Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
File:                     omYWegT6_uWuGlDgRXCtX9RO1pI.mft (raw, json)
Hash identifier:          JWp46zNKDmtPhnBcyHnkEcpsstHrJzN4qxuO44mvSts=
Subject key identifier:   10:EB:4A:6E:D8:7C:F4:AC:98:30:40:58:35:1C:5E:C1:D8:54:6E:1B
Authority key identifier: A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92
Certificate issuer:       /CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
Manifest number:          0122
Signing time:             Sun 21 Jun 2026 05:50:15 +0000
Manifest this update:     Sun 21 Jun 2026 05:50:14 +0000
Manifest next update:     Sun 28 Jun 2026 05:50:14 +0000
Files and hashes:         1: omYWegT6_uWuGlDgRXCtX9RO1pI.crl (hash: EZ9GwNxm8axDZ6ZsNG9quabqLRm1q3eDstYZ/X9yUN8=)
                          2: B4A76FC8B5EC11EF9287020CC4F9AE02.roa (hash: +19MD4zmg5S2MgEx4GQH/Dwh2+OxNyFWgGwQrcUjjYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl
                          rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Jun 2026 05:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A0C0, serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692
        Validity
            Not Before: Jun 21 05:50:14 2026 GMT
            Not After : Jun 28 05:50:14 2026 GMT
        Subject: CN=6a377b96-bd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ca:2e:dd:80:c7:d6:2a:8b:1a:a5:63:95:8b:
                    c6:aa:f8:93:93:d9:8a:f7:59:91:88:58:eb:69:68:
                    70:f2:df:88:d9:71:0b:f0:5b:41:97:3e:17:03:60:
                    78:eb:7d:27:8a:64:be:f8:e9:86:9a:c7:c7:8a:ed:
                    8f:5c:58:27:df:b1:6c:ee:b6:d2:66:d9:91:a4:d5:
                    5f:cc:ad:ae:47:04:01:8e:47:6d:40:d1:ab:9e:2f:
                    c6:21:e2:1f:c5:c2:b2:34:9b:2b:19:46:91:ab:8f:
                    9c:c7:c4:15:94:65:78:8e:e1:93:cb:17:c8:6e:a1:
                    e7:f4:8b:80:13:3e:3a:63:d7:a2:4e:52:fd:a5:c6:
                    1f:ff:8c:3d:a9:4e:80:7c:d3:40:9c:f7:df:3e:57:
                    dc:c2:03:5d:12:c5:3f:9f:5f:10:ab:e0:a6:92:61:
                    7c:41:32:5a:5b:5f:eb:50:22:da:de:6b:8c:44:1b:
                    59:fc:83:cc:ed:c6:c8:51:4f:20:cd:99:2f:81:a4:
                    39:d1:2a:6b:40:1e:c1:e7:6d:3b:b3:7b:c4:a7:4f:
                    79:48:6a:a8:88:f3:16:c9:46:da:e6:fa:e5:d0:cc:
                    da:e8:2a:fb:3d:96:fe:ae:51:07:64:a6:63:52:e2:
                    47:64:3a:2b:0a:73:ac:b9:dd:20:ee:4d:ec:df:73:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EB:4A:6E:D8:7C:F4:AC:98:30:40:58:35:1C:5E:C1:D8:54:6E:1B
            X509v3 Authority Key Identifier:
                keyid:A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:9e:ac:a4:90:f7:28:04:bf:19:de:85:9a:7e:c2:fe:09:78:
         c1:cc:49:d3:4c:59:94:d4:97:23:0e:3a:1b:f1:1e:6f:d8:0f:
         d6:0b:23:44:a0:50:9b:0b:78:68:16:2d:7c:fb:fb:01:f0:40:
         33:3a:1f:f9:82:9d:71:5c:9f:a2:bd:a1:c3:91:e5:d6:00:d5:
         d3:96:49:80:97:93:1c:b6:3a:16:ac:b1:fe:4a:cc:02:87:b3:
         be:4d:15:ee:d5:bd:4c:17:ba:06:d0:98:89:42:28:fc:d3:63:
         8b:de:cd:bf:9d:af:84:ca:45:a1:61:d4:5a:60:3a:39:af:25:
         9a:8e:63:01:a1:64:d2:b8:a0:be:f0:cd:0b:a5:d7:1e:f1:7f:
         1f:81:6d:45:94:c0:8a:3b:a2:bc:87:9e:19:da:48:70:ea:bd:
         e5:67:68:e9:a4:67:a2:7f:6c:68:c1:ca:95:e5:2b:a0:79:4c:
         c8:6f:00:c5:49:27:97:7a:b8:5a:8f:f2:43:11:97:fc:90:c3:
         a1:f3:c6:f5:1f:f6:38:48:66:ed:b2:9d:24:36:3c:12:a4:39:
         55:f0:2e:5f:3f:19:58:27:a8:a3:7a:52:27:b9:c6:06:b0:4e:
         ea:c7:2d:c4:fd:0e:a6:98:ba:eb:11:1f:0d:c2:ed:90:48:8c:
         6c:df:97:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0EwQzAxMTAvBgNVBAUTKEEyNjYxNjdBMDRGQUZFRTVBRTFBNTBFMDQ1NzBBRDVG
RDQ0RUQ2OTIwHhcNMjYwNjIxMDU1MDE0WhcNMjYwNjI4MDU1MDE0WjAYMRYwFAYD
VQQDEw02YTM3N2I5Ni1iZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm8ou3YDH1iqLGqVjlYvGqviTk9mK91mRiFjraWhw8t+I2XEL8FtBlz4XA2B4
630nimS++OmGmsfHiu2PXFgn37Fs7rbSZtmRpNVfzK2uRwQBjkdtQNGrni/GIeIf
xcKyNJsrGUaRq4+cx8QVlGV4juGTyxfIbqHn9IuAEz46Y9eiTlL9pcYf/4w9qU6A
fNNAnPffPlfcwgNdEsU/n18Qq+CmkmF8QTJaW1/rUCLa3muMRBtZ/IPM7cbIUU8g
zZkvgaQ50SprQB7B5207s3vEp095SGqoiPMWyUba5vrl0Mza6Cr7PZb+rlEHZKZj
UuJHZDorCnOsud0g7k3s33MgLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBDrSm7Y
fPSsmDBAWDUcXsHYVG4bMB8GA1UdIwQYMBaAFKJmFnoE+v7lrhpQ4EVwrV/UTtaS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTBDMC80QTJFREM4MEI1
RUMxMUVGQjAyRUMxMEFDNEY5QUUwMi9vbVlXZWdUNl91V3VHbERnUlhDdFg5Uk8x
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29tWVdlZ1Q2X3VXdUdsRGdSWEN0WDlSTzFwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTBDMC80QTJFREM4MEI1RUMxMUVGQjAyRUMxMEFDNEY5QUUwMi9vbVlXZWdUNl91
V3VHbERnUlhDdFg5Uk8xcEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN56spJD3KAS/Gd6Fmn7C/gl4wcxJ00xZlNSXIw46G/Eeb9gP1gsjRKBQmwt4
aBYtfPv7AfBAMzof+YKdcVyfor2hw5Hl1gDV05ZJgJeTHLY6Fqyx/krMAoezvk0V
7tW9TBe6BtCYiUIo/NNji97Nv52vhMpFoWHUWmA6Oa8lmo5jAaFk0rigvvDNC6XX
HvF/H4FtRZTAijuivIeeGdpIcOq95Wdo6aRnon9saMHKleUroHlMyG8AxUknl3q4
Wo/yQxGX/JDDofPG9R/2OEhm7bKdJDY8EqQ5VfAuXz8ZWCeoo3pSJ7nGBrBO6sct
xP0Oppi66xEfDcLtkEiMbN+Xig==
-----END CERTIFICATE-----
Generated at Mon Jun 22 08:29:47 2026 by rpki-client