Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
File:                     omYWegT6_uWuGlDgRXCtX9RO1pI.mft (raw, json)
Hash identifier:          c44Ns8JCSqlcjj4ECpb9ynN3KrxysAA9/UHY6WusSBY=
Subject key identifier:   4E:C1:9E:E8:21:F9:9C:6D:A8:47:1E:8F:49:94:B7:27:67:EC:D6:B4
Authority key identifier: A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92
Certificate issuer:       /CN=A917A0C0/serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692
Certificate serial:       013E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
Manifest number:          0139
Signing time:             Wed 05 Aug 2026 06:58:11 +0000
Manifest this update:     Wed 05 Aug 2026 06:58:10 +0000
Manifest next update:     Wed 12 Aug 2026 06:58:10 +0000
Files and hashes:         1: omYWegT6_uWuGlDgRXCtX9RO1pI.crl (hash: +rKZX7RCihnqbo6bEQAMlmQuIWhQ/Tr+ea+dFId/FUw=)
                          2: B4A76FC8B5EC11EF9287020CC4F9AE02.roa (hash: +19MD4zmg5S2MgEx4GQH/Dwh2+OxNyFWgGwQrcUjjYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl
                          rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Aug 2026 06:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A0C0, serialNumber=A266167A04FAFEE5AE1A50E04570AD5FD44ED692
        Validity
            Not Before: Aug  5 06:58:10 2026 GMT
            Not After : Aug 12 06:58:10 2026 GMT
        Subject: CN=6a72df03-a165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:4a:ab:26:fe:8c:a0:cc:1d:1e:b2:c9:9d:
                    be:9a:ee:56:10:01:70:ae:6d:e1:d5:68:e0:d6:df:
                    59:74:e3:10:64:9b:5d:51:1f:a2:ba:2e:50:d4:d6:
                    54:ed:53:5e:b9:50:36:7d:bc:a8:2f:20:8c:ef:46:
                    96:72:87:86:95:7f:f2:9e:11:a4:d4:dd:d8:14:0f:
                    a7:61:76:b4:ce:f8:13:3b:39:9f:76:5b:85:b4:66:
                    b0:fa:42:2e:e6:e0:a0:bd:4a:e2:05:4b:e2:94:3e:
                    c8:6f:ef:dd:01:98:0c:13:e7:1a:e7:b6:2b:68:a9:
                    e6:e1:e6:45:9f:85:0e:17:80:39:85:fc:3a:d3:da:
                    92:a0:a2:87:03:8f:9b:23:ab:99:72:d8:26:d6:ff:
                    c5:11:3b:90:f7:a1:7c:1c:e5:24:c0:94:05:fb:8e:
                    54:d7:ef:c7:96:57:4c:ad:14:67:c2:20:ca:bf:82:
                    be:14:81:a6:ea:7e:68:43:83:e8:88:d9:7b:0b:22:
                    4e:cb:c4:6e:aa:32:09:60:f5:48:a9:92:70:38:76:
                    1e:28:a4:47:50:92:96:10:92:fe:09:b1:c9:f5:51:
                    94:3b:a3:df:f1:a2:a2:fb:8c:6c:5c:56:44:98:7f:
                    1a:60:20:b8:2c:65:14:bd:24:70:6d:bd:36:d9:b5:
                    7d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C1:9E:E8:21:F9:9C:6D:A8:47:1E:8F:49:94:B7:27:67:EC:D6:B4
            X509v3 Authority Key Identifier:
                keyid:A2:66:16:7A:04:FA:FE:E5:AE:1A:50:E0:45:70:AD:5F:D4:4E:D6:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/omYWegT6_uWuGlDgRXCtX9RO1pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A0C0/4A2EDC80B5EC11EFB02EC10AC4F9AE02/omYWegT6_uWuGlDgRXCtX9RO1pI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:28:b7:77:b1:d9:05:61:89:7a:86:12:9f:17:c9:b3:4d:ef:
         0a:81:76:9e:16:ae:b6:ac:f7:de:64:bc:93:a4:df:83:0d:53:
         bc:72:12:1f:60:8e:45:51:35:b9:a3:6f:fc:28:4e:67:e2:d9:
         19:69:66:bc:98:e1:a2:01:43:aa:f2:6a:34:c8:26:36:a2:53:
         92:a7:38:7f:93:eb:d5:2f:56:e8:be:2a:ed:e8:64:e1:0d:e9:
         dc:da:b5:78:e3:9c:57:0a:d1:85:1c:c6:08:68:73:b1:d2:a0:
         13:4a:6e:e7:08:bb:7f:60:0a:ac:a4:b6:46:d6:8b:f0:c1:d8:
         09:ee:b6:6f:b0:5f:6b:53:2e:61:4c:11:14:d4:ac:e8:8d:76:
         bb:6f:ce:76:d5:6c:0c:b5:9a:2e:3e:d7:2e:c7:00:5f:96:d5:
         17:2b:d1:d9:6e:32:bf:99:3d:ce:82:30:23:63:87:af:d0:39:
         54:d8:16:70:f0:40:83:6b:e4:db:5a:92:50:5b:c2:57:44:2c:
         f2:df:60:2e:a6:c1:27:eb:40:ed:73:b1:e3:3c:bd:17:bc:d8:
         0b:c8:03:20:4d:43:50:6d:25:8d:fe:e4:d0:50:df:93:6d:6d:
         65:c2:6a:3d:e8:02:8b:e0:b1:96:db:9e:4a:49:f4:1a:54:f4:
         71:2e:f4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 17:31:52 2026 by rpki-client