Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
File:                     Omhmsd88LltfrK7gwJkrvHiMXQo.mft (raw, json)
Hash identifier:          cLi77m/9etC5Amu5khD3/Ct+xcEVCO1+/qSuoIhBeak=
Subject key identifier:   89:68:52:49:7C:EB:53:58:C3:E8:F2:5B:4A:F2:DC:2C:FF:76:F0:40
Authority key identifier: 3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A
Certificate issuer:       /CN=A911A6D6/serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
Certificate serial:       0265
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
Manifest number:          025F
Signing time:             Wed 19 Aug 2026 02:44:19 +0000
Manifest this update:     Wed 19 Aug 2026 02:44:19 +0000
Manifest next update:     Wed 26 Aug 2026 02:44:19 +0000
Files and hashes:         1: Omhmsd88LltfrK7gwJkrvHiMXQo.crl (hash: XIhoOgHxxmYzK8jGT0P31zzkdrGiz3Fnds8CNwDwULw=)
                          2: D4D3B47EA27811EE9C29A256C4F9AE02.roa (hash: UrwTDpQ73wZniwDukqZp2ufbIM32Z/byrU5UOJJiolo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl
                          rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A6D6, serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
        Validity
            Not Before: Aug 19 02:44:19 2026 GMT
            Not After : Aug 26 02:44:19 2026 GMT
        Subject: CN=6a851883-e246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:b8:26:72:ac:18:89:b9:d7:b0:0a:a7:c2:
                    24:2e:7f:01:18:53:1e:89:22:55:f7:2e:ad:10:2b:
                    c1:3c:d9:1b:0e:41:12:7f:4d:b7:1b:8f:0b:b8:14:
                    f7:d9:6d:cb:aa:29:28:c7:37:e4:76:3a:04:9f:2e:
                    12:35:f9:7c:18:ed:36:98:9b:1a:13:dc:93:87:23:
                    8d:97:12:d7:24:d5:22:a7:f3:d7:ce:40:ea:fd:d0:
                    6f:0f:bd:91:ba:69:31:06:a7:25:31:64:40:fd:4c:
                    23:69:c2:4d:fb:0d:a4:1c:24:63:01:66:aa:06:23:
                    80:1a:2b:cf:5c:d0:12:46:9f:bb:76:1b:24:4f:d8:
                    23:81:7f:14:b7:6f:28:8e:59:27:10:95:d3:25:90:
                    ba:57:24:60:a7:4e:aa:61:a4:6e:03:50:79:8e:35:
                    54:91:31:82:e3:7e:fe:b0:e2:88:1e:ee:94:23:3a:
                    3e:09:da:4b:bd:54:20:9d:85:ad:da:a3:94:a7:fb:
                    46:64:4e:53:25:e8:e9:f8:10:5e:82:55:80:c9:da:
                    59:bf:03:df:25:2b:0c:b8:55:ea:fa:aa:71:d5:55:
                    de:ab:42:93:a6:0b:7a:7d:3a:0b:48:85:cc:7b:a2:
                    cb:9d:fc:f0:4b:28:5a:d1:fc:e6:76:00:f2:18:e2:
                    ad:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:68:52:49:7C:EB:53:58:C3:E8:F2:5B:4A:F2:DC:2C:FF:76:F0:40
            X509v3 Authority Key Identifier:
                keyid:3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a5:7d:2f:bd:97:63:eb:23:2e:d9:ff:fe:43:97:f3:e9:d0:
         64:4c:6f:dc:ee:5f:5e:b7:00:22:f3:78:7c:93:c0:a4:c4:1c:
         0b:ed:2d:dc:ba:e9:63:cc:5c:7d:73:f0:09:73:ca:9f:93:48:
         0a:12:2b:39:e1:0c:2f:da:f6:92:9a:00:ec:ba:ae:b9:4d:3d:
         c6:20:31:58:f8:29:d4:01:54:0d:89:0a:f0:10:59:f3:60:01:
         a5:5d:8e:a3:c2:99:6f:db:2e:24:cc:63:a9:9c:48:c8:e2:25:
         20:ce:3b:6e:95:0e:90:81:df:23:27:98:4a:75:ef:40:0d:07:
         71:16:39:67:3b:1d:06:a7:88:73:c6:6b:f5:41:af:9a:9d:12:
         c7:58:34:e3:40:f0:6e:e2:99:52:f9:76:e6:ae:9b:6c:9d:04:
         f8:14:e2:30:7f:5d:53:2d:b3:c2:e6:c9:45:f5:f7:3c:dd:d0:
         1c:2e:a9:6a:bf:4f:da:51:10:4b:30:58:3d:4b:66:d4:c9:07:
         97:88:a6:08:ec:e9:e1:f2:ed:63:12:b5:01:4e:79:8b:e1:92:
         6b:ba:12:7f:1f:df:9b:58:dd:8b:62:fa:ed:70:8e:82:b8:24:
         88:2d:c2:84:79:8f:a6:0b:a6:05:86:67:7e:e1:f0:ae:51:14:
         90:70:a0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:26 2026 by rpki-client