Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
File:                     Omhmsd88LltfrK7gwJkrvHiMXQo.mft (raw, json)
Hash identifier:          /bnUGK73CCMdAlyU8/14jVDV1u5QsZe3dSdPEvGWTiQ=
Subject key identifier:   A5:86:EB:71:24:84:80:04:90:2B:E1:AD:B5:B5:2E:DA:96:64:D5:A4
Authority key identifier: 3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A
Certificate issuer:       /CN=A911A6D6/serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
Manifest number:          0276
Signing time:             Sat 03 Oct 2026 02:35:49 +0000
Manifest this update:     Sat 03 Oct 2026 02:35:48 +0000
Manifest next update:     Sat 10 Oct 2026 02:35:48 +0000
Files and hashes:         1: Omhmsd88LltfrK7gwJkrvHiMXQo.crl (hash: xaL7F9Pzqtly3fiEaalwYWTgZI1+/66C0nWByAU1zwc=)
                          2: D4D3B47EA27811EE9C29A256C4F9AE02.roa (hash: UrwTDpQ73wZniwDukqZp2ufbIM32Z/byrU5UOJJiolo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl
                          rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A6D6, serialNumber=3A6866B1DF3C2E5B5FACAEE0C0992BBC788C5D0A
        Validity
            Not Before: Oct  3 02:35:48 2026 GMT
            Not After : Oct 10 02:35:48 2026 GMT
        Subject: CN=6ac06a05-f9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:13:04:b8:a2:53:b4:f4:48:0b:ed:a3:3f:57:
                    5f:7b:c7:76:a9:d5:04:f9:f0:7f:3c:ce:56:fb:23:
                    0c:c1:2c:9f:69:f5:83:c8:36:68:4c:86:27:28:55:
                    a4:94:01:30:8e:5e:3d:f4:be:04:0d:54:e6:65:f8:
                    23:a6:25:d4:1c:68:6d:27:89:51:b8:bf:fc:8f:a8:
                    2d:2c:79:f3:fe:2d:73:13:5a:78:1c:f9:1c:d3:92:
                    d9:0a:2b:53:13:87:dd:2d:64:11:ac:1f:5a:8e:f6:
                    2d:05:f8:fc:a3:d0:a1:f4:e4:1b:b3:f1:0e:db:b5:
                    64:69:68:bb:da:63:aa:02:b4:69:b5:42:6b:a5:65:
                    79:30:56:c3:b9:73:4d:30:9b:87:19:94:a3:cb:7f:
                    a5:75:b9:09:36:2d:20:c4:4f:55:c5:e5:fc:86:70:
                    9d:ac:73:91:02:4e:e1:99:d3:1f:b2:8d:8e:75:2b:
                    c2:8e:22:d3:bd:64:4e:55:0d:08:e6:57:11:f2:b0:
                    5d:84:77:26:ff:e0:82:9e:6b:df:d1:f5:f7:32:b1:
                    b7:bc:c9:08:52:39:34:16:d0:69:ab:bf:66:ef:74:
                    7c:05:13:03:b8:07:8d:eb:7f:e9:e8:ae:f2:64:c6:
                    ac:a7:b5:0a:2a:2b:92:05:c1:00:08:e0:24:17:ca:
                    13:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:86:EB:71:24:84:80:04:90:2B:E1:AD:B5:B5:2E:DA:96:64:D5:A4
            X509v3 Authority Key Identifier:
                keyid:3A:68:66:B1:DF:3C:2E:5B:5F:AC:AE:E0:C0:99:2B:BC:78:8C:5D:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Omhmsd88LltfrK7gwJkrvHiMXQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A6D6/DE34C178FC8011EDA8382052C4F9AE02/Omhmsd88LltfrK7gwJkrvHiMXQo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f0:54:e3:02:d2:1c:87:6e:63:d8:57:e6:69:0f:ac:64:d3:
         f9:13:6d:87:f2:49:11:15:fa:74:d7:c9:1d:ec:4b:59:58:cc:
         a2:85:87:c1:66:7d:20:80:ab:4c:bd:cb:18:cc:55:19:99:19:
         37:32:b1:e5:c8:4b:2e:fc:af:bf:77:2c:18:f1:02:de:a4:96:
         41:30:53:6d:d1:8a:f3:98:99:dc:85:0d:28:d4:f1:86:91:94:
         86:c8:4d:29:b7:89:54:20:11:7e:9c:74:fb:d0:e9:5c:f8:13:
         be:3d:1f:1b:68:ea:f7:fa:f0:80:fb:e4:ad:fc:99:ed:5f:3e:
         00:ed:7a:55:fe:d3:01:1a:4a:62:97:1d:7e:c2:b6:b9:a1:1d:
         5e:2a:95:0d:e4:c3:f4:7d:de:e7:80:f9:28:c7:ab:90:a2:3c:
         c1:d4:9c:1d:0d:2a:09:8b:61:25:46:eb:be:f1:48:ca:e3:93:
         8e:ef:60:f3:aa:af:41:3c:2f:ca:d3:b8:e4:47:bb:f4:eb:8b:
         ec:27:ca:8b:22:89:3f:9f:87:d0:0b:cc:61:bd:76:c7:48:7d:
         80:31:fc:fe:5c:cc:21:e7:f0:9c:9f:10:9c:5a:35:55:dc:80:
         9a:cc:a5:f6:e6:31:e7:4d:e7:b8:5c:4b:8a:70:b2:89:1e:a6:
         ce:b3:0f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:59:44 2026 by rpki-client