Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft
File:                     Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft (raw, json)
Hash identifier:          TaNXlKTKoK6IbW+oNWxCywifp3DW5LCqqEfROqFrooQ=
Subject key identifier:   E4:32:BD:1C:E6:90:01:39:24:DF:9C:54:42:5E:ED:DF:35:9C:0D:9A
Authority key identifier: 3A:6E:E6:F0:15:94:1F:50:72:AE:71:39:1B:17:20:58:A0:19:01:42
Certificate issuer:       /CN=A91B6899/serialNumber=3A6EE6F015941F5072AE71391B172058A0190142
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft
Manifest number:          4E
Signing time:             Mon 05 Oct 2026 08:48:57 +0000
Manifest this update:     Mon 05 Oct 2026 08:48:56 +0000
Manifest next update:     Mon 12 Oct 2026 08:48:56 +0000
Files and hashes:         1: Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl (hash: PNUe09HmL8/CL2Foi+WTFfv/Drw24tf6wz3Gp7t2GDk=)
                          2: B70755C04C7311F1ACB58F89C4833773.roa (hash: pbUg3PFND8BW35Ac8y+pE07cA8Uh/q0+nLe6J6NGxvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl
                          rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6899, serialNumber=3A6EE6F015941F5072AE71391B172058A0190142
        Validity
            Not Before: Oct  5 08:48:56 2026 GMT
            Not After : Oct 12 08:48:56 2026 GMT
        Subject: CN=6ac36479-3ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:f2:98:8f:24:a5:b2:ab:fa:9a:00:44:13:
                    2e:8a:93:e7:6f:53:53:99:29:b7:7b:c1:88:ea:7e:
                    67:3d:52:c7:20:c8:e7:87:55:57:b2:5d:d7:80:c2:
                    13:19:f8:ce:86:1b:09:b2:9b:85:f5:ab:a4:39:1d:
                    9c:d9:98:d7:0f:8b:54:cb:65:d3:1e:71:d0:fd:43:
                    7c:4b:6e:7a:bf:5c:85:59:f6:66:71:7a:60:4b:a8:
                    e2:b3:42:a6:b6:15:b5:48:21:b7:19:c7:87:4c:06:
                    8f:38:b2:5a:ae:c0:f2:22:95:97:d8:11:4b:35:f0:
                    fe:3b:df:0d:7c:71:7f:69:4b:76:d3:1b:b9:e1:8c:
                    9f:c3:c2:85:a1:ad:88:02:de:64:eb:ab:e4:ae:54:
                    73:f8:eb:cf:b5:3e:98:86:41:21:42:15:4b:dd:2a:
                    87:14:96:c8:61:bc:9b:be:5b:57:5a:24:44:83:8d:
                    a9:c5:93:58:60:05:49:d9:38:02:66:57:f5:00:10:
                    17:55:ba:16:93:e5:49:32:8e:60:00:14:cc:df:b6:
                    58:ea:01:4d:f6:5b:7b:c7:e4:27:dc:d8:ac:e1:a3:
                    0a:dc:21:c5:11:d9:da:8e:5d:87:41:31:74:43:ad:
                    4c:39:9c:4c:56:8c:c4:f3:73:d8:02:f8:62:bc:02:
                    31:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:32:BD:1C:E6:90:01:39:24:DF:9C:54:42:5E:ED:DF:35:9C:0D:9A
            X509v3 Authority Key Identifier:
                keyid:3A:6E:E6:F0:15:94:1F:50:72:AE:71:39:1B:17:20:58:A0:19:01:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om7m8BWUH1ByrnE5GxcgWKAZAUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6899/60A20FFE4C7311F19ABDE005C4833773/Om7m8BWUH1ByrnE5GxcgWKAZAUI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:47:be:9f:91:82:16:96:40:74:54:18:e9:55:62:1f:f4:ed:
         a9:90:e3:5b:1b:68:b5:f2:14:de:56:d6:54:2b:f9:40:80:d1:
         f3:40:33:c3:3a:be:e4:ae:95:44:59:b1:9c:7b:2f:3c:08:95:
         c4:fd:5a:93:0a:44:38:14:df:ed:d7:55:5f:c6:4c:40:98:11:
         6b:47:b9:2d:0a:2a:28:ad:cf:04:5d:72:5d:f1:0e:97:11:20:
         5e:8c:d0:49:32:62:c1:fa:fa:62:4b:9c:d8:72:29:13:72:23:
         48:11:d7:86:7b:1b:ee:0a:ef:0e:3c:7e:84:4b:58:10:f8:57:
         c6:b3:14:d5:80:e4:d8:60:cb:30:0a:98:68:6e:5d:cd:0f:22:
         61:b3:b5:2c:a5:f1:23:41:15:31:db:fd:69:54:a7:63:1e:aa:
         e3:9f:c9:9f:44:ae:a2:9b:ed:e2:00:34:a9:8f:00:a9:43:12:
         e2:6f:5f:63:76:8c:5d:f2:a0:16:a8:42:ae:04:34:51:27:65:
         eb:03:94:0d:92:48:2d:fc:41:58:db:75:9b:ad:fd:c3:58:39:
         0e:1f:4c:c2:c2:b2:20:99:60:3e:36:1c:cf:2c:8e:83:e4:53:
         1b:e8:fb:77:f6:ee:0d:31:8f:46:65:2a:9b:e9:db:53:91:34:
         fd:6a:0b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:12:01 2026 by rpki-client