Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
File:                     lOm8GmUoujSTw55syskzb1S5A5Y.mft (raw, json)
Hash identifier:          OFPtYRGMa0qbUu1xKjbgcqAoS1QpqPrLRkHcS0RlGcU=
Subject key identifier:   03:DE:D5:58:1C:53:2C:54:BF:BB:F7:C0:2F:45:23:A8:DA:41:77:39
Authority key identifier: 94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96
Certificate issuer:       /CN=A91EF420/serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396
Certificate serial:       083B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
Manifest number:          083B
Signing time:             Sun 04 Oct 2026 21:07:12 +0000
Manifest this update:     Sun 04 Oct 2026 21:07:12 +0000
Manifest next update:     Sun 11 Oct 2026 21:07:12 +0000
Files and hashes:         1: lOm8GmUoujSTw55syskzb1S5A5Y.crl (hash: 5a34q26JSYPCKfB+kAWfnueo/+QvCQgimPXTXYWbd5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107 (0x83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF420, serialNumber=94E9BC1A6528BA3493C39E6CCAC9336F54B90396
        Validity
            Not Before: Oct  4 21:07:12 2026 GMT
            Not After : Oct 11 21:07:12 2026 GMT
        Subject: CN=6ac2c000-77e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:b5:00:75:a1:12:a5:eb:6e:b8:9b:a2:0c:
                    18:d2:31:c7:45:bc:f6:a3:4c:02:97:8f:0c:92:ac:
                    56:73:3a:d8:e3:29:e2:35:66:a6:2b:e3:4b:a2:21:
                    9a:74:e9:21:a8:51:f5:4e:ba:c4:e1:6c:a4:c7:fc:
                    21:6a:2b:f1:2e:ae:67:4d:f9:c9:4d:48:2c:84:19:
                    8e:ec:6d:af:d6:0c:ad:1f:9d:d7:80:68:a6:b5:c3:
                    80:ae:34:81:79:c4:f8:d5:c1:39:85:52:9d:20:c3:
                    26:3d:63:40:b9:b9:7a:da:2c:23:d5:6e:2e:70:20:
                    9d:5d:47:5c:1a:56:71:f0:c2:ac:71:4c:1a:04:80:
                    b6:db:3f:6d:07:06:33:7e:22:23:f8:1f:47:9f:2d:
                    04:3b:af:94:41:f9:8a:29:09:56:42:06:09:2e:e9:
                    0a:ff:c8:f9:0f:7f:1d:40:64:73:dd:e4:a4:cc:ed:
                    f2:2b:45:65:42:f2:44:68:f3:66:38:a4:35:2d:63:
                    bf:6e:fa:a7:67:4e:30:ce:94:06:ae:10:35:18:07:
                    27:31:cc:e0:30:82:90:f3:01:61:78:d7:c1:85:88:
                    7e:cb:c2:3c:b5:10:f4:8a:6f:a2:a0:23:65:46:50:
                    f0:64:8a:c8:2b:95:29:4c:2b:90:69:8a:91:dc:70:
                    c5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DE:D5:58:1C:53:2C:54:BF:BB:F7:C0:2F:45:23:A8:DA:41:77:39
            X509v3 Authority Key Identifier:
                keyid:94:E9:BC:1A:65:28:BA:34:93:C3:9E:6C:CA:C9:33:6F:54:B9:03:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lOm8GmUoujSTw55syskzb1S5A5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF420/F14DEE342A4511EBB39DEA5BC4F9AE02/lOm8GmUoujSTw55syskzb1S5A5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:66:c4:4b:28:74:b1:55:bb:7c:dd:5e:5a:97:0b:d3:9c:64:
         3b:f3:91:b0:d5:3d:7b:c6:8b:1d:6c:6c:29:fd:96:2c:d2:30:
         c7:84:a4:34:63:63:2c:fd:b0:c8:84:62:be:cb:6b:a3:3a:0f:
         11:8a:f2:ce:17:b4:3f:ab:7f:ca:6e:bb:ec:a9:6b:c2:f0:c6:
         3f:41:1c:76:48:1e:b5:e8:45:76:7c:d3:f6:14:d4:74:31:ee:
         bc:5c:87:e6:a7:55:65:75:51:61:4e:b9:71:32:da:8b:6c:1a:
         6b:d1:d9:bb:84:1a:ed:ac:dd:30:85:2e:53:1e:f2:f1:c6:44:
         41:c9:d1:ed:6d:50:81:5c:50:78:54:61:a9:da:b2:d3:4d:37:
         f4:7f:c8:a7:c6:bd:50:2c:50:8b:86:91:c8:2b:52:8e:e4:a9:
         9a:71:cc:70:1a:95:c4:2c:91:2f:63:08:ff:89:12:e5:21:72:
         64:7a:29:a7:22:8b:1a:26:5d:3a:c2:cc:60:db:7d:4a:13:2e:
         24:df:19:4a:68:5c:7a:97:cf:ac:72:8f:1d:63:5d:5d:69:da:
         cc:54:ac:fb:3d:2a:5c:a2:51:d8:b6:e8:b8:68:c9:f6:0f:aa:
         8c:01:e7:d0:b8:b8:32:80:ec:20:b8:34:f1:c0:0e:bd:c7:37:
         c3:d2:be:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:08:41 2026 by rpki-client