Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
File:                     omYWegT6_uWuGlDgRXCtX9RO1pI.mft (raw, json)
Hash identifier:          OxkfWZY4qA+ThW7FMvjo+WtNguJbanuRviGL68h342I=
Subject key identifier:   05:75:3D:15:C5:5A:EF:EE:1A:07:AC:5C:0B:54:49:2A:00:FB:CF:67
Authority key identifier: A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92
Certificate issuer:       /CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
Manifest number:          0157
Signing time:             Sat 03 Oct 2026 05:52:08 +0000
Manifest this update:     Sat 03 Oct 2026 05:52:08 +0000
Manifest next update:     Sat 10 Oct 2026 05:52:08 +0000
Files and hashes:         1: omYWegT6_uWuGlDgRXCtX9RO1pI.crl (hash: kaEBSeywm1ynb4qRRcUpkioDENN4/3LcWC5t1XR9du8=)
                          2: B4A76FC8B5EC11EF9287020CC4F9AE02.roa (hash: +19MD4zmg5S2MgEx4GQH/Dwh2+OxNyFWgGwQrcUjjYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl
                          rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A0C0, serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692
        Validity
            Not Before: Oct  3 05:52:08 2026 GMT
            Not After : Oct 10 05:52:08 2026 GMT
        Subject: CN=6ac09808-626c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:56:78:07:0c:09:72:d0:7b:55:34:5a:2f:
                    e9:f7:0e:4c:25:c8:2d:9b:f6:92:d0:37:59:6a:a1:
                    a8:48:de:7d:60:70:b3:11:b9:03:f0:87:ee:29:1a:
                    f1:b4:4a:5f:4b:30:5c:f0:25:8a:ac:67:84:c4:65:
                    7d:9a:8c:8b:03:8e:84:af:c9:bb:cf:26:08:15:2f:
                    33:9c:e4:c6:80:1e:72:34:11:f2:05:c4:0b:55:82:
                    a8:19:70:29:b2:06:fc:d7:13:fe:25:c1:54:3b:41:
                    e6:63:b3:c3:f0:4d:56:10:7a:01:65:1e:f0:c9:2c:
                    a5:6f:72:ed:83:49:c1:06:89:14:16:7a:14:5d:53:
                    14:8e:e6:cf:cc:67:4b:e4:49:8c:8b:bf:cc:7e:f2:
                    d1:f7:c8:4a:d9:5c:71:37:92:e6:06:8c:46:04:0c:
                    e3:e7:48:f4:6e:52:db:16:63:08:55:e5:6d:8e:34:
                    20:9d:ca:e7:57:81:5d:1f:37:d0:4e:2f:f5:ed:9a:
                    0e:70:b1:63:c0:d5:00:5f:51:00:be:b4:36:1e:c0:
                    d6:45:ea:fb:41:fe:12:57:2c:45:79:d1:dc:75:27:
                    06:e4:2a:99:45:ec:6c:9f:50:b5:78:ec:64:0a:a8:
                    92:e2:fc:5c:ff:6e:bb:bb:70:0d:b8:06:49:a4:55:
                    0f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:75:3D:15:C5:5A:EF:EE:1A:07:AC:5C:0B:54:49:2A:00:FB:CF:67
            X509v3 Authority Key Identifier:
                keyid:A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d1:53:c6:52:d5:9b:73:10:be:a9:f7:ec:5a:89:1e:a5:79:
         26:8c:f6:ca:8e:a1:63:a9:36:4e:39:d6:ce:e0:a9:b7:fe:c0:
         8a:63:59:e7:9e:cc:e7:54:b6:a5:0a:2d:b1:6a:d9:0d:9a:60:
         51:0b:b2:3e:33:e0:99:5d:5c:67:e7:e6:1d:3c:a7:36:d6:d8:
         f4:95:0d:15:5d:56:f3:2b:75:f5:be:b3:20:a1:85:5d:11:1b:
         86:b7:1f:30:e0:e0:37:45:a6:8a:e9:ff:e5:78:36:4f:ad:c1:
         d6:41:64:14:5d:f2:6b:16:a8:9b:da:59:d6:18:52:4a:2a:cf:
         b4:51:58:61:29:3c:1a:2c:ca:3a:99:3a:fa:62:12:84:7c:7e:
         82:bd:68:8d:62:48:39:da:78:bd:7d:3d:53:43:e3:22:c2:30:
         89:9f:d2:f0:51:b1:fb:43:8f:ee:e0:48:b8:f4:dd:a0:f0:7a:
         f5:91:b1:47:5f:fb:5c:bf:a4:5b:4c:81:c6:73:39:7a:90:6f:
         a6:1e:33:6d:90:1d:08:58:05:ac:0f:98:f9:ab:09:a3:2c:ea:
         26:32:9e:50:a5:c4:13:23:33:52:0c:fd:cd:c7:58:11:ac:bd:
         75:92:07:2d:7d:3d:0d:31:7d:54:e3:11:0e:24:ed:47:cb:ed:
         0b:8d:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:08:41 2026 by rpki-client