Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
File:                     K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json)
Hash identifier:          BJJ/tpmj7TYjCNayn6U6sXveEHTqF9GJrlj867+00pk=
Subject key identifier:   AD:84:D8:C0:D4:C4:72:5E:64:07:B7:68:13:C2:D2:BC:BF:50:23:7A
Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80
Certificate issuer:       /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
Manifest number:          5D
Signing time:             Mon 27 Jul 2026 10:28:59 +0000
Manifest this update:     Mon 27 Jul 2026 10:28:58 +0000
Manifest next update:     Mon 03 Aug 2026 10:28:58 +0000
Files and hashes:         1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: 1TVM50ab+Q2B4kahhXvNbSHcJqKKH23Q532+s0qg6kQ=)
                          2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: q72z60cZ6WINAMTAmZNi9B2ywwhzErv8MUiPxFqzU0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl
                          rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
        Validity
            Not Before: Jul 27 10:28:58 2026 GMT
            Not After : Aug  3 10:28:58 2026 GMT
        Subject: CN=6a6732ea-1efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:6e:fc:51:fd:9e:2f:16:ac:cb:b4:89:e8:
                    50:b5:6a:c9:75:54:06:5f:1c:13:43:8a:b0:88:e4:
                    cb:9f:74:01:4b:3e:fc:4c:59:26:f7:06:76:79:42:
                    5a:21:c9:0e:29:82:42:65:bf:12:72:5b:38:c8:f7:
                    71:b9:9d:62:9c:ef:8c:1d:11:5d:cb:87:cb:bf:e7:
                    72:2b:af:4f:a6:0a:13:41:50:00:f2:d4:8d:b6:ff:
                    39:c8:55:97:ed:9b:d9:7a:e0:3a:06:63:70:59:12:
                    99:2a:ea:c8:3d:8a:f0:c8:c2:88:44:7b:90:13:5c:
                    47:62:41:c1:3c:8e:27:27:ad:43:0a:b7:a0:77:1a:
                    16:5d:44:07:c4:9e:8c:7b:1f:8a:88:34:85:76:5a:
                    9a:7c:d1:9e:45:85:cc:cb:eb:05:9e:0b:02:49:3b:
                    c9:37:16:f0:e8:b1:05:81:36:08:b0:69:03:78:e4:
                    08:5a:91:35:04:46:74:45:67:15:77:27:78:c2:10:
                    22:d3:a3:8d:7c:9d:be:0d:b4:0e:59:bc:5c:a2:a7:
                    2c:03:d2:ab:be:94:1b:f0:7f:41:23:e0:80:82:61:
                    c8:79:67:8b:e2:8b:55:fd:5e:02:d0:4d:b8:c9:2f:
                    9b:fd:14:83:c1:cf:b1:22:19:78:21:04:be:9a:56:
                    d0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:84:D8:C0:D4:C4:72:5E:64:07:B7:68:13:C2:D2:BC:BF:50:23:7A
            X509v3 Authority Key Identifier:
                keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c8:c4:f5:12:47:53:be:1d:d0:ad:87:14:20:b9:b7:5f:19:
         ec:ce:77:39:03:36:3f:5c:23:4b:20:67:59:cc:d2:e1:e1:98:
         f6:19:49:ee:bb:c0:00:d3:4e:b2:86:52:31:2d:6a:b0:26:5c:
         8b:40:01:32:1f:cb:3e:b9:8c:c6:a4:8c:f3:82:6b:89:f5:d7:
         ce:28:a8:b5:bc:c5:54:3f:30:06:c8:fd:3d:d3:3d:f6:3e:68:
         8c:53:01:47:13:1c:42:5b:43:e4:d8:b5:ad:62:07:42:8e:34:
         85:42:98:3f:fc:af:5b:c9:dc:a7:53:7a:71:53:1c:61:54:1e:
         11:f4:88:6a:c4:3d:52:ea:77:d5:29:fc:b5:3e:8a:c2:8a:2f:
         83:0b:59:38:c3:4f:04:7a:d3:07:0e:b1:a2:5d:f1:a5:83:b8:
         c3:12:68:7e:ca:9a:10:58:0d:39:4c:b4:ff:55:69:bc:fb:9a:
         8e:84:b4:4f:0e:18:c1:ab:8e:07:1e:ec:6e:78:b0:ef:a5:78:
         49:71:e2:fc:36:d0:61:67:28:c7:2d:5d:bd:39:4b:a0:b3:61:
         1b:19:54:af:2f:61:bc:70:11:b9:49:23:68:3f:3c:c4:4f:a8:
         a3:db:7f:82:20:d8:cb:03:9c:99:97:50:c1:23:6b:14:5e:85:
         8f:2f:91:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:34:49 2026 by rpki-client