Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
File:                     0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json)
Hash identifier:          1pkqF5ojwDfJRDN6kH82DwcvfgfAF9f/9dwXInPcEj8=
Subject key identifier:   9B:72:82:BD:DA:98:59:BE:F9:23:CD:9F:4E:DA:0C:EA:7B:5A:B6:D9
Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
Certificate issuer:       /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
Certificate serial:       0BB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
Manifest number:          0BA9
Signing time:             Sun 26 Jul 2026 19:29:51 +0000
Manifest this update:     Sun 26 Jul 2026 19:29:51 +0000
Manifest next update:     Sun 02 Aug 2026 19:29:51 +0000
Files and hashes:         1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: 7DWppLly5ar35gxbxTz2Ok/fehdLGI4r7iiuyLHX5UA=)
                          2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: jyqFCgst06RVpDB0gLXfdOd67pDYJBgZGVMmj+J0u70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl
                          rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2999 (0xbb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
        Validity
            Not Before: Jul 26 19:29:51 2026 GMT
            Not After : Aug  2 19:29:51 2026 GMT
        Subject: CN=6a66602f-5e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2a:64:8c:00:14:1c:38:35:95:29:10:fb:b7:
                    d7:35:8e:c2:56:3c:83:ba:21:73:a2:fb:73:bf:fe:
                    85:a2:5d:f1:3e:f4:b9:98:ea:e6:d5:cc:64:15:d2:
                    43:44:63:b4:c4:fe:8d:c3:ba:4f:d9:c4:20:d3:46:
                    09:8f:10:08:84:73:53:e4:f0:46:72:1b:7c:66:e8:
                    f8:ae:40:ef:10:d8:8d:50:b8:b9:ef:00:21:4a:52:
                    01:1e:c1:c2:83:07:71:f6:32:cd:1a:dc:41:97:e7:
                    5e:0a:d5:74:96:91:b7:ae:04:14:7e:79:79:e1:3f:
                    35:6e:62:58:d9:cd:0b:96:e6:c3:1e:ce:73:70:eb:
                    2a:42:41:23:8d:35:f4:98:27:ed:11:74:75:57:fb:
                    61:23:cf:13:36:ba:87:02:a6:7f:c5:10:7e:8d:f1:
                    f2:ca:b1:c8:08:6f:44:28:ee:5e:ea:3a:11:22:ad:
                    88:85:48:f6:19:b6:23:1a:85:a3:a1:59:ab:86:77:
                    eb:92:8c:c0:43:77:4c:37:f5:eb:9e:7b:00:f9:5f:
                    b7:0d:62:ad:4a:fa:b8:90:45:41:d1:11:ee:6d:c1:
                    c5:9b:82:ce:8d:3d:33:e8:be:fe:a5:e5:63:52:b9:
                    f1:6b:c0:35:ff:de:86:df:52:ed:e1:d2:bf:11:16:
                    a0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:72:82:BD:DA:98:59:BE:F9:23:CD:9F:4E:DA:0C:EA:7B:5A:B6:D9
            X509v3 Authority Key Identifier:
                keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:93:12:bf:87:0e:e2:54:e8:1f:19:98:b4:93:d4:18:2a:e0:
         20:6a:37:87:9a:42:8c:31:a1:3e:41:b7:ef:c2:37:59:78:33:
         9d:08:05:cf:be:c3:85:10:55:2b:4c:53:a4:5f:ad:89:66:11:
         21:95:04:f1:fc:7a:a5:8f:91:1f:8b:1d:f1:11:b6:23:a9:35:
         7f:2c:c9:0a:d4:fd:fa:51:28:47:f8:26:d7:1d:76:f5:58:52:
         78:ea:11:ca:f7:58:5e:ab:56:92:99:da:e8:a9:d0:30:3e:7c:
         75:1f:ff:44:dd:5e:a6:39:85:c8:ea:1d:5c:dd:7d:c1:b3:b9:
         2e:ac:27:4f:d7:01:0f:9a:0b:4a:94:68:f5:28:d2:90:39:ca:
         c0:8b:49:56:d8:2b:a7:06:03:ff:69:38:b4:82:d9:7a:2e:d3:
         3e:42:46:e4:d3:da:2b:99:d0:9e:0c:eb:ba:16:98:2e:0b:64:
         3d:f2:f7:66:bc:f7:3d:9e:7f:b2:18:7c:b8:47:b8:a9:e8:af:
         79:45:62:05:39:90:0f:57:8d:f8:4b:27:23:98:6d:ee:77:39:
         27:aa:ce:39:03:5c:b3:c8:c3:0e:ef:8d:ca:ab:2b:fa:b6:25:
         0b:3e:00:0e:9b:9f:48:b0:f0:22:74:6b:52:bb:fc:50:b0:07:
         d8:e9:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:22 2026 by rpki-client