Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
File:                     ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft (raw, json)
Hash identifier:          BEtkk6JelR4KCw6ljopnSh1txNPmz6TvlJtHieYkmiE=
Subject key identifier:   42:70:0F:F0:EE:0D:EC:2B:FA:8D:4D:14:10:C8:5D:7E:50:40:F0:3F
Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
Certificate issuer:       /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Certificate serial:       0C94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
Manifest number:          0C77
Signing time:             Wed 10 Jun 2026 18:42:13 +0000
Manifest this update:     Wed 10 Jun 2026 18:42:13 +0000
Manifest next update:     Wed 17 Jun 2026 18:42:13 +0000
Files and hashes:         1: ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl (hash: CB8fjLV21S86zqrvupIjth2VxJ6c2rk3VtcFUg7euSU=)
                          2: 10CF1D82C0E311EE81F3E987C4F9AE02.roa (hash: 2A0LGFbTxJM1CyVE/zh4gUOdkdA5g554p/UKkKfLEQk=)
                          3: 65BB2B42C0E311EEBEF3D409C4F9AE02.roa (hash: TTxeq1OMdbgzaP7dTYMc6Fs5lQ+8FxgwD7ohl1EhyQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl
                          rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3220 (0xc94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
        Validity
            Not Before: Jun 10 18:42:13 2026 GMT
            Not After : Jun 17 18:42:13 2026 GMT
        Subject: CN=6a29b005-7989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:81:40:04:1d:de:19:db:99:38:16:19:37:
                    50:f6:3d:c3:bf:6a:f3:01:cf:f6:5c:3a:18:83:f8:
                    83:08:85:98:46:63:d7:e5:bd:d7:67:55:74:1f:a9:
                    8b:3d:99:aa:4d:31:8c:e8:29:2c:d7:76:71:4a:79:
                    be:9c:fe:e5:9b:bb:7b:98:e4:7c:28:15:f6:8d:77:
                    16:22:62:cf:9b:15:88:34:ff:54:11:8e:0a:15:13:
                    a6:b4:d5:83:84:0e:e5:3f:d2:40:99:3f:a4:90:24:
                    7a:ed:eb:13:88:fc:ec:fc:e9:8c:4b:3b:ea:0f:88:
                    47:6f:3b:e6:0f:af:91:76:88:17:6e:81:1a:92:16:
                    40:d4:e1:f4:e9:ac:60:83:1c:e1:a3:e6:96:36:b8:
                    03:83:92:25:14:c1:3a:cd:db:92:86:bb:56:46:71:
                    14:5a:36:fc:8c:af:40:14:9d:2c:c4:a4:db:9f:9b:
                    75:69:a1:ba:eb:92:ae:68:d1:bb:d2:be:f5:10:4a:
                    9d:68:16:b7:21:97:e0:22:24:01:ef:99:c8:0a:20:
                    c3:e7:67:5a:5d:75:d2:ac:ac:f8:73:f6:f1:2a:d5:
                    a0:d1:ed:f8:fd:ba:66:04:37:99:4a:f2:3d:18:33:
                    61:82:c2:a1:20:95:33:96:aa:26:4f:d3:75:a2:e6:
                    68:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:70:0F:F0:EE:0D:EC:2B:FA:8D:4D:14:10:C8:5D:7E:50:40:F0:3F
            X509v3 Authority Key Identifier:
                keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:dc:68:28:5f:f8:18:e2:08:24:f2:dc:c4:9d:8a:2d:37:86:
         b2:43:e1:9f:b0:f0:44:9c:96:8b:ff:4e:48:36:5b:68:bd:63:
         a3:a9:0b:92:7a:bb:cc:64:8a:c8:cb:f9:ee:31:04:5d:0e:a6:
         3f:19:c4:d3:4a:df:1d:ae:4d:cf:39:41:a4:7c:e5:1a:30:75:
         4b:64:73:9e:ce:23:5e:c7:10:50:e6:b5:46:4e:47:40:61:5d:
         4c:03:27:ab:96:00:e7:11:14:f0:e3:01:ff:59:a5:f8:cc:32:
         fa:fd:75:2e:0a:b0:99:7f:a7:9a:c4:d5:a1:84:a8:7b:02:12:
         8e:34:cc:59:68:38:2d:4f:4c:43:44:45:dd:4c:ed:04:f9:54:
         36:7c:8d:5f:10:74:91:5a:62:9f:f1:45:6e:f4:04:be:82:4a:
         86:04:5d:db:71:c4:0b:07:51:15:47:67:50:50:b5:d9:e0:2f:
         86:f7:7a:26:e0:10:47:45:d6:83:a2:5b:46:83:4b:75:67:91:
         8c:55:63:2c:78:8e:7c:1e:3e:c5:3e:34:ff:65:cd:77:f2:60:
         b4:35:5f:90:1d:b3:a9:d5:cb:f3:43:58:fd:5c:61:ab:69:66:
         fc:64:5e:fe:9e:a0:e6:ce:3e:60:83:dc:62:e2:23:6b:31:32:
         4b:a5:3a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 19:16:41 2026 by rpki-client