Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
File:                     7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json)
Hash identifier:          iWRujuArhhYIZcMgU05un/DUoD/YSjGo912m20No5pA=
Subject key identifier:   5A:EB:9F:86:F6:DE:F1:AE:79:D7:4D:96:D2:A7:0E:B9:2E:C2:F7:39
Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41
Certificate issuer:       /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441
Certificate serial:       0ECA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
Manifest number:          0EBF
Signing time:             Fri 12 Jun 2026 17:40:35 +0000
Manifest this update:     Fri 12 Jun 2026 17:40:34 +0000
Manifest next update:     Fri 19 Jun 2026 17:40:34 +0000
Files and hashes:         1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: iKEY3R5F1XPTZ9sRi9oY5bSzrL16klXlj2Bhlbdo7Mk=)
                          2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: 0rmIo24F/xivDkmp1ouEx05UaGse9AnbJguTIYYgkf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl
                          rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3786 (0xeca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441
        Validity
            Not Before: Jun 12 17:40:34 2026 GMT
            Not After : Jun 19 17:40:34 2026 GMT
        Subject: CN=6a2c4493-bc5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:b9:0c:27:a1:68:cb:19:7e:30:f8:54:50:
                    70:4b:19:40:f6:60:48:91:a1:57:63:74:8e:23:95:
                    74:12:56:21:8a:c0:6c:7f:10:c1:43:3c:3d:48:9d:
                    88:c9:81:9f:9c:f9:13:24:74:f8:e8:9b:5b:8c:bd:
                    a1:69:a2:0c:4e:ec:fb:80:a0:19:38:24:58:29:19:
                    1c:57:86:e7:31:a0:e1:22:b3:75:0f:47:2f:90:2e:
                    12:2f:8d:f3:72:46:ed:17:23:47:f4:4f:d4:67:7b:
                    04:c6:44:bf:8c:9a:2d:b0:dd:f8:d0:1c:09:ca:49:
                    24:52:1a:ce:95:f6:3b:25:c2:9a:e5:4f:9d:fa:b6:
                    e0:ae:41:76:01:60:72:a3:fe:07:51:73:b8:06:7b:
                    79:b5:fb:bf:17:ba:a4:aa:d4:4b:ea:00:70:1f:7c:
                    0a:0a:a9:bd:14:e3:62:15:5e:27:f8:ca:0d:ef:e5:
                    57:10:a3:a4:d2:7c:80:1e:b6:37:30:2e:8a:46:b6:
                    7a:e9:ba:15:07:63:55:0c:f0:1c:41:c5:34:06:32:
                    df:38:cb:68:9f:e3:56:ea:7a:89:3e:e9:e6:60:5f:
                    73:93:97:a3:91:2f:03:d9:5b:87:64:c0:b1:ba:98:
                    d3:09:c4:dd:d6:c3:8a:d1:f3:20:c8:bc:42:f3:2c:
                    04:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EB:9F:86:F6:DE:F1:AE:79:D7:4D:96:D2:A7:0E:B9:2E:C2:F7:39
            X509v3 Authority Key Identifier:
                keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:be:60:cd:8f:b4:1f:cb:fc:de:a5:52:70:61:25:a7:dd:90:
         69:c3:6b:f7:04:ae:b4:09:3e:f0:07:fe:2e:37:23:04:ae:b2:
         93:46:a6:1a:c9:d6:7f:06:1b:fd:81:9c:6d:c4:09:3f:3e:cd:
         a2:d7:4c:30:e5:61:27:1a:b6:c6:e9:e9:ad:a9:f5:cc:27:f8:
         d7:01:f8:b8:f2:98:42:d6:be:50:c0:13:62:1f:ca:37:83:b3:
         0c:aa:37:92:2a:14:6a:b9:2e:1c:cb:46:a9:fd:b7:39:a3:64:
         d2:fc:ee:f9:09:ec:e3:a6:83:12:7d:3b:73:89:f1:5c:1e:97:
         48:17:fc:68:37:91:15:70:be:58:e7:a1:33:e0:7d:7f:40:72:
         b6:f1:02:69:30:10:9b:87:7d:46:92:8a:e1:eb:fe:5e:7a:bc:
         60:0c:ad:9a:32:09:21:d9:8d:db:b0:df:96:fc:d6:4b:6a:03:
         68:24:bf:dc:b0:6b:50:09:e3:bb:b1:58:cd:24:57:ad:db:2c:
         53:a1:91:47:bc:34:e4:e3:bc:f1:c7:a1:8c:79:71:41:73:ec:
         3c:c3:d1:f3:15:e5:4c:9c:ec:d7:60:1a:d5:18:ae:b0:3f:48:
         03:ad:a2:25:56:57:44:39:4d:34:99:f4:71:c7:74:c5:7f:aa:
         b1:97:2f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:19 2026 by rpki-client