Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft
File:                     A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json)
Hash identifier:          oCGT6vAEJElWOQjykuw8iglMieoapLwK6ON4NRf1o48=
Subject key identifier:   64:11:5F:C1:21:F0:17:4F:40:89:A8:EA:EC:FE:45:73:6F:FF:BC:FA
Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F
Certificate issuer:       /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F
Certificate serial:       0A93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft
Manifest number:          0A74
Signing time:             Wed 10 Jun 2026 19:41:09 +0000
Manifest this update:     Wed 10 Jun 2026 19:41:08 +0000
Manifest next update:     Wed 17 Jun 2026 19:41:08 +0000
Files and hashes:         1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: psNJRuM9MSzstzbVEdxDnZ8jGXczZ4KfTl1w8QvRKdE=)
                          2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: FjoaYasaX35xO0OxM5ZHWyDBaB3m3PCkgBiPkzevM+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl
                          rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 19:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2707 (0xa93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F
        Validity
            Not Before: Jun 10 19:41:08 2026 GMT
            Not After : Jun 17 19:41:08 2026 GMT
        Subject: CN=6a29bdd5-c064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c1:ef:30:d9:65:2a:28:e9:d0:dc:69:62:6a:
                    50:2e:e9:f5:34:e4:d0:db:3a:e1:c1:a1:b1:38:cb:
                    96:b2:3d:f1:8d:3b:9b:4e:80:6b:ff:06:bf:e6:4b:
                    75:d5:8d:71:9e:9b:95:33:90:62:64:03:58:27:c5:
                    c1:61:92:d0:22:e8:9c:bd:61:cb:5e:8b:81:10:f1:
                    79:64:67:91:4e:28:0b:0f:84:3a:24:0a:5b:73:f8:
                    3d:60:b7:3a:78:00:3f:f3:45:3c:ab:b4:2b:ae:26:
                    3a:dd:46:a0:f2:6d:e3:5f:fe:a4:63:d3:ec:ca:da:
                    08:97:ea:1d:ee:7a:53:e8:ba:75:c6:09:4a:04:14:
                    44:be:c9:27:c6:76:93:e3:8e:b6:ac:44:bb:7f:47:
                    bf:d9:d0:fc:28:57:c0:d7:67:71:ff:5d:89:b1:f0:
                    8f:2d:02:9f:dd:09:1d:27:76:42:e7:bb:4a:d0:b6:
                    cc:7e:7b:a3:31:18:23:84:f1:b8:4b:cf:d5:fd:1f:
                    8c:ae:f0:c3:42:92:e4:cb:49:3b:2e:72:72:aa:e9:
                    4e:f1:f9:ce:5c:de:6f:2b:49:d9:c2:1a:05:f5:31:
                    79:09:46:71:8f:c9:36:40:60:f3:85:d6:9b:b4:2a:
                    1f:37:78:27:94:4a:18:10:5e:bc:d6:c0:60:65:90:
                    48:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:11:5F:C1:21:F0:17:4F:40:89:A8:EA:EC:FE:45:73:6F:FF:BC:FA
            X509v3 Authority Key Identifier:
                keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:63:43:a1:54:1d:55:64:6c:9f:21:3e:39:d5:57:8e:a6:a0:
         f4:c5:7d:d6:21:80:a9:01:0a:0c:be:d7:44:52:45:bf:00:49:
         62:b6:c1:52:4c:6c:d7:67:c6:51:14:29:2a:db:7f:5c:85:76:
         5e:ab:7a:0e:17:d6:92:c3:c5:7a:7a:5a:cf:de:4d:16:fa:8c:
         c3:e9:c2:12:5d:f3:29:9d:ce:0f:28:d9:75:35:16:5b:79:6a:
         ac:f1:ff:c6:d9:f7:ef:dd:c6:d2:21:7e:69:7e:4d:88:39:fc:
         65:34:79:d5:eb:87:eb:bc:90:7c:5f:23:a3:11:91:2d:ab:a0:
         db:09:dd:45:26:56:d6:26:34:7f:f2:9f:19:4c:7a:41:6b:e3:
         6e:67:e9:4d:b2:85:57:52:f6:11:45:85:3b:12:6c:55:e9:7e:
         62:7f:f8:36:cb:9a:b0:d5:d9:1f:1d:09:3a:c6:83:ff:4f:b0:
         8a:0e:9c:aa:dd:f9:6e:12:e1:be:d4:34:2c:0c:7b:4e:26:dc:
         e6:c5:4a:36:70:6f:01:f5:22:97:69:28:11:db:92:61:05:49:
         f1:9a:76:50:7c:08:7f:38:1d:ba:a4:05:8e:d4:0f:85:8d:d5:
         d6:7c:b7:a8:8a:e7:fe:53:77:03:e5:6d:e8:2a:35:18:d7:9d:
         03:bf:66:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 17:39:05 2026 by rpki-client