Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.mft
File:                     7aMYBt32MRYZlAFDVqvUcsHvFQM.mft (raw, json)
Hash identifier:          o5G1cBWN7BF+VnGuvyNT4h2AOWdNHq1JYXZ9x0P1UnU=
Subject key identifier:   F5:16:7B:1A:58:C7:AB:40:48:E4:F2:45:08:82:AB:CB:CA:08:22:20
Authority key identifier: ED:A3:18:06:DD:F6:31:16:19:94:01:43:56:AB:D4:72:C1:EF:15:03
Certificate issuer:       /CN=A9188C27/serialNumber=EDA31806DDF631161994014356ABD472C1EF1503
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aMYBt32MRYZlAFDVqvUcsHvFQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.mft
Manifest number:          0C
Signing time:             Thu 11 Jun 2026 11:30:03 +0000
Manifest this update:     Thu 11 Jun 2026 11:30:02 +0000
Manifest next update:     Thu 18 Jun 2026 11:30:02 +0000
Files and hashes:         1: 7aMYBt32MRYZlAFDVqvUcsHvFQM.crl (hash: SCQiz5L4e2aSUsDV5C+AGuZQ2Obr+VGu0BCtj3CKYTA=)
                          2: B4F9B59C58A911F195C2275394833773.roa (hash: 00zQFkHzvRJ0Tkas9ws+/6cP+I3mCAoiRqheMA8N5Rw=)
                          3: B465F6F458A911F195C2275394833773.roa (hash: 7J7HWBgRI5TcWW6EV3w1h0niHwGS6gn8uT2QiuEPBlM=)
                          4: B3E67F5A58A911F195C2275394833773.roa (hash: CSpUTF1QwSjwcMC66CAo2WdtWbS27jom8RoK7EKSEnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.crl
                          rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aMYBt32MRYZlAFDVqvUcsHvFQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 11:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188C27, serialNumber=EDA31806DDF631161994014356ABD472C1EF1503
        Validity
            Not Before: Jun 11 11:30:02 2026 GMT
            Not After : Jun 18 11:30:02 2026 GMT
        Subject: CN=6a2a9c3b-a8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:f4:2f:eb:ff:58:f6:64:01:c2:2f:7c:45:
                    57:a7:6f:f5:d7:53:61:73:94:38:3d:85:eb:ea:94:
                    08:d7:9d:f1:02:20:c8:c6:e1:82:ac:cb:9e:98:2f:
                    b5:59:53:3e:da:f0:e4:b9:44:32:f7:a3:af:9d:88:
                    39:85:e2:45:04:24:7d:2a:f2:64:1a:1d:c8:86:fa:
                    a6:72:e6:38:73:a1:9e:d5:e7:60:19:ca:98:d4:20:
                    5c:18:58:73:57:46:b1:c0:65:bd:eb:d2:fa:15:16:
                    9d:94:3d:5a:05:7f:c3:3c:93:00:0b:c9:7a:dc:df:
                    41:a5:27:df:c5:f1:84:c2:a1:d4:a0:b6:ec:1e:0d:
                    91:2f:8c:85:3e:59:2c:f5:70:c3:a6:a3:ba:61:c5:
                    53:f2:ea:90:36:75:9d:3e:2e:5a:0a:d5:1a:87:18:
                    f4:2e:76:bc:3c:d9:27:6e:1e:42:39:3c:0c:b5:48:
                    b0:da:5a:6f:a8:07:a8:65:c5:31:6f:3d:c9:9f:c5:
                    ad:f5:c0:a0:c4:ec:44:97:76:58:9a:fe:63:5d:e5:
                    6f:85:7c:dd:3f:87:8f:4c:9d:2e:82:bd:41:8e:27:
                    75:a4:d2:f3:54:5a:10:23:0e:a9:e3:6c:8a:c8:96:
                    14:b8:dd:cb:03:34:cf:14:13:cc:3b:e9:aa:b6:95:
                    94:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:16:7B:1A:58:C7:AB:40:48:E4:F2:45:08:82:AB:CB:CA:08:22:20
            X509v3 Authority Key Identifier:
                keyid:ED:A3:18:06:DD:F6:31:16:19:94:01:43:56:AB:D4:72:C1:EF:15:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aMYBt32MRYZlAFDVqvUcsHvFQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188C27/2E72417E58A911F1ADEBBC6F93833773/7aMYBt32MRYZlAFDVqvUcsHvFQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ac:27:ee:7b:43:9e:24:38:89:0c:a9:59:7b:9d:50:0f:ec:
         90:f9:5e:ac:19:f3:ff:d2:f8:64:50:6e:2c:5b:37:cc:dc:7f:
         ba:31:b1:56:9d:40:5b:76:8c:cc:6f:6f:5e:85:7b:39:e9:4e:
         10:95:08:3a:2f:03:ab:02:90:ab:c0:a9:f7:e4:c5:07:84:f0:
         05:31:eb:57:14:b6:ab:a6:46:7c:da:e7:61:e2:75:ea:2f:a7:
         09:53:6c:01:16:16:30:99:1e:80:04:0c:d8:01:4f:77:c8:0e:
         e1:19:f5:3e:d2:cf:9a:7b:d8:b3:30:d5:33:61:df:7d:13:af:
         91:03:c8:07:88:43:ed:93:b7:7b:0f:a3:b5:32:e8:7a:ea:9d:
         d6:02:21:7e:dd:9a:4e:aa:27:37:8f:1a:6e:95:22:91:53:ae:
         56:44:7e:a2:93:d9:17:ae:36:d8:81:87:e0:35:ca:b1:e0:43:
         c9:7f:6d:dc:1b:17:77:46:86:2d:68:9b:cb:90:a6:92:dd:8d:
         1f:6d:3d:aa:a1:8c:ad:54:13:53:cc:eb:de:80:66:a8:2c:df:
         8e:dc:f3:b8:06:cd:7c:41:2f:79:4c:d4:6b:51:8f:32:b8:f1:
         71:47:d0:49:f1:49:a7:11:66:22:16:19:7b:6d:0b:08:39:37:
         c8:b1:58:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:33 2026 by rpki-client