Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
File:                     KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json)
Hash identifier:          gfgYN5BNimPyWc8HtIXpHe5iNTyUcEdSR9+yEQ1E0Rw=
Subject key identifier:   3C:90:BE:D5:BD:3A:B9:CF:64:00:5B:E6:8A:68:46:42:A1:F7:9C:5D
Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
Certificate issuer:       /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
Certificate serial:       06C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
Manifest number:          06B0
Signing time:             Mon 10 Aug 2026 22:05:06 +0000
Manifest this update:     Mon 10 Aug 2026 22:05:06 +0000
Manifest next update:     Mon 17 Aug 2026 22:05:06 +0000
Files and hashes:         1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: PsJHhGi48MiNvpZuoqZm/bFGMyq0krye2qNkXYadJeo=)
                          2: 590697D6465611EE8128031BC4F9AE02.roa (hash: VAtwg4JA7DKaiR1Y/aQYlkU3CfV+E/YtMAPsl8ob9cY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl
                          rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Aug 2026 22:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1731 (0x6c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
        Validity
            Not Before: Aug 10 22:05:06 2026 GMT
            Not After : Aug 17 22:05:06 2026 GMT
        Subject: CN=6a7a4b12-15ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:67:0e:90:19:b3:d2:57:28:3a:21:90:99:
                    9d:1e:1c:3e:e9:d4:32:cb:ba:18:39:82:49:85:cc:
                    76:06:6f:37:41:98:d6:64:36:3c:1e:23:2a:f8:54:
                    50:05:45:a7:2c:5f:d6:a9:f8:df:e3:53:e8:a2:98:
                    64:fb:55:00:e8:87:52:6b:e3:14:fe:ce:83:9a:dd:
                    43:eb:57:bf:19:d5:84:52:3a:69:58:ac:73:8f:38:
                    c5:96:7c:68:33:5a:33:84:18:15:23:53:b1:93:59:
                    2d:b7:24:d8:ba:bf:8c:b8:a2:de:88:1c:a4:0f:b9:
                    15:9b:0b:1f:2a:79:47:63:6d:50:64:1f:12:8f:30:
                    94:d0:5f:d9:0d:41:aa:42:37:aa:95:af:c2:c7:7d:
                    aa:98:6f:6b:74:74:90:a7:fe:bc:67:4d:93:3e:81:
                    63:7e:01:58:e6:41:95:07:24:70:b9:41:cb:67:0d:
                    34:45:b8:79:2b:59:f5:ae:b8:c5:c0:30:07:79:b0:
                    89:96:5c:1b:12:14:19:8e:95:1d:f1:72:97:dc:71:
                    e5:43:8a:f3:ba:d0:12:a3:37:2c:06:47:d5:9a:76:
                    2e:bc:fd:14:01:7e:38:86:8a:d8:56:43:00:30:14:
                    34:dd:18:d4:68:4c:7f:05:4c:d9:90:55:ee:25:93:
                    f7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:90:BE:D5:BD:3A:B9:CF:64:00:5B:E6:8A:68:46:42:A1:F7:9C:5D
            X509v3 Authority Key Identifier:
                keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:30:04:18:ad:a1:94:ef:11:96:75:20:01:24:8e:3f:ce:db:
         31:89:4c:d0:cb:38:62:ae:3f:4a:e8:76:75:a4:a5:a8:ac:d6:
         86:ec:72:4c:b0:a5:c6:1e:4a:00:85:5c:66:dc:be:67:93:1d:
         f2:29:a2:40:4f:c3:c2:48:06:ae:cf:f7:8e:0d:bb:ea:1f:81:
         1d:fb:32:60:ac:8d:92:36:92:53:56:5f:6f:77:d3:22:ad:d8:
         ba:4f:f9:f1:0a:64:c0:b5:e2:00:61:18:b0:b5:fc:81:d6:50:
         6a:e1:60:5d:d8:35:fc:02:32:81:ba:f5:1f:b6:5d:6a:45:a5:
         f3:09:1c:56:7f:e2:0b:8e:94:0f:1e:2b:66:d8:e7:d2:fb:3e:
         b4:c2:91:08:7d:ac:f0:8f:c1:04:c6:c0:6e:7c:a9:c7:6c:93:
         77:9b:c5:91:2d:84:71:9d:90:4a:22:c9:6d:f5:c2:be:c7:28:
         de:e1:c1:1a:f4:ec:22:70:5b:85:26:d9:b5:fd:c1:0b:c6:29:
         ca:f6:82:a2:fc:f9:53:36:22:c1:7a:0c:1e:68:62:c5:88:91:
         7a:d2:d2:93:0e:7f:a6:fe:1c:33:aa:d8:1f:23:2c:a5:33:af:
         ab:76:d3:65:12:b3:ed:1d:11:2f:df:51:30:b5:2d:30:23:59:
         5d:f0:95:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 20:12:44 2026 by rpki-client