95:11:34:c7:71:00:20:e6:
                    2a:13:8d:a6:a3:45:44:12:da:de:d1:b6:0a:5d:67:
                    8a:6b:f9:19:3c:59:d0:a9:f4:6b:7b:4c:3f:84:99:
                    af:91:6e:c5:d5:9b:53:5f:69:ca:56:7f:44:5b:15:
                    14:58:fb:9c:1a:37:13:5b:59:bc:15:ed:c4:a0:4e:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FF:3A:2E:71:58:CC:44:BC:1C:94:C9:39:05:C4:0E:AA:9F:F2:AC
            X509v3 Authority Key Identifier:
                keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:58:69:46:9f:4d:42:ce:d4:75:39:ee:c6:3d:f2:02:de:09:
         32:48:af:56:b5:93:17:9d:d0:f7:da:05:52:1b:74:b9:f0:15:
         ab:95:0e:9f:5e:87:89:9a:fc:08:46:fc:46:cc:1a:9c:9f:bd:
         bb:f9:4c:a3:25:49:94:f8:c7:43:0d:9c:66:1a:87:64:9f:e4:
         1f:dc:7a:b8:15:6a:d0:f6:d8:99:0c:49:ad:92:17:0b:77:1c:
         34:45:bd:95:a3:23:54:41:df:75:01:a0:76:c9:67:86:b0:1d:
         b7:5a:e7:33:ad:d4:af:e0:57:da:46:20:1a:9a:fe:5e:0d:41:
         9c:bb:b2:85:fa:ae:46:b0:83:6e:1b:36:bb:14:10:91:5a:5b:
         9a:8d:d2:2c:a9:5d:aa:cd:27:b1:e2:7a:81:b1:40:8a:46:6b:
         fb:0c:87:74:74:66:2c:b1:5f:5d:5a:69:28:a4:35:fc:fd:21:
         ad:27:73:fa:c3:4c:d3:e3:d7:ac:43:2d:90:66:f6:db:36:6b:
         26:43:f1:a9:eb:78:f4:bf:c8:1a:a0:08:03:16:38:6b:60:c9:
         45:6a:bf:49:63:e3:0b:05:d0:4f:3d:db:ca:ec:f8:b2:3a:e2:
         92:d4:b3:11:b6:3a:68:6a:84:b9:b6:e2:8e:d3:5a:22:fc:c4:
         b6:4a:97:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:38:17 2026 by rpki-client