Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
File:                     rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json)
Hash identifier:          l6/IdkxT05+yYwTS760tF3NnREjsj6/kb0CD2caVctg=
Subject key identifier:   97:A1:12:EB:CC:0A:E2:38:99:C8:C1:49:96:17:F7:2B:BA:AA:70:3D
Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
Certificate issuer:       /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
Manifest number:          01C9
Signing time:             Mon 27 Jul 2026 05:29:49 +0000
Manifest this update:     Mon 27 Jul 2026 05:29:48 +0000
Manifest next update:     Mon 03 Aug 2026 05:29:48 +0000
Files and hashes:         1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: sBBJKU8NzNrYPrONJFFdhlcq7a7c/BqfKMfmsiUJ28g=)
                          2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: zQuRWZynPjX+xVieuFFOjcx7urcSlA8n96bIrvyW0V4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
                          rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
        Validity
            Not Before: Jul 27 05:29:48 2026 GMT
            Not After : Aug  3 05:29:48 2026 GMT
        Subject: CN=6a66eccd-8ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:d3:80:8d:7e:33:cf:fa:63:76:32:e4:c8:
                    59:1d:4d:0b:79:1c:36:94:70:60:bf:1f:06:64:40:
                    eb:6d:2d:14:5c:e0:cc:36:0a:fe:34:86:ae:d4:d7:
                    9a:57:7f:42:6c:0b:cf:f5:b5:0a:54:04:d1:60:e3:
                    ab:c9:d0:b8:c1:08:f7:d1:a7:48:b8:51:ba:1b:6e:
                    ce:52:a9:48:4c:2d:bb:98:68:6a:c5:07:f0:a8:f6:
                    ed:41:39:d9:f8:34:76:3b:0a:cf:00:0d:34:6f:97:
                    ae:7c:e4:b3:f2:7f:fc:37:d2:34:5f:d4:37:c4:b0:
                    bb:f5:04:41:9d:fc:ed:bb:20:89:01:7c:56:11:f4:
                    f9:34:84:c4:99:7e:b2:c6:91:7b:3f:38:35:12:4b:
                    ec:27:91:28:dc:55:99:d6:7b:d7:32:80:29:e9:10:
                    3b:32:56:2a:23:b3:95:2d:7b:ff:c8:9d:da:2f:8e:
                    cc:3c:f7:8d:73:20:d8:69:1d:ec:78:ea:ae:bf:e3:
                    7c:b6:cb:f6:79:02:7e:96:d6:e0:f8:06:b8:c0:43:
                    35:a7:f4:4a:47:9e:9a:da:45:b1:1c:81:27:45:75:
                    e0:05:0b:b0:8f:de:5a:da:63:dc:c5:df:7e:19:b2:
                    a5:d8:ab:00:7e:a2:d9:67:83:88:10:a9:bf:b1:d1:
                    7e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A1:12:EB:CC:0A:E2:38:99:C8:C1:49:96:17:F7:2B:BA:AA:70:3D
            X509v3 Authority Key Identifier:
                keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:8d:4b:30:84:55:aa:49:9d:08:f0:a1:14:a8:76:75:2b:40:
         fa:0a:c4:e9:a5:a6:15:55:50:80:b7:48:e2:80:59:59:5a:08:
         45:bd:4d:c2:71:11:56:96:75:bd:12:a6:61:9a:18:a2:fd:d2:
         6b:1a:0f:cd:19:79:b6:17:3a:48:35:d1:f4:fa:5e:96:a1:15:
         ba:98:95:48:cf:f3:c5:d6:98:57:ce:be:7b:49:87:d1:c6:8f:
         ec:46:ab:06:20:f6:40:47:e4:f3:39:e4:ed:b2:cb:5b:8e:09:
         bb:83:88:38:fd:87:dd:94:53:21:4a:31:5c:f1:fa:8e:e8:3c:
         7c:77:f2:2a:00:c9:cc:2c:05:91:a6:0e:79:a6:d3:f5:b5:64:
         46:63:95:b2:14:0e:38:7f:f4:27:2c:b2:77:41:23:e3:c5:e2:
         6a:63:f3:45:44:1b:45:a9:dd:e6:0e:a4:0c:f0:15:76:9c:c0:
         5c:d3:13:46:e4:cb:d9:be:64:04:78:b9:a9:32:c6:94:6d:9f:
         62:b7:61:3f:b7:a2:89:80:99:5d:73:88:fd:e5:57:15:c0:a3:
         4e:2c:ee:d3:c9:27:45:70:44:30:b9:a1:af:98:2f:a9:7b:7e:
         39:f1:ae:36:53:dc:5f:2b:6f:40:9d:96:ae:b7:59:4a:8f:20:
         d9:07:46:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:37 2026 by rpki-client