Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft
File:                     OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json)
Hash identifier:          Rr+Tnf0CbdssAzgjb6h91/ESHh0TsylvZRoF1zHzWpE=
Subject key identifier:   E9:33:61:52:FE:93:97:27:4D:1C:B5:EC:C6:C2:C4:C5:D4:C3:33:E6
Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C
Certificate issuer:       /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C
Certificate serial:       0A88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft
Manifest number:          0A77
Signing time:             Tue 28 Apr 2026 19:53:31 +0000
Manifest this update:     Tue 28 Apr 2026 19:53:31 +0000
Manifest next update:     Tue 05 May 2026 19:53:31 +0000
Files and hashes:         1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: cuAQXIzjd338GW0LEMjnd8BRizT9v/an7DmDese2VUI=)
                          2: C9F37B86584111F09E8EC450C4F9AE02.roa (hash: lMbLeQ9y+VcqNaUu40E6Ont31pNHR+PjOYoL46iU/ug=)
                          3: E35939C2261711EC9990A750C4F9AE02.roa (hash: tTZXDpG6s0I7epPtJd00/Iy7JGi1h8+PbbN85OVIZMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl
                          rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 May 2026 19:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2696 (0xa88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C
        Validity
            Not Before: Apr 28 19:53:31 2026 GMT
            Not After : May  5 19:53:31 2026 GMT
        Subject: CN=69f1103b-14e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:63:d6:b8:69:bb:fb:27:0a:06:32:eb:1b:
                    78:2c:9a:05:e7:54:5c:92:9b:f5:88:39:a5:be:89:
                    56:20:19:b7:da:42:dc:98:f7:ff:4b:c1:09:be:37:
                    7e:9e:77:57:fe:3b:d3:f8:2e:e7:6a:49:13:54:95:
                    b5:6c:72:14:6f:e8:92:2f:4e:54:c3:53:70:ae:00:
                    0e:b6:c1:63:54:73:7b:03:ba:91:3e:76:a7:72:70:
                    61:80:10:ac:d4:c5:a1:3b:4a:ca:7b:2b:dc:cb:7d:
                    c6:ae:4e:49:dd:71:e9:4e:ca:90:42:b9:89:41:dd:
                    9f:8f:c2:c6:c0:a0:61:c1:39:97:b6:c6:d3:13:62:
                    9c:e7:d2:14:86:ff:9f:23:90:e0:b4:a7:b4:8d:b3:
                    85:79:5c:3a:b5:f2:a8:a1:56:f4:dd:5a:09:0a:34:
                    a0:47:a4:fd:ea:ac:3a:8e:a6:2a:65:38:83:11:58:
                    ce:02:56:1e:7b:ff:45:12:d8:c9:b7:e1:59:f7:04:
                    e3:90:a8:a4:9e:be:42:a7:5b:d9:8c:61:3a:f4:38:
                    41:53:f9:b1:be:1d:a1:5e:57:b1:69:64:c0:89:d3:
                    a1:9e:a1:7f:0b:94:4d:c2:8f:76:98:6c:aa:9b:e5:
                    53:7b:8c:0e:8f:0d:4e:9b:52:26:4e:3d:74:61:a6:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:33:61:52:FE:93:97:27:4D:1C:B5:EC:C6:C2:C4:C5:D4:C3:33:E6
            X509v3 Authority Key Identifier:
                keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b3:b8:09:85:81:35:27:65:55:60:49:dc:f9:cf:02:16:d1:
         ea:a8:c3:ec:ff:38:23:88:af:5f:60:35:ca:f4:2c:6b:30:0d:
         6a:e7:28:6c:ba:cf:19:b7:c9:a6:08:4e:5a:e4:53:37:8e:b2:
         3e:2b:48:6c:5b:6a:03:54:80:df:dc:40:bf:9b:79:64:7e:1e:
         27:a0:34:f4:76:e4:88:31:92:91:6e:f4:6d:92:4e:75:55:30:
         3b:a9:33:da:21:40:d7:2a:78:e5:d3:01:17:c0:82:4f:e0:82:
         5c:aa:f0:49:ce:5b:e3:84:27:02:ca:e2:b9:b1:dc:46:ef:94:
         6b:2d:03:b4:85:aa:6c:71:42:3a:ac:c8:50:8e:2c:88:a5:68:
         e5:f1:aa:e9:9e:46:c7:26:c6:73:ca:69:2c:4b:0f:09:de:f4:
         a1:6f:e4:a7:e0:08:4a:c7:04:ea:fa:0d:62:85:21:89:3d:49:
         4b:b8:d8:25:71:b9:4c:95:bc:2c:5e:3b:b1:d6:7f:b7:47:eb:
         6c:d9:8e:40:0e:9b:95:06:a4:f2:be:17:4e:ef:5c:f1:c8:4b:
         07:c4:63:c3:7d:68:1d:4e:6e:02:71:2c:87:ca:84:88:dd:22:
         29:bf:56:68:bb:ae:fb:f0:32:af:2b:71:15:26:16:04:6b:1a:
         e0:8c:da:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 17:26:49 2026 by rpki-client