Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
File:                     K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json)
Hash identifier:          Q00ToQJREj1jUgGxs6xj+8tnq2egQ2P6WQN93OS4tuw=
Subject key identifier:   31:6D:3B:45:76:10:A5:15:51:BB:24:D9:E2:6F:0D:2E:6E:F9:86:9D
Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80
Certificate issuer:       /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
Manifest number:          11
Signing time:             Sun 01 Mar 2026 10:35:52 +0000
Manifest this update:     Sun 01 Mar 2026 10:35:50 +0000
Manifest next update:     Sun 08 Mar 2026 10:35:50 +0000
Files and hashes:         1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: 07YD189YHhBin/22YZJCMLSC2N/uSn3MxbBsVUFmG2Q=)
                          2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: fUHogMZz4tdUvZu8KePo12NLDRRZoGN3PVp3/Klsp1o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl
                          rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
        Validity
            Not Before: Mar  1 10:35:50 2026 GMT
            Not After : Mar  8 10:35:50 2026 GMT
        Subject: CN=69a41687-18ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:8f:88:ea:1e:ca:0d:ed:04:ed:60:db:22:
                    bc:4c:b2:3c:1e:d6:7d:25:e0:7f:85:42:35:e9:0e:
                    ab:5a:ef:43:9e:90:90:4f:91:28:2e:f2:50:ea:d9:
                    df:a2:1c:4e:62:f6:6d:12:93:6c:4e:c9:ee:ec:68:
                    e6:c7:35:75:ea:b4:d3:d6:fa:32:9d:c8:0f:6c:ed:
                    86:2e:21:3a:ef:47:b5:6d:3d:26:2c:18:cb:15:bf:
                    97:2c:d4:b7:89:c3:a3:cb:75:a0:fb:a9:a7:31:3d:
                    28:90:0f:36:b7:0f:f8:d9:34:49:00:e9:11:06:43:
                    83:d0:34:a5:6e:b6:d3:ff:a9:92:b5:b2:19:d5:79:
                    77:59:35:85:c9:ed:d4:df:92:05:78:04:c2:4e:b2:
                    7e:c6:2f:4d:27:82:7e:18:f2:ee:90:71:8d:1c:87:
                    75:f0:93:d6:9f:dd:3f:28:65:93:c0:fa:36:f9:be:
                    f8:ac:3d:ae:98:1c:bb:f8:fc:ee:79:dc:dc:f8:4f:
                    a4:31:aa:f1:bc:ab:9d:7c:03:b4:d1:0e:7f:66:81:
                    57:1f:83:49:03:f0:86:b2:c8:a2:33:a1:ac:5f:f3:
                    e4:a7:0c:33:ca:5c:79:4e:78:f2:82:63:dc:03:d9:
                    a6:9a:15:83:49:c0:11:94:0a:ea:62:94:34:59:6c:
                    e0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6D:3B:45:76:10:A5:15:51:BB:24:D9:E2:6F:0D:2E:6E:F9:86:9D
            X509v3 Authority Key Identifier:
                keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:cc:ab:50:7c:5c:0e:58:fd:5b:c4:9c:d1:3e:46:58:bd:cc:
         fd:0b:55:58:eb:2d:a6:ee:89:5c:32:33:cf:ef:cd:56:1c:00:
         80:3f:18:6f:34:d3:cb:63:45:c0:da:75:35:b9:d5:e8:5a:85:
         2a:ae:23:d4:d7:0f:92:0f:99:b4:b2:f1:fa:99:b2:73:b5:24:
         ff:d1:19:85:63:93:6b:94:6e:cd:ec:be:d9:ba:d2:ce:ad:c7:
         ac:b6:6d:96:15:41:0c:8f:b6:b8:bf:c9:31:ca:c6:0d:22:2f:
         7e:a2:14:93:58:c2:c5:88:ee:83:6b:bb:63:64:19:53:4b:0a:
         71:ce:59:82:41:37:0e:0a:cb:28:2c:60:18:2c:ab:fe:d2:48:
         4f:89:29:dd:b4:16:76:aa:03:39:32:ce:bb:e0:22:e3:f9:41:
         9f:3e:33:53:1b:14:eb:22:f9:ee:a1:3e:5d:ec:92:9d:ef:4b:
         14:b8:8c:3e:f7:17:4e:6f:d8:70:cb:77:3e:98:0b:eb:d9:c7:
         06:4a:d1:69:19:92:f9:ba:2a:b5:24:18:5e:48:52:1f:b7:77:
         d6:a3:ed:22:67:eb:2b:e7:35:97:f1:a4:61:94:34:4c:4c:6a:
         19:ec:de:a6:3b:7a:49:9e:35:04:b5:64:2a:c7:21:02:75:78:
         a0:3e:c1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:18 2026 by rpki-client