Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
File:                     K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json)
Hash identifier:          whDtd9+C5wvwQ9cnbNufWme0VlwE1nj+u6jhRdwfRv8=
Subject key identifier:   22:85:E8:21:EE:8A:9B:CD:D0:8B:F3:EB:4C:20:63:0D:26:46:83:BB
Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80
Certificate issuer:       /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
Manifest number:          47
Signing time:             Sat 13 Jun 2026 08:31:24 +0000
Manifest this update:     Sat 13 Jun 2026 08:31:23 +0000
Manifest next update:     Sat 20 Jun 2026 08:31:23 +0000
Files and hashes:         1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: N4OMpLWyQnq/GAxaQuVtbAB1vr4MvgUa50kmI8YEGD4=)
                          2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: q72z60cZ6WINAMTAmZNi9B2ywwhzErv8MUiPxFqzU0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl
                          rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
        Validity
            Not Before: Jun 13 08:31:23 2026 GMT
            Not After : Jun 20 08:31:23 2026 GMT
        Subject: CN=6a2d155c-0ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:7b:44:2a:23:51:92:d3:a2:47:fe:56:1e:
                    36:66:78:7c:a6:db:51:ba:d2:89:28:1c:d3:27:40:
                    d6:ea:b7:f5:92:df:f7:3f:ce:b3:b4:52:d7:ec:b7:
                    01:39:c4:13:70:b8:d8:3d:b6:c9:88:28:77:b2:85:
                    04:54:9d:c7:43:c4:e9:cd:cc:2c:38:74:bc:d7:20:
                    da:6b:12:b4:37:19:f7:8f:1c:6d:f7:c9:ba:2d:b7:
                    1f:44:47:79:aa:51:ba:fd:31:5b:85:b3:bb:0a:94:
                    81:5c:ad:c8:1b:a6:72:28:bc:70:79:6a:6e:ab:c1:
                    97:4c:7e:10:d6:10:be:79:9f:df:51:47:73:29:01:
                    23:4f:65:53:94:37:68:ec:f0:53:a2:1e:73:3d:76:
                    f9:5b:53:e5:97:d0:4d:ad:00:fc:61:9a:26:8f:1f:
                    c1:cb:d6:24:94:a2:8c:b2:a9:d9:09:62:94:28:69:
                    9c:bf:b1:34:ca:da:1c:ba:c3:40:d2:3c:c7:c0:e3:
                    1c:87:ef:7d:ea:d8:c6:35:11:9e:11:12:0d:5a:80:
                    bf:dd:27:b3:b2:25:a6:32:77:91:69:2e:10:6f:d2:
                    74:99:ab:85:9f:17:3d:b9:cb:0b:9e:6b:77:61:c6:
                    64:67:8a:41:84:e5:ce:9a:06:2b:e3:00:ae:8c:8b:
                    1e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:85:E8:21:EE:8A:9B:CD:D0:8B:F3:EB:4C:20:63:0D:26:46:83:BB
            X509v3 Authority Key Identifier:
                keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d2:eb:ee:7c:55:1f:65:cb:5a:d3:17:ba:e0:62:b8:e2:30:
         5e:3c:3e:d7:f7:b9:d4:34:33:bf:fb:95:04:3d:45:61:26:b4:
         15:19:f8:23:1f:c6:44:48:3f:0b:28:c8:aa:ed:a2:c0:9d:d7:
         98:a5:1d:0b:55:2b:b6:0e:33:c0:03:49:f4:6e:74:37:54:c6:
         d8:42:ed:c1:0b:31:1d:6f:90:0c:2e:ec:91:0c:02:2d:17:47:
         17:ea:7d:6e:e2:3c:5a:75:80:66:fa:c0:ab:64:64:ab:29:37:
         22:d6:ab:ad:62:bf:e5:54:3a:2a:a2:48:45:73:37:9b:47:94:
         23:e9:78:8d:6f:a0:ce:a8:f5:54:15:64:08:cc:a8:16:1b:08:
         fa:02:99:8e:03:72:45:7e:86:46:64:07:ae:e4:b4:69:05:fd:
         8c:82:9b:94:08:8e:18:7e:9b:2e:a0:22:e8:85:ce:cc:f9:7e:
         3f:50:1d:42:5f:5e:d1:51:d5:a5:e0:6a:ba:5a:6a:a9:c2:a7:
         30:65:b3:4b:55:a6:9c:7f:25:3d:01:49:d8:33:2f:29:6b:e9:
         6d:07:56:10:d3:94:f2:27:82:bc:70:51:3b:17:08:b9:b2:6e:
         5f:a1:05:fa:2b:7f:3b:56:cc:b8:92:a3:e0:ab:5b:60:e5:ff:
         cc:ca:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:39:24 2026 by rpki-client