Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
File:                     0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json)
Hash identifier:          D967dvaSNIvZq7xoqfWjIOX2w75mIiFcbZOhgcNoWW8=
Subject key identifier:   AC:7B:DC:5C:EC:B1:26:13:57:C4:43:C5:E8:43:A5:45:57:3D:98:C5
Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94
Certificate issuer:       /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
Manifest number:          F6
Signing time:             Thu 16 Apr 2026 22:53:39 +0000
Manifest this update:     Thu 16 Apr 2026 22:53:39 +0000
Manifest next update:     Thu 23 Apr 2026 22:53:39 +0000
Files and hashes:         1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: 8mNjWPp5t/Llc3ScJlfWNaldBaieLtKqdXRfE/9xh0E=)
                          2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: I4oc7m/xRaD9qjT6EvNaPSVC974na0zNUvD6aBlYtfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl
                          rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694
        Validity
            Not Before: Apr 16 22:53:39 2026 GMT
            Not After : Apr 23 22:53:39 2026 GMT
        Subject: CN=69e16873-de16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5a:bc:45:83:7f:78:60:34:53:15:75:eb:b5:
                    06:b3:76:72:8a:cb:04:2a:7d:cb:f0:b5:03:d8:b9:
                    2a:ef:28:a9:e3:33:ab:f5:1f:6d:0c:65:86:5f:99:
                    d1:35:dc:43:4c:16:33:e3:da:8a:14:8d:ca:7e:1b:
                    8f:8c:d1:a9:8c:5a:f3:fa:20:51:94:c3:fb:12:8d:
                    65:b2:b1:fd:62:21:4b:fb:ca:a2:bc:3f:4a:4d:c3:
                    e3:da:26:c1:a2:75:ae:3b:66:1f:cd:3b:62:6b:b4:
                    6a:e4:b9:97:36:6a:61:aa:fa:63:c5:f7:54:5a:25:
                    54:7e:87:ff:bb:eb:69:5d:bc:fb:a1:4b:4d:c1:88:
                    87:5d:f1:6b:a2:e6:68:38:31:d6:93:a6:0b:9a:77:
                    4e:fc:81:aa:0b:a9:75:ed:84:1d:ba:b8:3b:0e:43:
                    ce:42:c6:64:d0:5d:7e:f1:40:11:b6:28:d8:07:75:
                    3c:bf:8e:3f:5c:d2:7e:d8:8c:d2:1c:ee:e8:07:2a:
                    3a:a9:57:e9:f8:93:7a:8e:9f:5e:3f:05:6b:96:1f:
                    5a:6c:74:ec:63:09:62:9c:99:06:a5:18:e5:c9:b3:
                    d3:f8:dc:83:ae:c8:53:dd:b4:70:4f:46:f6:83:5c:
                    72:ce:dc:b3:3e:57:71:84:46:77:a4:d0:e9:05:a4:
                    91:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7B:DC:5C:EC:B1:26:13:57:C4:43:C5:E8:43:A5:45:57:3D:98:C5
            X509v3 Authority Key Identifier:
                keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:27:f7:4d:62:06:bc:73:17:55:55:22:9c:e5:e3:1c:f4:c0:
         24:51:44:6d:ed:5c:5e:0d:2d:02:e8:07:7b:5e:69:9f:2a:e6:
         40:eb:4f:6e:ab:39:bb:04:cb:f4:c7:9d:cd:0d:fb:4d:80:10:
         41:38:4a:19:e6:ba:ec:16:ce:1b:22:10:c4:f2:68:55:e9:2b:
         e5:94:ff:a4:8f:d3:cf:ea:8c:84:1d:d5:65:ce:ea:d0:e1:2e:
         f5:f0:6d:cb:90:f7:e5:25:ae:b9:10:73:59:a5:cf:3d:c4:ae:
         2c:6a:67:e3:3b:bf:44:7f:46:d5:66:3d:92:3a:be:ac:b2:97:
         98:83:a8:df:eb:3a:68:a2:00:c3:5a:cd:89:3e:23:d1:56:7e:
         79:08:a2:77:39:04:33:3e:0d:74:7f:68:4d:27:43:a0:78:3b:
         2a:93:dc:9a:57:9f:3a:9f:0f:91:d8:01:c5:4a:aa:db:03:a4:
         76:b3:31:63:c0:2b:67:af:6b:d1:c7:74:00:3c:f3:4a:02:ed:
         1e:19:82:86:96:18:bc:29:bf:75:d9:e9:03:ca:f5:58:57:c8:
         e4:c8:1e:be:80:4f:13:6e:8a:ea:e7:44:80:02:ea:14:a9:d3:
         16:a1:36:67:ed:ee:d9:30:20:d9:33:5f:89:eb:ee:3e:f0:6a:
         2b:b8:87:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFDODMxMTAvBgNVBAUTKEQyODk4QkFEOTI2NzkxQ0UwOTMzQzA5Mjc5REY5Nzk4
RDdERUI2OTQwHhcNMjYwNDE2MjI1MzM5WhcNMjYwNDIzMjI1MzM5WjAYMRYwFAYD
VQQDEw02OWUxNjg3My1kZTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzlq8RYN/eGA0UxV167UGs3ZyissEKn3L8LUD2Lkq7yip4zOr9R9tDGWGX5nR
NdxDTBYz49qKFI3KfhuPjNGpjFrz+iBRlMP7Eo1lsrH9YiFL+8qivD9KTcPj2ibB
onWuO2YfzTtia7Rq5LmXNmphqvpjxfdUWiVUfof/u+tpXbz7oUtNwYiHXfFrouZo
ODHWk6YLmndO/IGqC6l17YQdurg7DkPOQsZk0F1+8UARtijYB3U8v44/XNJ+2IzS
HO7oByo6qVfp+JN6jp9ePwVrlh9abHTsYwlinJkGpRjlybPT+NyDrshT3bRwT0b2
g1xyztyzPldxhEZ3pNDpBaSRfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKx73Fzs
sSYTV8RDxehDpUVXPZjFMB8GA1UdIwQYMBaAFNKJi62SZ5HOCTPAknnfl5jX3raU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My8yMEE2MTM3RUND
OTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtjNEpNOENTZWQtWG1OZmV0
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUM4My8yMEE2MTM3RUNDOTkxMUVGODc0MzdFMDlDNEY5QUUwMi8wb21MclpKbmtj
NEpNOENTZWQtWG1OZmV0cFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqCf3TWIGvHMXVVUinOXjHPTAJFFEbe1cXg0tAugHe15pnyrmQOtPbqs5uwTL
9MedzQ37TYAQQThKGea67BbOGyIQxPJoVekr5ZT/pI/Tz+qMhB3VZc7q0OEu9fBt
y5D35SWuuRBzWaXPPcSuLGpn4zu/RH9G1WY9kjq+rLKXmIOo3+s6aKIAw1rNiT4j
0VZ+eQiidzkEMz4NdH9oTSdDoHg7KpPcmlefOp8PkdgBxUqq2wOkdrMxY8ArZ69r
0cd0ADzzSgLtHhmChpYYvCm/ddnpA8r1WFfI5MgevoBPE26K6udEgALqFKnTFqE2
Z+3u2TAg2TNfievuPvBqK7iHMg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:59 2026 by rpki-client