Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.mft
File:                     7oeNdaIYCzpoQfv6lsOakOH6alo.mft (raw, json)
Hash identifier:          84+zC6r+TioDPExn/jnZkjYZqdLIZUAnZWkOKyrBL30=
Subject key identifier:   1B:6F:45:10:3A:89:DE:7F:85:3E:56:8D:09:9F:E7:46:A0:35:14:96
Authority key identifier: EE:87:8D:75:A2:18:0B:3A:68:41:FB:FA:96:C3:9A:90:E1:FA:6A:5A
Certificate issuer:       /CN=A9156648/serialNumber=EE878D75A2180B3A6841FBFA96C39A90E1FA6A5A
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oeNdaIYCzpoQfv6lsOakOH6alo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.mft
Manifest number:          17
Signing time:             Mon 27 Jul 2026 11:23:41 +0000
Manifest this update:     Mon 27 Jul 2026 11:23:40 +0000
Manifest next update:     Mon 03 Aug 2026 11:23:40 +0000
Files and hashes:         1: 7oeNdaIYCzpoQfv6lsOakOH6alo.crl (hash: 1PCRKwiVqEWqfDi7bVdbSqVoVA+CHiMswOe8qjYUH88=)
                          2: 264CD086686711F1A235A935A047A888.roa (hash: hGg0i2AerJUIjIuwGtqIvGZCbqf4UclKCp9wjxIZIoU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.crl
                          rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oeNdaIYCzpoQfv6lsOakOH6alo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156648, serialNumber=EE878D75A2180B3A6841FBFA96C39A90E1FA6A5A
        Validity
            Not Before: Jul 27 11:23:40 2026 GMT
            Not After : Aug  3 11:23:40 2026 GMT
        Subject: CN=6a673fbd-1c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:23:d3:53:3e:2e:d1:76:80:8d:ec:86:8e:49:
                    a3:c9:a5:47:f2:ba:7b:4c:a1:9b:60:f0:57:36:20:
                    9e:15:7a:19:b4:5e:2b:8c:8d:67:0f:5c:7f:b0:94:
                    27:ff:77:9d:95:47:d2:73:79:98:3b:9d:58:75:95:
                    c3:a2:c0:e5:64:42:44:36:04:4a:d9:8f:53:87:84:
                    d1:07:7b:1f:e3:5f:46:42:be:46:3b:ef:99:73:29:
                    8d:73:ee:53:ea:da:2d:a7:b5:41:4d:9c:e2:50:f7:
                    7b:e1:a6:57:2a:52:11:50:54:b1:19:02:de:45:f9:
                    60:b1:0b:8c:66:54:84:20:87:69:4b:e7:33:b6:01:
                    65:11:be:96:b6:6b:0b:70:e0:f0:f3:ce:7b:e6:e8:
                    d2:f1:19:12:20:25:dc:d7:da:b5:e4:eb:ca:00:f7:
                    e1:b4:7a:bd:95:04:ec:a0:6a:38:9e:76:59:32:6d:
                    84:7c:97:27:ae:c7:f3:ed:40:24:f8:b1:09:34:8b:
                    8c:44:fc:a5:19:65:39:e4:77:2b:e6:74:31:bb:7c:
                    18:a1:9b:f0:8e:b1:62:ea:1d:53:3d:79:81:1b:83:
                    1a:05:e9:2f:bb:86:5a:79:b6:ea:55:3f:62:bd:28:
                    71:54:79:88:ae:91:80:54:5a:8c:35:0e:72:49:66:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6F:45:10:3A:89:DE:7F:85:3E:56:8D:09:9F:E7:46:A0:35:14:96
            X509v3 Authority Key Identifier:
                keyid:EE:87:8D:75:A2:18:0B:3A:68:41:FB:FA:96:C3:9A:90:E1:FA:6A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7oeNdaIYCzpoQfv6lsOakOH6alo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156648/60F22102686011F1BC57EB179E47A888/7oeNdaIYCzpoQfv6lsOakOH6alo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:3e:a8:f5:ab:83:07:b0:b8:32:8d:6b:aa:cc:b7:f7:25:2b:
         af:2c:36:3e:d6:62:a7:49:10:de:f4:ff:8b:88:41:85:7e:ef:
         74:04:b1:52:23:74:ae:e0:58:99:ba:8d:a1:45:4e:21:e8:b8:
         c9:13:05:13:9f:cd:11:29:12:08:26:03:e5:18:25:7b:1c:be:
         41:a6:60:27:f7:b3:fb:34:82:36:10:d0:3e:bd:a2:2f:d7:54:
         04:55:91:4e:f7:ca:08:40:fd:1e:c6:b5:9e:76:25:b9:5e:73:
         8d:23:51:ae:35:85:62:17:22:62:7f:6d:3d:07:aa:7b:7d:92:
         71:bb:d3:77:55:4c:4a:23:15:f0:b8:bf:a8:89:b7:5b:05:35:
         11:69:37:ee:9f:97:1c:ac:1c:ea:7e:51:58:ea:9e:76:2e:20:
         90:70:7b:b5:ae:ef:12:a6:10:1e:32:38:a7:fe:72:77:81:54:
         01:3a:6c:3f:cc:92:3f:b8:73:65:a0:49:99:c5:cd:a3:60:82:
         5e:62:50:f2:d2:0e:e3:2c:d2:5d:b1:69:4a:88:4b:c1:da:61:
         e1:df:d0:e6:ed:1f:6d:33:bb:1d:3e:ac:30:5e:11:29:97:5f:
         8b:9b:77:28:80:36:7a:2d:03:fe:8e:6c:13:4d:68:9c:7a:53:
         05:9c:cf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:38:21 2026 by rpki-client