Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft
File:                     O-7kvaWgSxBLHXLmAcMJONuktkQ.mft (raw, json)
Hash identifier:          bZb4zCeJv2geiUKfstbHStPv5ZdCp+BFKSc+G/kfSAM=
Subject key identifier:   BE:86:4F:8D:8A:64:DD:49:25:7F:D7:EB:7F:DC:D3:20:CC:75:F5:D2
Authority key identifier: 3B:EE:E4:BD:A5:A0:4B:10:4B:1D:72:E6:01:C3:09:38:DB:A4:B6:44
Certificate issuer:       /CN=A911D2A3/serialNumber=3BEEE4BDA5A04B104B1D72E601C30938DBA4B644
Certificate serial:       15D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft
Manifest number:          15C7
Signing time:             Fri 12 Jun 2026 16:42:21 +0000
Manifest this update:     Fri 12 Jun 2026 16:42:21 +0000
Manifest next update:     Fri 19 Jun 2026 16:42:21 +0000
Files and hashes:         1: O-7kvaWgSxBLHXLmAcMJONuktkQ.crl (hash: Cts6IquryxsrndICfyE9tE3JvsB5XerX08t+EGcZ5+4=)
                          2: D9EDB272C44C11ECA07C2D77C4F9AE02.roa (hash: DJ4I97O5v0aU8HleXouiaPdcBM6EY3fv5eqakvOyiz0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.crl
                          rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:42:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5589 (0x15d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D2A3, serialNumber=3BEEE4BDA5A04B104B1D72E601C30938DBA4B644
        Validity
            Not Before: Jun 12 16:42:21 2026 GMT
            Not After : Jun 19 16:42:21 2026 GMT
        Subject: CN=6a2c36ed-f95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:5b:4a:a5:8f:14:ca:22:e6:13:54:02:9c:
                    4a:27:93:fd:10:72:a3:15:aa:c9:e2:4c:18:b2:73:
                    70:bf:51:72:45:bb:4e:b5:5c:34:ea:ce:42:20:0b:
                    0f:67:1e:dc:1b:c7:c9:06:a6:5b:2b:a6:1c:e3:2c:
                    2a:4b:e6:0c:cc:4b:3e:a8:4c:3a:0a:65:9c:cf:0c:
                    70:aa:8e:ee:60:00:b7:22:5f:c8:bb:cf:08:44:a5:
                    98:c2:ee:50:12:ca:5c:b6:95:4f:86:ff:00:7d:36:
                    c5:b0:66:30:52:b8:d5:89:a7:d3:fa:6e:38:e6:0a:
                    94:50:6e:a5:79:31:3b:b9:b6:b9:7f:95:da:8f:ec:
                    9f:fc:db:f8:9e:09:60:96:33:3e:5d:74:70:29:5c:
                    f5:43:62:61:95:1d:10:6f:f0:ff:29:37:32:e8:b2:
                    17:3b:cf:69:bd:3a:8d:ee:57:94:b0:47:a5:0c:de:
                    be:26:38:d2:3c:a7:41:12:ed:40:50:2f:b7:a2:05:
                    13:11:6d:bb:15:33:bc:09:56:9e:c8:38:88:e8:8d:
                    ee:7f:9c:ba:bc:70:18:18:2d:b7:7d:21:6d:8f:fc:
                    2b:f0:e0:8f:ee:62:5c:fb:1f:a1:60:72:66:d6:fc:
                    96:ca:74:45:50:ca:8e:6c:df:ec:c3:4a:76:4f:04:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:86:4F:8D:8A:64:DD:49:25:7F:D7:EB:7F:DC:D3:20:CC:75:F5:D2
            X509v3 Authority Key Identifier:
                keyid:3B:EE:E4:BD:A5:A0:4B:10:4B:1D:72:E6:01:C3:09:38:DB:A4:B6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O-7kvaWgSxBLHXLmAcMJONuktkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D2A3/F6AC63864EFD11E8892B8683C4F9AE02/O-7kvaWgSxBLHXLmAcMJONuktkQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1d:80:28:2b:f1:db:ba:9d:12:a3:de:16:fc:4a:e9:a3:d7:
         f1:59:bd:8c:41:f1:76:f0:ef:a7:b9:15:d9:b9:ec:0d:7c:32:
         54:fc:1a:74:bc:99:e2:aa:af:b5:54:31:f8:4b:c2:f4:bf:90:
         2b:a4:ec:75:21:8c:ad:2a:62:a6:d5:4a:ae:02:62:84:c2:2d:
         76:05:52:ea:8b:11:f2:73:0d:ef:3b:a4:0c:69:77:07:32:6e:
         fa:36:87:c1:3f:81:51:cc:e2:0f:39:0f:79:13:8f:70:93:d3:
         cf:0e:7f:a0:0c:54:07:a7:f5:a3:80:54:42:8f:8d:23:8d:76:
         b2:81:df:9d:35:41:fe:31:81:c6:30:4d:2d:df:76:8c:7a:66:
         e4:ae:83:a7:3a:b0:de:e0:80:fc:d9:4e:d1:d8:17:5e:95:c0:
         ff:2c:0d:1e:fe:d9:c6:53:76:6c:93:cc:b6:28:cc:bf:ab:ac:
         8b:f3:6e:9d:c7:c3:b7:41:ff:fc:59:d9:6e:8b:82:e1:d2:da:
         3b:09:cf:d2:bf:7d:d7:2b:d4:28:c1:95:3f:d5:a7:d5:f8:0c:
         d8:fe:7e:ac:63:02:73:62:ef:28:d6:a9:95:44:45:8a:26:98:
         aa:93:1c:4e:6f:3a:7c:e1:47:80:c7:24:49:8d:41:b5:3b:f6:
         6d:08:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:24:26 2026 by rpki-client