Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
File:                     fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json)
Hash identifier:          DHOSIcnQd4I+3/rxDmDPpmBYq8lqGQv+HU4u55WbCDQ=
Subject key identifier:   E0:5B:EE:86:F6:FC:57:21:15:0E:8D:2F:7A:69:BD:FE:2F:C4:56:2C
Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
Certificate issuer:       /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
Manifest number:          A7
Signing time:             Mon 01 Jun 2026 08:01:50 +0000
Manifest this update:     Mon 01 Jun 2026 08:01:49 +0000
Manifest next update:     Mon 08 Jun 2026 08:01:49 +0000
Files and hashes:         1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: u9t9n1zQzi6u8QZekLrc2p0uLS6jf28H1YfHQlYzOTM=)
                          2: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: nT8Gn6kmDh+P+vCU8iV+2GM1ote3Wc58DjS3MS+fe0c=)
                          3: 21C5B04263A311F096468248C4F9AE02.roa (hash: EsPSnLTOkuXRSGQKefe1p2f6RMEUDwMDeK+ind9kj7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
                          rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
        Validity
            Not Before: Jun  1 08:01:49 2026 GMT
            Not After : Jun  8 08:01:49 2026 GMT
        Subject: CN=6a1d3c6e-62fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d5:76:d1:24:9b:28:f0:c4:13:5c:fe:31:5b:
                    80:0e:e0:83:eb:d4:44:48:a2:d5:a7:84:44:56:16:
                    76:46:78:cc:b5:d4:9a:14:46:02:f3:29:38:ab:60:
                    f7:39:f4:1f:91:05:41:b7:29:21:f8:79:06:a6:80:
                    66:a6:88:fc:b1:84:e7:97:03:98:c6:4a:67:7d:80:
                    47:60:74:06:19:4a:5f:57:5e:02:ef:61:42:a5:93:
                    16:6e:98:c6:a7:a0:cc:fe:b1:58:b1:76:bb:4e:84:
                    5a:0b:8e:9b:84:a3:9d:3c:e3:7c:d0:bf:aa:75:59:
                    50:32:45:35:bc:35:07:f6:a5:c5:10:c8:67:8b:10:
                    87:f1:5b:7e:77:7e:ba:13:f2:9d:e7:73:14:66:de:
                    68:ee:15:a7:22:e3:eb:54:41:3e:67:bc:ae:dc:15:
                    5c:88:be:b0:a1:ef:25:73:c6:ba:82:4f:4f:50:2e:
                    06:78:f3:4e:eb:67:38:f2:7b:65:d3:3e:e2:85:08:
                    fd:b3:09:25:ed:93:7e:cf:14:89:2e:55:7e:39:5a:
                    88:73:b6:4b:27:c4:53:6a:39:df:dd:15:56:19:f6:
                    b4:cd:b0:cf:ab:cd:25:2e:00:60:45:48:2c:06:29:
                    7b:af:21:38:1e:a5:86:68:48:51:b9:ab:5e:29:a3:
                    3a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5B:EE:86:F6:FC:57:21:15:0E:8D:2F:7A:69:BD:FE:2F:C4:56:2C
            X509v3 Authority Key Identifier:
                keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b2:4e:77:ae:70:2b:e2:9b:38:c2:8a:92:cb:d0:e5:a1:58:
         c7:f2:a8:d2:ee:97:2a:28:a8:17:ef:3a:71:08:60:a3:a2:86:
         db:eb:61:98:1e:f3:0d:43:04:80:39:9f:06:a2:b2:8b:e7:19:
         8c:90:ad:34:83:67:c9:aa:60:d7:a7:86:c4:15:8d:00:1c:9b:
         18:50:80:c2:75:fe:e4:bf:6a:95:0d:42:20:1a:0f:b8:1d:3f:
         e9:6b:8f:65:82:88:ff:04:66:d9:65:ae:64:2f:c5:18:07:31:
         f1:9a:12:f9:fc:ea:fa:08:a1:c4:56:31:44:86:5f:28:af:e0:
         f2:00:c9:50:97:2c:d5:ce:2d:93:94:97:0d:43:f4:4a:6c:89:
         58:40:42:ec:70:5e:4e:a8:a6:e7:d0:c2:5e:56:ee:6c:24:0a:
         bb:3c:04:36:b9:6a:f2:dd:54:7e:5b:cc:25:de:7c:d8:cd:a3:
         a9:ef:ce:55:78:c2:1a:ab:ee:03:50:06:eb:b1:25:ab:27:57:
         f5:bd:5a:0f:99:8a:c9:6b:5e:57:e0:be:51:a7:98:63:0e:cd:
         01:40:2b:29:f5:91:ae:78:04:04:e2:f0:9a:4d:6a:2a:e2:34:
         47:ac:9d:ba:55:2c:56:d1:d6:a9:e8:cd:87:47:32:23:8f:8e:
         bb:b7:7c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:53:03 2026 by rpki-client