Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
File:                     7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json)
Hash identifier:          ehhx4VR8XYa+ROrR1ipDQoHFj87b5N2y1HFvQbXUsIg=
Subject key identifier:   DD:31:8D:0A:05:DD:44:5B:61:CE:80:E9:4A:25:41:BF:2A:EC:5F:4F
Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
Certificate issuer:       /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
Manifest number:          0173
Signing time:             Sat 13 Jun 2026 04:41:11 +0000
Manifest this update:     Sat 13 Jun 2026 04:41:11 +0000
Manifest next update:     Sat 20 Jun 2026 04:41:11 +0000
Files and hashes:         1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: Uxt/LdMwQJ6QHbcwQ2AvA0Rx4bLbpRNEh/XKY4e5mG0=)
                          2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: 2Z5IzjJNdD4kG65ZpOb5f1Ky7VDv275TeVLHGASGOqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
        Validity
            Not Before: Jun 13 04:41:11 2026 GMT
            Not After : Jun 20 04:41:11 2026 GMT
        Subject: CN=6a2cdf67-f394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:b7:d8:a7:79:88:ac:bd:10:76:5f:04:61:
                    b7:04:6c:48:79:04:a8:3c:bb:22:7b:b3:d1:29:d8:
                    6d:7f:e9:25:e8:54:74:c0:bf:a0:86:5f:cc:9d:f8:
                    30:5e:23:5b:65:a4:39:b7:9c:49:c7:7b:91:1e:74:
                    ee:6e:b5:25:7b:c4:4d:2f:73:75:f6:95:21:cf:69:
                    46:9f:dc:83:b9:37:b8:d3:04:7a:96:b2:bd:d2:e2:
                    81:6d:39:bc:39:0f:13:ac:2f:87:7a:b1:f0:8c:88:
                    5d:5c:ee:17:d7:64:01:9c:f9:e0:ec:ec:f5:b3:d3:
                    a4:76:a0:4e:67:ed:f8:26:17:c0:21:6a:18:8b:34:
                    e0:be:cd:56:2c:d6:36:75:dc:70:5b:3b:fc:81:9b:
                    2a:b8:b5:3d:d7:99:92:55:1e:97:c5:96:98:05:ec:
                    12:20:01:ed:f1:3e:24:8e:b6:20:4b:5a:74:49:8a:
                    15:fa:2f:87:02:7a:6a:27:97:82:ae:cb:75:d4:5a:
                    73:41:63:b9:78:f9:20:33:33:47:78:f2:d1:c1:79:
                    5b:7b:51:20:1a:2c:ed:90:38:1d:a8:d1:1c:cb:21:
                    05:4e:e6:10:71:af:23:ac:f6:cc:70:d4:b6:63:ea:
                    a0:2c:90:5b:46:cd:d0:51:2c:54:8c:ed:75:74:8e:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:31:8D:0A:05:DD:44:5B:61:CE:80:E9:4A:25:41:BF:2A:EC:5F:4F
            X509v3 Authority Key Identifier:
                keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:d0:0f:da:62:b2:2f:33:b7:45:91:c2:ce:ef:5c:f4:bd:e7:
         14:c7:de:4a:51:dd:15:29:eb:c4:35:b8:bf:94:ac:18:d4:77:
         79:15:da:b0:7b:fb:36:51:8b:31:79:3a:c7:17:14:8b:28:20:
         64:dd:1c:e9:a7:46:ac:d9:6d:0c:a7:0e:bb:25:96:88:d1:81:
         a3:9d:f5:1e:73:00:64:72:d8:9e:43:bf:95:d6:23:db:99:2b:
         9a:5a:f9:b3:11:ea:fd:e2:21:c2:a6:02:b5:a1:2f:85:02:a8:
         f4:25:78:13:be:61:ef:35:32:2d:1c:56:38:41:dd:96:13:6e:
         fa:bb:40:4d:1a:30:cd:cd:ca:7a:0f:3c:b1:b4:5d:a0:b7:12:
         49:b8:d5:13:c4:52:d3:40:57:6a:9c:2d:78:0c:2c:3f:8d:dc:
         88:b8:c5:8c:d7:cd:fd:e5:7f:98:8d:4c:53:8a:0d:22:4c:b6:
         29:f6:80:fb:42:a2:ac:58:55:c0:99:9f:57:a0:d2:58:49:2f:
         c7:e4:17:c9:8a:5c:e7:b8:b7:06:21:6b:7d:2d:68:99:10:7f:
         d2:b7:1f:f0:94:ec:11:a7:0e:dc:d5:c5:c4:79:8e:8a:9f:75:
         1a:40:82:87:8e:5e:00:92:67:77:7b:80:ad:24:fc:31:9e:14:
         15:99:a7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:31:33 2026 by rpki-client