Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
File:                     7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json)
Hash identifier:          PtI4B5P6BmMtXL1jW8n2zKm4tVq98sgdaXpkeeCcEd0=
Subject key identifier:   78:31:05:CA:99:51:32:BE:37:1F:A8:8C:91:BC:E6:AC:C6:94:B0:D8
Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33
Certificate issuer:       /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
Certificate serial:       0195
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
Manifest number:          018D
Signing time:             Sat 13 Jun 2026 04:28:13 +0000
Manifest this update:     Sat 13 Jun 2026 04:28:13 +0000
Manifest next update:     Sat 20 Jun 2026 04:28:13 +0000
Files and hashes:         1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: B+vOcimTqbUd1HMW8RGONGSZEownNES6tpWWDi/NTcQ=)
                          2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: yK/WcBJQdA4buA3EZ+0KrWMfv9XG+NNlOPVNviCvGZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl
                          rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
        Validity
            Not Before: Jun 13 04:28:13 2026 GMT
            Not After : Jun 20 04:28:13 2026 GMT
        Subject: CN=6a2cdc5d-1730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:7a:52:68:ae:c2:5f:3b:03:28:61:2d:88:
                    22:f3:4d:85:a4:7c:ea:23:c5:bd:f4:2c:ae:53:90:
                    21:d3:cf:7d:44:da:40:b4:ec:f8:11:10:52:af:b8:
                    52:54:8d:03:ba:2e:43:17:4c:a3:54:24:21:41:a4:
                    05:15:59:c4:5e:78:ad:05:bb:dc:65:38:ad:c6:73:
                    52:ab:0b:a9:24:dd:71:55:89:ab:51:e4:43:6c:a6:
                    30:66:5b:2f:58:63:5f:32:87:36:0b:47:e6:8c:dc:
                    1c:2d:24:1d:68:1b:12:38:8c:3e:7b:cb:c5:f5:a8:
                    7c:97:2c:21:d9:49:84:9c:59:04:2d:a4:d2:e1:e5:
                    09:d9:bf:8f:f7:1e:b4:0f:b9:64:7f:65:08:bb:99:
                    6f:53:8a:af:a0:57:e7:20:d4:d3:0f:b7:e9:e1:d8:
                    b5:e3:e9:c5:d1:b7:3b:23:95:2b:46:8c:f2:3b:d4:
                    8e:40:cf:26:d4:ac:f0:d6:fe:a3:57:4e:15:a9:7d:
                    9c:77:4e:a6:09:bc:98:d1:38:8a:b5:e6:92:ef:2a:
                    95:b3:88:a5:9d:1f:0f:66:c7:11:ad:86:8e:58:90:
                    21:fc:8b:47:7c:3e:fb:33:f0:f4:bc:3d:b4:4f:89:
                    1e:c1:51:07:fc:cc:13:64:cf:54:d1:7e:d0:59:53:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:31:05:CA:99:51:32:BE:37:1F:A8:8C:91:BC:E6:AC:C6:94:B0:D8
            X509v3 Authority Key Identifier:
                keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:2d:2b:ee:6e:3a:83:49:4d:7f:22:1d:9e:c6:ca:46:5e:ae:
         9e:83:cd:f8:4f:f7:69:4f:77:df:f5:88:8e:9e:df:c9:ae:f1:
         cb:7b:d3:ba:ca:3e:3e:d1:8d:de:b7:5b:37:50:8b:e6:20:7a:
         87:7d:e1:3c:5a:f4:3e:cd:79:b4:60:34:d7:65:b6:68:6c:d5:
         f5:4e:ff:38:d4:9b:40:0f:fe:22:05:66:84:76:11:4f:a1:3d:
         2c:e8:d0:84:17:62:f0:2b:be:1b:5a:06:8f:26:d8:6f:41:ff:
         bd:13:db:54:99:ae:b6:7f:b7:76:55:34:b2:18:f6:84:c5:7a:
         d5:68:b3:2f:15:5d:bd:3b:90:82:79:c2:3b:0c:ab:18:7e:08:
         ad:12:2c:be:d8:63:6a:3c:8c:ea:45:42:31:c9:8d:a4:0a:00:
         a8:8b:ef:ea:53:62:f9:5b:1c:58:4c:40:c7:99:07:90:b2:d6:
         23:64:c9:e7:8a:21:e9:59:b3:c9:9b:76:8a:dd:9d:0c:27:02:
         ff:83:2a:f3:9a:53:f3:e9:6d:05:97:84:52:2c:f6:67:d2:26:
         43:95:ba:fe:29:11:b2:b4:17:1b:44:75:61:b3:2e:27:95:5d:
         6e:96:9f:1b:59:c6:cf:d3:53:f2:b7:30:d7:6b:09:fb:e7:49:
         36:25:d2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:09:49 2026 by rpki-client