Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
File:                     7KeHdUGmkz3VBhpsggg9O4ORXIU.mft (raw, json)
Hash identifier:          gCaYYVGdbLwDnp6yUPxPhlKxSyy6X2KBmtnP+IWaIoU=
Subject key identifier:   23:82:17:24:42:45:C4:EC:37:DB:9D:EF:8B:7C:79:0C:6B:A7:4A:A2
Authority key identifier: EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85
Certificate issuer:       /CN=A9142127/serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
Manifest number:          62
Signing time:             Tue 02 Jun 2026 19:11:37 +0000
Manifest this update:     Tue 02 Jun 2026 19:11:37 +0000
Manifest next update:     Tue 09 Jun 2026 19:11:37 +0000
Files and hashes:         1: 7KeHdUGmkz3VBhpsggg9O4ORXIU.crl (hash: YtOmmTgcv1Lz0zkqyAnktnQV08kmBxwca2fDfgYA57k=)
                          2: 0A6F23BCD89011F0809DF24792D3641D.roa (hash: LF3tnAF+s60btudK/C+MWOKUVDskcOU/sbbTIojV6RQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl
                          rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142127, serialNumber=ECA7877541A6933DD5061A6C82083D3B83915C85
        Validity
            Not Before: Jun  2 19:11:37 2026 GMT
            Not After : Jun  9 19:11:37 2026 GMT
        Subject: CN=6a1f2ae9-e4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:05:ac:80:24:7e:58:f1:e6:4e:b7:fd:5f:
                    27:70:0f:f2:df:6b:06:28:a4:f4:03:d3:d3:0f:79:
                    35:c1:c8:7b:22:8b:d7:75:32:3c:bc:6c:a1:53:f1:
                    91:43:b3:4f:b8:cc:81:52:9a:1c:50:9a:9a:70:77:
                    60:7c:e4:c4:97:eb:f0:a8:ec:e9:4e:ee:b0:99:18:
                    86:5c:a4:d4:a5:3e:24:65:97:f1:0b:fe:1c:d1:59:
                    82:59:4e:0d:f2:56:f2:84:c4:10:9c:89:f4:57:55:
                    cf:9f:79:a0:96:e7:4f:6d:dd:ca:3e:c2:57:5e:b4:
                    02:48:75:6b:a1:4a:27:6a:b2:5b:91:8c:c8:61:79:
                    e6:d2:b1:af:3a:04:be:06:19:e0:04:7c:cb:3e:ee:
                    8f:07:4a:ee:0b:7c:bc:0c:e0:91:5c:73:84:f9:23:
                    d0:75:69:cd:ec:69:f2:4d:91:25:a3:e3:b2:a8:2a:
                    80:4d:d9:ff:87:fe:06:bc:7c:2c:8c:d5:d3:8f:a7:
                    83:1c:67:03:73:a1:81:11:11:a8:9f:b1:26:2f:b2:
                    5e:60:8d:81:19:2e:f9:61:5d:0f:63:1f:27:53:c9:
                    bb:aa:8f:05:fd:39:02:cf:fb:31:dc:c5:c0:4c:db:
                    b6:13:9a:95:1e:55:f5:15:38:fb:88:30:18:ec:13:
                    15:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:82:17:24:42:45:C4:EC:37:DB:9D:EF:8B:7C:79:0C:6B:A7:4A:A2
            X509v3 Authority Key Identifier:
                keyid:EC:A7:87:75:41:A6:93:3D:D5:06:1A:6C:82:08:3D:3B:83:91:5C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7KeHdUGmkz3VBhpsggg9O4ORXIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/C48FA8FAD74811F0BA1B0D9E6BD3641D/7KeHdUGmkz3VBhpsggg9O4ORXIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:9a:b9:f3:b2:ba:d6:bc:5d:d3:c4:1d:b0:70:3a:14:ce:56:
         89:a0:c9:02:cc:aa:42:c2:6f:2d:33:af:7d:e3:e5:55:75:ab:
         c4:31:a7:2d:4d:6e:93:bc:da:5b:b5:3e:0a:f2:d2:96:03:fb:
         c7:ff:79:df:40:1d:24:de:00:6a:70:42:e9:53:38:fc:9f:4f:
         42:ac:11:49:3d:18:1f:c6:62:62:a0:9c:9b:e2:27:dc:bb:46:
         b0:b5:a8:b8:d8:d5:ba:82:48:62:31:07:b7:4a:4a:9d:3a:a8:
         67:df:08:6e:f8:b2:58:fe:47:cf:7e:5e:0b:41:75:5f:25:b6:
         a7:28:0a:47:0a:31:17:24:02:75:5d:cc:37:ba:eb:f0:87:07:
         93:be:94:07:01:ff:b9:33:63:34:9f:49:3d:c0:0d:07:b4:14:
         22:0c:a4:38:86:d8:b1:c2:ba:7b:3e:07:36:d3:1a:f8:94:d0:
         06:f1:6f:1d:60:4d:e9:11:4a:9d:1e:c9:95:1d:5f:d5:59:36:
         6d:3d:25:ff:3b:8a:88:3c:99:10:83:ef:86:55:5b:23:9d:e8:
         10:4e:60:f6:b7:7b:b4:f9:b2:55:7b:ee:f8:fe:5c:87:fb:56:
         f1:95:65:48:56:89:60:76:65:42:06:73:c3:78:7f:4c:9e:3e:
         73:e5:df:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:24 2026 by rpki-client