Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft
File:                     8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft (raw, json)
Hash identifier:          0lLQf1zsJf4mkb1ACelOtlN8KRJZyvyd8ljJNWQ2Zjw=
Subject key identifier:   16:55:44:50:E9:A5:FA:A5:86:65:D2:4F:B6:80:11:AB:C6:91:1F:E8
Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29
Certificate issuer:       /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129
Certificate serial:       0D13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft
Manifest number:          0D0A
Signing time:             Fri 12 Jun 2026 18:09:17 +0000
Manifest this update:     Fri 12 Jun 2026 18:09:17 +0000
Manifest next update:     Fri 19 Jun 2026 18:09:17 +0000
Files and hashes:         1: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl (hash: gN14CmicfecBSzF9qTGRJK28oyi9v40jQLBx70IIeH8=)
                          2: 3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (hash: UfHKPMUY6EmaHpXY4OrXsN6dBJ4bjLIXmajgIcZM4a8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl
                          rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3347 (0xd13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A02, serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129
        Validity
            Not Before: Jun 12 18:09:17 2026 GMT
            Not After : Jun 19 18:09:17 2026 GMT
        Subject: CN=6a2c4b4d-cad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:67:d5:1a:07:97:66:c7:20:7b:bd:01:29:32:
                    77:fe:14:89:cc:58:bb:4f:92:d7:4c:18:64:b9:ca:
                    a7:4f:4e:5e:da:49:e3:b2:03:7e:77:2c:74:8d:86:
                    2d:60:aa:3f:0c:1c:aa:00:94:a2:ff:06:18:a8:f3:
                    30:17:12:15:ba:5f:45:ba:95:48:f4:bd:fe:87:1a:
                    57:73:54:69:db:49:f9:2a:9e:4f:52:8b:e3:c7:50:
                    50:50:77:1d:bd:79:ba:8f:07:78:e8:c2:d1:59:13:
                    53:14:92:66:49:e4:28:a0:1c:cf:43:33:6b:77:f7:
                    c2:2b:4d:c2:e7:f1:d2:6b:15:50:6a:47:26:f2:b6:
                    03:4c:db:64:a8:fd:2f:69:d3:62:9e:de:0a:03:d7:
                    aa:ce:2b:4e:55:9b:4a:d6:d4:73:6e:41:e4:0d:9e:
                    43:86:a4:5b:96:11:76:1e:89:de:e0:c7:54:31:a7:
                    41:db:0d:b5:e8:eb:e7:6e:de:0c:e5:3d:27:60:7e:
                    5e:d5:b6:1b:8b:bd:80:1a:28:c5:25:d5:b2:6e:4a:
                    90:2d:99:ff:63:33:81:77:fb:3c:72:0d:3b:eb:f5:
                    90:20:f3:e9:ae:25:f4:fb:84:4d:7a:04:87:72:f8:
                    93:c5:28:fc:b4:e5:81:0c:72:9b:96:1c:05:97:53:
                    02:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:55:44:50:E9:A5:FA:A5:86:65:D2:4F:B6:80:11:AB:C6:91:1F:E8
            X509v3 Authority Key Identifier:
                keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:27:fe:f1:d9:c7:71:52:4e:2e:30:95:57:53:9d:b7:34:ba:
         53:56:8f:b6:26:e1:d8:a6:89:24:0b:3f:2f:28:c5:82:62:66:
         cb:08:2c:ab:dc:30:10:8c:d3:c8:7a:71:4c:ef:9d:be:2d:3a:
         d8:38:cb:50:00:63:84:c2:14:68:ee:96:27:37:77:79:88:b3:
         c7:68:8c:23:c3:9f:b9:ce:db:b0:84:21:6c:94:c7:1e:32:05:
         9f:9a:f4:07:ea:9e:2a:c1:80:87:69:4d:69:40:df:6b:5d:1d:
         7e:89:27:1a:ff:48:22:53:37:e1:c8:65:79:74:75:16:4f:f0:
         e7:2e:b4:97:19:83:a5:c6:43:94:a0:ef:ab:ae:05:a4:70:90:
         56:c3:6a:d5:f3:3e:cf:e1:df:03:79:30:44:c7:17:3d:aa:1a:
         ee:33:4a:10:59:46:14:cd:cf:18:5d:01:fd:20:16:e2:33:09:
         01:e4:4a:d2:ea:6c:be:f8:84:81:33:88:0f:3b:35:b3:f3:b7:
         6b:59:e4:63:81:83:e4:f5:62:ae:54:34:4c:22:b6:ad:58:e2:
         b7:67:0b:6c:ae:5f:69:e4:0b:ea:44:74:84:cd:79:5e:fd:8f:
         1c:c7:06:3f:96:e2:4c:0a:17:ac:1f:b1:ea:b2:4f:6e:a5:3d:
         a5:1d:34:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:29:04 2026 by rpki-client