Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft
File:                     NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft (raw, json)
Hash identifier:          kqsuEqbT+EUtFujI7EMPui9vJCJnGiAJbNZL15m4CWs=
Subject key identifier:   14:88:8B:D5:BE:B0:85:96:BB:46:9A:E3:1C:DA:B8:D1:4A:DA:98:87
Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0
Certificate issuer:       /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0
Certificate serial:       07D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft
Manifest number:          07C8
Signing time:             Fri 12 Jun 2026 21:26:39 +0000
Manifest this update:     Fri 12 Jun 2026 21:26:38 +0000
Manifest next update:     Fri 19 Jun 2026 21:26:38 +0000
Files and hashes:         1: NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl (hash: o+m2dVibtIsGhal6YsDP4VX7RGuH8x31lWHAcR+DOWw=)
                          2: 6AC2B9AA187B11ED92148716C4F9AE02.roa (hash: +UAgsVaXZoSQj/ZYR+yFyFDWt3cCf9QbUv1c+9sTgjM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl
                          rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2003 (0x7d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138478, serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0
        Validity
            Not Before: Jun 12 21:26:38 2026 GMT
            Not After : Jun 19 21:26:38 2026 GMT
        Subject: CN=6a2c798e-8ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:a6:88:52:47:34:3c:2f:dd:a9:b4:68:28:
                    60:98:ed:1d:7c:8f:d6:25:4c:57:6d:e0:6b:7f:e1:
                    15:ca:1f:92:d7:06:72:59:81:9c:25:71:fa:dd:d2:
                    20:50:02:4b:ac:13:6d:0d:02:a9:b2:86:44:85:0d:
                    04:50:9e:e9:4f:64:7b:ba:44:3f:d4:29:d6:5f:49:
                    8a:e4:40:3d:e1:23:66:1f:58:3a:56:df:c5:a3:46:
                    0c:4a:13:9d:31:2c:f0:4e:8b:e5:d2:ac:b1:25:c3:
                    06:16:ef:a3:77:2d:d0:04:2c:c3:64:50:a6:ad:e5:
                    4f:50:60:aa:9d:1a:e3:f8:2f:ff:7f:8f:98:5a:0c:
                    47:71:e0:c4:7e:2a:07:ad:31:3d:2e:28:2c:0a:62:
                    3d:03:0f:ce:8e:6f:22:d9:24:59:74:0f:ba:21:a2:
                    57:e2:b8:fa:8a:72:5e:2c:03:a0:ab:90:df:80:60:
                    bb:ca:36:34:0d:05:fe:03:4e:6b:04:75:0e:18:3e:
                    ea:d3:9b:04:81:3f:87:cd:22:26:d7:f0:8c:da:51:
                    a1:a3:51:a3:09:da:e8:11:7b:32:e8:cd:95:e5:a2:
                    47:9a:c2:b1:8e:64:df:ee:22:c5:0b:5a:8a:84:e5:
                    ae:39:d2:14:81:5d:49:ac:d6:f8:83:9a:08:f5:96:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:88:8B:D5:BE:B0:85:96:BB:46:9A:E3:1C:DA:B8:D1:4A:DA:98:87
            X509v3 Authority Key Identifier:
                keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0e:9b:1f:85:50:3e:f4:f0:0d:b5:77:48:97:e7:3f:21:b2:
         c1:16:be:e5:0b:5b:62:e4:2a:82:ff:5b:b7:2e:20:5a:f8:c7:
         8b:9a:e0:17:db:48:21:15:2c:b7:46:24:22:54:ca:54:01:45:
         15:9c:4f:93:27:7e:3f:e4:45:b3:c9:73:6f:e4:54:6c:06:cb:
         10:31:d3:fb:78:42:31:7c:a2:e6:de:9b:1a:b1:88:29:f8:45:
         ea:58:25:da:fc:77:06:a2:cc:2b:ac:a6:ad:fa:18:37:5c:58:
         24:4e:99:62:a4:59:89:0b:70:ce:b2:5a:ba:15:35:64:61:a1:
         b3:be:7e:02:37:da:1d:f1:28:62:15:46:3e:a3:c5:95:0b:75:
         4a:3b:26:83:cc:09:df:d8:4a:20:42:e9:f4:a1:a6:a4:59:da:
         ac:31:72:d3:a6:d5:b0:80:0f:70:a4:a8:30:01:97:e0:ea:92:
         e9:de:2b:2c:7c:d9:58:d5:9a:ec:84:f6:c1:32:d1:8f:17:bc:
         ab:ea:c2:30:4b:05:08:f4:08:9f:e7:f3:d2:1e:97:98:6a:92:
         4c:3f:67:5a:f0:6f:fc:a7:b8:0e:dc:2a:10:c6:c4:84:e2:97:
         38:e6:77:fa:94:d1:d4:42:d0:0c:36:e3:78:bf:bc:b2:ff:7b:
         3b:51:ae:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:03:19 2026 by rpki-client