Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
File:                     7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json)
Hash identifier:          ncyVc7TC9DUAzNtJUSX8lt3Qjb+d1zRmUAB661auRyE=
Subject key identifier:   EF:FC:59:DF:AF:20:8C:3E:BB:48:FD:A3:3C:A5:2D:06:EE:C1:B8:AF
Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41
Certificate issuer:       /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441
Certificate serial:       0ECF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
Manifest number:          0EC4
Signing time:             Mon 22 Jun 2026 17:40:41 +0000
Manifest this update:     Mon 22 Jun 2026 17:40:40 +0000
Manifest next update:     Mon 29 Jun 2026 17:40:40 +0000
Files and hashes:         1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: j5JzKW/22HNjsaks6oFAggTG2S0BWh2gyIELA7vO5xI=)
                          2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: 0rmIo24F/xivDkmp1ouEx05UaGse9AnbJguTIYYgkf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl
                          rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3791 (0xecf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441
        Validity
            Not Before: Jun 22 17:40:40 2026 GMT
            Not After : Jun 29 17:40:40 2026 GMT
        Subject: CN=6a397398-a4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:a0:99:ee:c3:eb:f3:61:61:76:39:a5:cb:
                    86:4f:ee:ec:f0:9f:de:0f:26:0a:34:5b:c5:a4:eb:
                    7e:92:20:e1:f5:5f:5e:24:22:b3:bc:f2:7d:a6:24:
                    aa:c4:2d:3d:01:00:e5:1f:70:16:31:b1:42:52:a4:
                    01:9c:68:b5:13:81:b4:53:92:94:e1:c0:ab:06:f4:
                    92:97:4a:80:3a:ba:e7:0a:8f:87:07:68:bf:b9:d2:
                    fe:32:11:a8:14:6b:71:47:e9:a6:21:83:9b:0a:0a:
                    92:91:b0:f7:48:c9:c1:f4:ce:6b:62:39:fc:a2:5e:
                    dc:16:18:c9:21:65:a3:e1:79:c1:46:0b:34:46:f8:
                    36:99:ce:7f:d1:8b:6e:8b:be:e6:f7:bc:be:18:fc:
                    81:bf:8b:67:6b:37:2a:98:37:2c:04:88:8f:15:03:
                    d4:33:4a:3a:a9:83:de:1e:35:08:2b:0b:16:18:23:
                    9c:9b:d1:69:91:cc:e0:8b:9e:e9:bc:a1:ab:2a:7f:
                    38:1a:f9:42:f2:cb:c5:46:44:56:5a:e7:71:b3:b4:
                    d7:4a:f7:8e:22:ed:4b:d0:bb:a1:7a:93:8b:3b:79:
                    4c:f5:85:e6:d1:c6:a9:1f:be:a4:cf:4e:0a:8d:79:
                    d9:67:85:65:51:63:d9:b9:27:f2:8c:2f:c5:23:e5:
                    f2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FC:59:DF:AF:20:8C:3E:BB:48:FD:A3:3C:A5:2D:06:EE:C1:B8:AF
            X509v3 Authority Key Identifier:
                keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:8f:ef:cf:92:40:08:b4:56:2d:03:54:52:b8:da:8b:2d:4a:
         64:6b:ec:a6:5e:b0:80:04:22:34:40:56:92:2d:3c:2e:0a:09:
         21:ee:c0:a3:73:24:ca:6d:4c:f2:ff:95:c5:7e:01:8e:60:64:
         67:29:35:b7:40:78:14:c9:f3:2a:4c:a3:6a:0b:0a:65:f6:7d:
         91:5b:5d:46:36:70:77:54:1e:75:3a:92:29:c9:24:74:da:bd:
         e7:59:08:04:2a:db:4f:28:97:d3:3f:05:24:c5:2e:b5:e7:ae:
         da:e1:dc:52:f2:b0:6b:84:43:b1:ca:47:f5:4b:89:93:b1:77:
         93:c0:bf:61:5e:d6:f0:16:eb:b1:b1:c6:0a:5a:f7:a2:5b:47:
         5f:8a:59:8f:22:62:d2:d1:0c:44:cb:63:05:2d:43:d7:87:ab:
         1e:de:0d:bb:e0:ae:b8:5e:d4:4b:b9:9c:e9:c2:f2:fa:6a:b8:
         97:c4:d0:45:21:8c:ee:34:2d:e4:63:77:39:64:79:0b:84:c1:
         0d:1d:b3:33:95:ec:e9:20:fd:3d:3b:d6:5e:35:69:8b:f6:75:
         8a:f8:2c:88:6d:d8:d0:39:1f:4a:5c:09:6b:b1:57:c7:c2:21:
         fa:54:65:ce:26:98:b8:85:d8:fa:ad:8a:63:0a:f7:85:d0:a4:
         fb:c8:a6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:48 2026 by rpki-client