Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
File:                     5o7RJO9le2eb0SpY-gNQFODf6Cc.mft (raw, json)
Hash identifier:          Ui5sKbhIr7sMFNq1ww+tpeHqyHN+ZS5Adsl/96KUyDA=
Subject key identifier:   25:49:F1:12:63:6F:F8:0B:DD:20:81:10:12:3C:69:69:BB:3F:D8:06
Authority key identifier: E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27
Certificate issuer:       /CN=A9191A09/serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
Certificate serial:       0E96
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
Manifest number:          0E7F
Signing time:             Fri 12 Jun 2026 14:41:23 +0000
Manifest this update:     Fri 12 Jun 2026 14:41:22 +0000
Manifest next update:     Fri 19 Jun 2026 14:41:22 +0000
Files and hashes:         1: 5o7RJO9le2eb0SpY-gNQFODf6Cc.crl (hash: 8dc9sFEhQgiu5srd1DlZzuh9W4EUhd0pO7mqHrHYT4g=)
                          2: 9C06E51EE37A11EA84A20810C4F9AE02.roa (hash: VGb7fQ4+XdUAVdKkbAj+FraUZZtrQ9DDCForGAVJX7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl
                          rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3734 (0xe96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191A09, serialNumber=E68ED124EF657B679BD12A58FA035014E0DFE827
        Validity
            Not Before: Jun 12 14:41:22 2026 GMT
            Not After : Jun 19 14:41:22 2026 GMT
        Subject: CN=6a2c1a93-a9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4c:79:78:b7:18:51:d0:a4:0d:9c:d4:0b:c6:
                    ba:e6:0e:1c:8e:e3:c7:e5:5e:88:1c:89:90:47:11:
                    38:e8:8f:cc:b0:6f:a6:33:cc:23:cc:6e:07:94:a7:
                    4f:02:b3:f6:f4:85:a2:b5:23:ba:5c:a7:50:80:e7:
                    d0:1e:0f:ab:3f:dc:f6:0f:ba:fe:dc:c1:3b:97:69:
                    6b:0f:0c:66:2a:78:81:f3:65:55:95:8a:55:f3:1d:
                    f8:8a:f9:8d:f5:d0:b3:b3:b0:ac:2b:7f:48:6b:8a:
                    aa:e3:52:e1:42:d2:3b:bd:17:16:25:73:df:83:d1:
                    cc:6c:ab:76:66:c7:c1:56:31:98:53:48:15:d4:63:
                    9a:9d:04:46:e5:19:66:f5:8d:00:3d:bb:23:02:b3:
                    75:3e:01:de:72:11:7f:42:27:a3:0e:87:bf:66:69:
                    bd:80:cf:df:14:1c:4a:56:83:8e:ff:31:92:d8:36:
                    d4:e8:5d:37:ed:0e:30:50:ad:80:74:fb:b6:cc:35:
                    c4:3e:14:ac:1f:d1:8e:05:4b:ce:5a:cb:eb:55:8e:
                    fb:18:cf:30:9c:bd:36:fe:c1:80:7e:2e:e9:c7:99:
                    bc:08:70:21:c7:08:81:e9:46:73:88:f1:06:f9:2a:
                    06:60:52:2c:50:83:6f:4b:84:b6:cf:a1:23:80:81:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:49:F1:12:63:6F:F8:0B:DD:20:81:10:12:3C:69:69:BB:3F:D8:06
            X509v3 Authority Key Identifier:
                keyid:E6:8E:D1:24:EF:65:7B:67:9B:D1:2A:58:FA:03:50:14:E0:DF:E8:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/5o7RJO9le2eb0SpY-gNQFODf6Cc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/3C412C36BF3911E9897D7C2EC4F9AE02/5o7RJO9le2eb0SpY-gNQFODf6Cc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:15:d1:d5:26:79:59:e3:90:3a:81:86:78:56:a5:68:6b:b4:
         30:a1:bc:79:cd:ca:e5:10:2b:9d:6e:da:a6:b2:de:ab:6c:1c:
         8e:1b:ea:56:f0:08:7c:a7:17:cb:8e:a4:58:a0:81:86:b5:3f:
         c2:69:2b:2e:f3:fa:2f:dd:3d:4b:83:50:03:c1:78:41:68:8b:
         b1:dd:a0:9d:a5:24:93:29:de:23:c1:46:c5:a3:af:27:fb:e9:
         c9:2d:95:c9:68:5f:ee:e7:fa:b8:ca:b0:f5:03:4b:1c:76:2e:
         cb:40:dd:8c:26:58:53:a9:e5:c3:53:19:28:4a:1a:52:93:24:
         84:41:a2:70:01:13:f2:14:65:56:99:a7:c5:f5:a7:3a:03:d9:
         03:aa:62:ca:1d:9f:a7:5c:22:41:44:a2:03:0c:86:02:26:43:
         a1:b3:20:42:fd:ec:75:7d:b8:67:f2:f6:e1:c9:69:be:5b:e0:
         fa:b2:94:c8:41:b3:86:87:e5:79:95:83:6f:d5:aa:d2:f8:17:
         ca:2b:6a:53:2c:e4:71:78:cd:12:42:ae:a1:77:b3:0f:1e:08:
         1f:56:f8:9c:cf:cc:19:a8:77:ca:6a:f7:e4:54:db:84:93:98:
         98:10:67:97:6b:3d:cc:19:b5:2e:ba:97:e9:6d:ee:4c:54:f8:
         07:ec:31:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:26:11 2026 by rpki-client