Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft
File:                     4A98xO20ZNoqTvnfvu5imVNRVeo.mft (raw, json)
Hash identifier:          wVISfx6O2eVNsFfEmehSQ3qU5kzs8nqcMKvS2B7L60E=
Subject key identifier:   30:71:25:A5:F2:40:D9:1A:F6:87:17:02:21:6D:F1:53:6C:52:6D:A5
Authority key identifier: E0:0F:7C:C4:ED:B4:64:DA:2A:4E:F9:DF:BE:EE:62:99:53:51:55:EA
Certificate issuer:       /CN=A9165746/serialNumber=E00F7CC4EDB464DA2A4EF9DFBEEE6299535155EA
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft
Manifest number:          07
Signing time:             Sat 13 Jun 2026 09:15:15 +0000
Manifest this update:     Sat 13 Jun 2026 09:15:15 +0000
Manifest next update:     Sat 20 Jun 2026 09:15:15 +0000
Files and hashes:         1: 4A98xO20ZNoqTvnfvu5imVNRVeo.crl (hash: ReIyz0inUHaoIHdZhOE6GByu1iEtZ08BDFl3c8aDv4E=)
                          2: 031954DE5F3611F180101EC97F47A888.roa (hash: 8MG6eGpVkP9CJ/8UlblTP9Xx22hFfv4p4ykAcJ2UqhU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.crl
                          rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165746, serialNumber=E00F7CC4EDB464DA2A4EF9DFBEEE6299535155EA
        Validity
            Not Before: Jun 13 09:15:15 2026 GMT
            Not After : Jun 20 09:15:15 2026 GMT
        Subject: CN=6a2d1fa3-9adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:15:01:b9:b5:14:e2:f8:ee:85:c5:93:d3:
                    8e:01:50:ff:72:51:3a:d0:6b:99:f8:1f:fd:f8:8b:
                    bc:9f:9f:1e:70:ef:a9:b5:6c:55:a6:be:8d:82:25:
                    83:d2:27:b6:4f:6f:57:01:a2:8d:f7:f1:89:5e:1b:
                    5d:cf:47:a9:92:8b:ce:45:ba:17:c7:8b:48:0a:46:
                    fd:e0:0d:77:f5:c2:a5:98:4d:19:e8:b6:72:93:ba:
                    fb:52:16:fe:fe:6d:00:20:91:2b:14:5d:e0:cd:a9:
                    54:9f:8f:e4:72:0c:7d:f7:ab:4a:41:1b:1b:dc:81:
                    e8:02:8c:db:33:1c:95:c9:fe:ea:99:a7:2b:06:ac:
                    e2:8e:c2:c4:04:9b:6a:5e:c6:e4:6f:ed:9c:b7:18:
                    7f:da:6d:7b:b4:39:2f:3d:11:ee:d8:cb:25:d2:67:
                    d8:b6:3d:ce:45:e8:00:20:75:1c:d8:ae:8c:50:3c:
                    d1:07:5f:1e:e2:c8:a5:28:46:04:7f:e3:72:89:04:
                    cb:36:a6:fd:72:90:8c:ba:b7:ef:80:ce:e6:cb:bd:
                    50:7d:b3:b9:3b:b4:c3:3e:6c:eb:2f:eb:5c:5e:cf:
                    bb:2e:03:46:ad:0b:59:3d:c6:f3:8c:d6:4f:5d:4a:
                    71:e9:1a:af:8a:10:b2:9c:7e:0c:4d:b5:03:89:3e:
                    44:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:71:25:A5:F2:40:D9:1A:F6:87:17:02:21:6D:F1:53:6C:52:6D:A5
            X509v3 Authority Key Identifier:
                keyid:E0:0F:7C:C4:ED:B4:64:DA:2A:4E:F9:DF:BE:EE:62:99:53:51:55:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4A98xO20ZNoqTvnfvu5imVNRVeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165746/72AC20525F3511F1A3AE2F757E47A888/4A98xO20ZNoqTvnfvu5imVNRVeo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:02:36:cd:e4:8f:86:5f:56:e1:dd:8c:64:df:05:e2:2f:43:
         35:6f:d6:e2:57:0c:e5:ab:6e:a7:14:b0:db:1f:39:d4:22:4d:
         6f:ad:f7:2c:55:c0:3d:22:7d:d6:0e:ed:cb:24:1e:ee:fe:c2:
         df:2d:83:68:42:4d:47:a5:82:88:64:42:61:df:88:18:9b:6c:
         9b:dc:2f:3e:49:15:d6:0b:92:06:eb:76:a7:fa:bb:d1:f1:e6:
         3f:3a:a3:f7:ce:57:af:68:2c:4e:84:ca:d0:c7:92:e7:09:55:
         c8:de:49:2c:2e:d0:12:09:35:55:11:c8:4a:7d:e5:40:59:87:
         6a:93:e1:f4:2b:9e:f8:89:89:ce:1a:a6:37:ef:53:7c:40:f0:
         5e:6f:84:0a:72:17:88:62:05:a1:39:b3:ef:17:39:52:99:cf:
         44:7d:d2:ab:01:43:0f:e3:fd:3b:6b:22:b3:de:6e:56:37:a8:
         6e:95:da:88:08:70:5e:d6:81:1b:4f:b9:05:c4:d7:18:0c:a0:
         6f:3e:50:a6:f3:6d:4d:c9:a6:83:f8:84:13:ee:de:e6:9a:fc:
         80:10:f4:18:0e:ea:c5:f1:5d:0a:91:0d:89:00:47:3b:bb:a0:
         f1:5e:67:b8:4f:6a:26:b0:ae:b8:b3:23:d0:2a:b9:08:b4:22:
         10:28:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:36:24 2026 by rpki-client