Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
File:                     w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft (raw, json)
Hash identifier:          sGghGRli7K+kdIs6sIShKHSDj2ExTk/cFEaEp1H5DDc=
Subject key identifier:   BF:DF:31:74:06:40:F3:6D:5B:F2:E7:1B:27:2E:19:C7:E9:2D:41:8D
Authority key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
Certificate issuer:       /CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
Certificate serial:       07C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
Manifest number:          07C0
Signing time:             Fri 12 Jun 2026 21:27:25 +0000
Manifest this update:     Fri 12 Jun 2026 21:27:25 +0000
Manifest next update:     Fri 19 Jun 2026 21:27:25 +0000
Files and hashes:         1: w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl (hash: m4kSucVUEQNN594qHuVpis1i1S23v9EC7/CjsdgXHD8=)
                          2: 43854B4044D411EB85615640C4F9AE02.roa (hash: 2Xjt4SdBZGaW7oZCb7vo9tweuahkp/3fJMEVxJAgK7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl
                          rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1992 (0x7c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168197, serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
        Validity
            Not Before: Jun 12 21:27:25 2026 GMT
            Not After : Jun 19 21:27:25 2026 GMT
        Subject: CN=6a2c79bd-31e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:dd:45:1d:24:14:60:70:00:0c:b3:85:3a:
                    e1:27:08:d3:43:22:81:42:60:08:fd:75:13:42:1c:
                    25:61:b9:35:dc:48:a9:2e:14:49:ee:88:14:2e:31:
                    98:30:c2:68:a9:1e:d3:01:84:93:95:66:6a:73:5b:
                    d5:40:42:4c:1c:b5:91:a1:37:a3:ac:3e:81:36:2e:
                    cb:02:c7:d0:74:be:bc:0e:1f:16:60:82:00:7b:b6:
                    cf:a6:b1:97:9f:ac:0d:f2:be:08:e8:7c:15:79:0a:
                    8d:38:8d:4f:be:fc:b7:e1:1f:df:5b:7a:4f:de:81:
                    0b:68:a2:80:74:11:92:86:02:2f:32:2e:66:85:01:
                    00:88:53:0f:70:ca:f0:77:c4:b4:63:5a:eb:dd:76:
                    00:c7:af:95:be:91:0e:ee:64:f3:f0:55:36:3c:c9:
                    75:b7:4c:93:77:5e:bb:3e:0d:52:a7:73:bb:95:35:
                    c2:51:57:3c:11:9d:fa:0f:9c:78:7c:56:49:f5:6a:
                    34:a8:94:95:3b:71:93:f8:6e:51:bf:9f:51:31:65:
                    85:c0:c4:3f:2d:24:56:6a:af:9c:aa:2e:aa:a8:64:
                    30:0a:9a:4f:77:85:5a:0a:f4:da:8f:ff:d6:18:7b:
                    3b:38:79:1a:18:35:c6:74:97:54:a3:ae:71:0d:93:
                    d0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DF:31:74:06:40:F3:6D:5B:F2:E7:1B:27:2E:19:C7:E9:2D:41:8D
            X509v3 Authority Key Identifier:
                keyid:C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b9:bf:b2:28:78:dc:fe:9b:f3:38:10:37:f7:c3:cd:28:19:
         41:5e:37:fb:c3:a7:0a:39:3f:fa:bb:f6:ba:78:95:f4:94:41:
         8f:42:18:7f:fd:fe:e4:4d:32:d4:64:5c:d8:ee:96:9b:fc:ce:
         9d:f5:73:ac:64:4f:83:12:b7:62:11:7f:58:14:d8:e4:51:1f:
         83:b2:38:85:40:5c:b1:e7:6b:87:da:a2:e7:de:06:e7:49:07:
         64:a8:e6:28:72:12:20:7d:00:40:6e:64:37:df:dc:0b:15:9b:
         5e:03:5a:52:7a:74:a4:c3:86:72:ad:bf:b3:3e:42:72:04:86:
         d2:91:9e:06:e2:6a:e4:e0:c4:65:ac:fb:78:56:e4:72:fc:42:
         d5:5b:66:6a:10:2e:88:19:33:7a:92:e6:f6:94:50:74:c3:73:
         e1:9e:0d:6e:05:69:a1:6d:0f:fd:ef:7b:b3:2c:2a:45:37:d5:
         34:c6:7c:e7:00:0b:82:58:9a:9f:16:db:21:0e:b5:9b:0e:cd:
         6d:94:9f:a1:81:ff:9c:88:f5:9a:eb:95:2b:9e:f8:33:90:b1:
         ab:f1:b0:93:29:56:0e:f9:74:0c:02:22:39:7b:73:81:62:26:
         22:af:e6:45:d6:6f:8e:59:51:91:14:ac:59:0c:c3:3c:e0:39:
         44:db:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:58 2026 by rpki-client