Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
File:                     07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json)
Hash identifier:          ndmFjwg7jqsf2FhQ9ZVQ49r2BZiSKcjaLoIG9AlKQNo=
Subject key identifier:   17:B6:4D:66:AD:8A:7E:E1:68:6A:A8:E6:65:3E:AA:17:96:B9:FC:2E
Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B
Certificate issuer:       /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
Manifest number:          0278
Signing time:             Tue 23 Jun 2026 02:07:08 +0000
Manifest this update:     Tue 23 Jun 2026 02:07:08 +0000
Manifest next update:     Tue 30 Jun 2026 02:07:08 +0000
Files and hashes:         1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: qeJfleMnEbMVXP36wUqLfpxFXFqmkFzxJeYS7f61Cq0=)
                          2: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: 7LeWas0M3QR0jLIyRnb4OwRP4KvZNSbmaG7fmi94Ksw=)
                          3: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: MAv+qfj8FMNp/Yq/62rBZvkxjMlEQpOzuUtTKjB/c9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl
                          rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 02:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B
        Validity
            Not Before: Jun 23 02:07:08 2026 GMT
            Not After : Jun 30 02:07:08 2026 GMT
        Subject: CN=6a39ea4c-1101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6f:ff:fe:f8:25:4e:ca:5c:f4:9d:31:84:29:
                    25:fd:a4:92:be:7e:a2:dd:67:61:36:a8:e9:64:38:
                    07:b3:2b:68:da:e7:04:ae:8b:92:30:23:0a:5a:ca:
                    3f:a1:01:64:ca:eb:12:cb:f3:37:0f:72:5b:2a:93:
                    6f:26:68:66:1a:19:3f:4f:5a:a5:91:ad:1f:3b:0f:
                    e4:a3:1c:8e:cf:f4:eb:b5:8f:f6:b1:a7:f0:19:24:
                    ab:7c:94:11:ac:ae:d3:13:98:43:32:38:cf:22:19:
                    78:18:d7:0e:06:90:b1:ce:78:21:c5:39:55:7f:e3:
                    a0:2a:58:54:b8:85:1a:5f:78:d7:0a:a4:83:67:88:
                    af:51:03:31:f8:b9:e0:a6:2c:7d:27:3e:d2:5f:12:
                    5a:df:6f:5a:9b:9a:77:6f:7a:7e:5b:d4:c3:be:b7:
                    59:ab:41:2e:4b:91:12:b6:f0:8d:5e:87:fd:6c:28:
                    4b:4c:4a:d4:b9:ba:e9:96:12:cd:7a:57:d8:5e:ac:
                    d6:72:cb:4b:29:f9:00:b8:a7:e6:27:cb:99:a1:fb:
                    4a:79:77:35:8c:e8:f7:65:b9:37:15:5a:54:6f:42:
                    b6:36:16:47:f0:66:32:9a:71:2a:58:4d:80:89:76:
                    5f:33:ff:57:c4:cd:8e:5f:e9:c2:79:e1:91:4d:dc:
                    12:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B6:4D:66:AD:8A:7E:E1:68:6A:A8:E6:65:3E:AA:17:96:B9:FC:2E
            X509v3 Authority Key Identifier:
                keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c8:d0:1a:11:09:1b:73:df:16:0e:8b:b7:ee:79:ea:29:af:
         76:7b:6a:91:d0:e2:4f:af:d8:42:5b:36:d9:40:61:c6:14:81:
         4e:3e:2d:a1:8b:b4:0a:df:dd:6f:42:b5:a6:c4:c1:6d:f1:99:
         5b:bc:03:41:c0:bd:43:93:25:50:b9:04:f2:a0:e9:ab:2d:81:
         d7:30:60:49:b7:50:ac:3a:4b:74:eb:f5:a6:81:fc:73:94:6a:
         3b:e6:f0:55:39:49:5d:0b:b8:94:b3:c0:6c:18:ca:31:a1:34:
         6b:4e:7e:2b:22:1f:f2:f0:4f:43:6f:39:97:46:bf:00:ce:2a:
         a4:b7:a7:0e:ab:72:23:17:98:02:eb:32:65:68:99:49:fb:c7:
         46:b9:36:fc:15:b1:b6:48:0d:c3:67:1f:99:75:ef:4f:5d:d5:
         3b:27:aa:40:c0:ba:64:82:9f:7e:91:48:8e:c7:ec:4a:d4:d6:
         9d:d1:fa:52:77:ab:de:66:4f:e5:91:6a:29:88:5e:a9:1b:57:
         c2:9f:4a:b7:07:4b:d5:cb:31:a8:f3:c7:39:df:d5:f6:2a:49:
         dd:7a:61:79:f6:4f:9b:38:b6:ba:e4:57:5d:50:f1:11:a1:ef:
         19:22:29:23:40:bb:32:2c:9c:dd:05:84:79:6d:db:75:60:11:
         ad:40:e0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:23:39 2026 by rpki-client