Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
File:                     Os9EXPzs-7KROzR9Z6go4EChWh0.mft (raw, json)
Hash identifier:          +CxBFRFdoSPR4GFmDJ2rjSw3kPx1vTuQs2WlW1jm0Ks=
Subject key identifier:   FB:A1:08:E5:C3:D6:E5:21:9B:04:8E:30:04:EE:D4:28:1C:C0:26:2F
Authority key identifier: 3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D
Certificate issuer:       /CN=A9117CD5/serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
Manifest number:          AC
Signing time:             Sat 13 Jun 2026 07:14:26 +0000
Manifest this update:     Sat 13 Jun 2026 07:14:26 +0000
Manifest next update:     Sat 20 Jun 2026 07:14:26 +0000
Files and hashes:         1: Os9EXPzs-7KROzR9Z6go4EChWh0.crl (hash: MDdk/m8XFEMXiVBHcFxOogbwEnqnhbdAcAquhuc2kQc=)
                          2: 0B51CEDE5FA911F0BE187C31C4F9AE02.roa (hash: rWKDZcXDRvxkeevoTmv1zvdbGFQP1gVAwd/TCsKJ1Qk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl
                          rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117CD5, serialNumber=3ACF445CFCECFBB2913B347D67A828E040A15A1D
        Validity
            Not Before: Jun 13 07:14:26 2026 GMT
            Not After : Jun 20 07:14:26 2026 GMT
        Subject: CN=6a2d0352-d4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:de:60:04:32:dd:93:d1:d4:05:02:8f:0a:21:
                    21:89:b6:43:50:b4:60:fa:eb:eb:c8:7c:04:06:36:
                    c0:5d:bf:23:67:73:da:e7:de:74:45:af:60:86:1a:
                    b9:e0:80:22:86:34:ad:26:5b:30:fa:8e:a7:5b:20:
                    9b:f7:05:fa:d4:8b:1b:50:a1:c5:2b:85:92:7a:73:
                    29:81:88:09:9d:f7:12:b0:3c:6c:65:e5:a6:0b:4d:
                    72:ce:fb:57:b8:bb:27:61:0b:e0:b4:bb:ef:23:e0:
                    ab:72:ec:ae:19:87:6d:8e:25:db:f4:5f:5e:43:12:
                    29:f3:86:87:d1:fb:f2:9b:32:d0:44:8b:0f:5b:af:
                    17:62:c4:22:4f:ff:bb:c6:1d:75:ff:6d:60:a0:f6:
                    d4:2b:09:4c:88:ff:1c:02:30:2f:4b:6b:f1:5d:5d:
                    53:d4:7a:f6:af:0d:33:40:ac:b6:e6:a3:6f:8c:80:
                    56:e4:07:87:70:b9:72:a2:e9:cd:5a:57:89:7a:80:
                    8d:e4:73:99:eb:10:f4:14:b1:51:7c:e4:97:b1:d5:
                    8e:f4:1b:41:47:e2:db:46:44:9f:d1:72:3a:b3:66:
                    01:31:94:7e:7e:ba:a1:c5:d9:6a:55:f6:9f:cf:b9:
                    fb:0f:04:0e:03:28:c8:a1:da:85:43:a0:b3:35:09:
                    c1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A1:08:E5:C3:D6:E5:21:9B:04:8E:30:04:EE:D4:28:1C:C0:26:2F
            X509v3 Authority Key Identifier:
                keyid:3A:CF:44:5C:FC:EC:FB:B2:91:3B:34:7D:67:A8:28:E0:40:A1:5A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Os9EXPzs-7KROzR9Z6go4EChWh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/5DB74B0A5FA811F0B5978C2CC4F9AE02/Os9EXPzs-7KROzR9Z6go4EChWh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:da:4d:d7:2a:fe:75:b6:1b:c7:6e:b3:8b:54:1d:f0:66:79:
         2b:c0:f8:48:85:b5:78:1e:6c:e8:33:fe:0c:52:d0:d2:e6:2c:
         3d:b7:4f:54:53:2e:b0:1f:10:2d:10:9c:07:23:98:c4:2c:23:
         50:93:f3:96:d7:2c:21:cb:4b:73:55:7d:f7:d3:2f:a9:c3:d6:
         8d:9c:cc:d5:99:d7:f1:09:77:c6:f8:1f:8c:73:49:4f:8a:f9:
         1e:dc:4c:c3:58:a9:f5:4f:ad:b7:fa:1f:a4:df:cc:19:9b:a2:
         8b:19:da:fb:bf:ff:ee:49:83:b7:0b:a5:10:91:b8:be:f7:25:
         ab:fb:07:66:c6:f5:e4:54:5c:90:63:0a:85:9e:dd:6b:d1:e4:
         5c:5d:1e:34:13:46:f1:89:24:d7:eb:cf:da:4c:03:39:13:ea:
         e7:40:b3:fd:38:27:61:01:3b:a5:65:e2:5e:f1:22:4b:0b:53:
         1d:37:9b:16:47:f7:d7:64:0c:54:c0:a4:c4:01:83:8b:02:fc:
         eb:16:36:e1:54:02:38:15:e6:ca:16:1e:ae:8a:25:50:b6:e3:
         08:59:ee:09:55:13:d4:02:e4:b7:80:44:a0:46:00:0a:fc:83:
         4f:77:14:48:5a:e9:6d:3d:ee:58:e8:17:16:00:e6:8f:29:22:
         6b:9b:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:15:40 2026 by rpki-client