Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
File:                     oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft (raw, json)
Hash identifier:          WWaCF2fensAhi4KI9UxRFJAiovsQy1uQJDRfUZ+q/uk=
Subject key identifier:   18:9C:4F:98:23:2F:BB:86:4C:29:F0:6E:9A:61:68:73:13:BB:54:49
Authority key identifier: A0:97:65:5C:C1:3D:7C:9D:8D:AB:1F:21:7F:1F:E4:83:8D:1C:28:5F
Certificate issuer:       /CN=A9159558/serialNumber=A097655CC13D7C9D8DAB1F217F1FE4838D1C285F
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
Manifest number:          25
Signing time:             Sun 05 Jul 2026 09:34:06 +0000
Manifest this update:     Sun 05 Jul 2026 09:34:05 +0000
Manifest next update:     Sun 12 Jul 2026 09:34:05 +0000
Files and hashes:         1: oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl (hash: Tf+ubJYltwZwjR+FZda+s0wIY9xVAxY30z0/orEu/oU=)
                          2: C8482E4C435C11F18454B6E5B6833773.roa (hash: kpOLgyl4KEGTvF971USy71Gh3dYWWDj9RJbZtYOEjJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl
                          rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 09:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159558, serialNumber=A097655CC13D7C9D8DAB1F217F1FE4838D1C285F
        Validity
            Not Before: Jul  5 09:34:05 2026 GMT
            Not After : Jul 12 09:34:05 2026 GMT
        Subject: CN=6a4a250e-70ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:13:71:c6:46:ab:c6:4e:72:a6:23:3b:12:
                    32:c3:15:86:8e:b2:e4:fb:eb:82:89:59:74:63:f4:
                    d3:51:12:5f:b7:19:ec:d1:ec:0c:b4:ab:84:b0:10:
                    10:7d:f6:42:05:ae:0e:00:20:29:f0:a1:58:37:44:
                    7d:02:97:35:3f:0b:01:df:ec:58:df:f3:b3:98:59:
                    68:2e:f4:78:72:cc:79:6d:41:2e:cc:b0:4d:a7:ed:
                    2c:d9:93:e0:6c:3d:69:15:42:5b:83:02:38:33:15:
                    86:a0:f8:ff:2d:64:d4:98:0b:0a:c8:ce:1d:87:2c:
                    27:2e:5f:42:42:79:21:e1:ea:62:fc:0d:e7:86:d9:
                    de:5a:34:ff:64:b7:b7:07:6a:ef:a6:80:a8:1b:76:
                    7e:d9:3d:12:fd:f5:95:69:9e:1e:66:1b:f2:32:53:
                    a6:a3:e3:18:f4:93:66:dd:3b:ec:73:82:e5:c0:99:
                    20:e8:ce:7c:d5:89:28:4d:d8:ff:64:32:b8:98:69:
                    9b:fb:13:2a:eb:b0:a2:7a:81:9a:fa:74:68:95:04:
                    8b:a1:de:ff:08:96:6b:a5:d3:c4:ff:9a:1f:2e:31:
                    41:8c:88:d9:d6:e7:d8:fc:10:33:72:8d:96:15:f4:
                    32:a1:22:06:e1:95:40:ce:1d:21:ec:ed:a2:99:24:
                    a6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9C:4F:98:23:2F:BB:86:4C:29:F0:6E:9A:61:68:73:13:BB:54:49
            X509v3 Authority Key Identifier:
                keyid:A0:97:65:5C:C1:3D:7C:9D:8D:AB:1F:21:7F:1F:E4:83:8D:1C:28:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJdlXME9fJ2Nqx8hfx_kg40cKF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159558/2D86CBE642D211F1B6F10C74C7833773/oJdlXME9fJ2Nqx8hfx_kg40cKF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:ab:08:ac:10:ff:f5:e7:ee:3f:4a:20:cb:17:0b:73:c4:5d:
         7f:52:47:f5:42:ea:91:07:6f:77:a8:02:1d:21:3c:a9:ba:87:
         ea:ad:3c:30:9c:13:06:8c:bd:49:93:98:a9:c8:35:1f:43:67:
         ea:25:6c:9d:6a:fe:31:25:03:be:2d:02:e8:86:ef:f8:87:b1:
         a3:67:2a:bd:91:a4:5a:42:90:d0:ef:85:89:3f:22:d4:a0:23:
         91:eb:fb:d7:57:75:1f:a6:db:f0:b7:cb:f9:3f:17:6b:b5:d7:
         da:d1:b0:11:d3:a7:55:d9:ce:ab:f3:a2:6c:f9:b5:e8:44:62:
         e7:5b:15:14:82:5e:78:6d:c6:05:f7:1f:ef:89:d1:68:a9:0c:
         d1:c5:71:00:18:cc:2a:65:c4:b3:01:2e:11:4f:46:b4:18:8e:
         09:d3:05:9e:b9:10:dc:a0:32:cb:5f:81:1e:a9:38:ce:cb:cc:
         fc:3f:d8:db:18:dc:44:5c:5c:69:34:f6:0f:d6:f8:1d:74:cd:
         c4:cf:29:b2:ef:5b:d2:63:da:b4:f8:e4:d0:a8:99:83:58:4b:
         cd:12:d9:d8:c9:a0:e6:b3:5e:5f:9e:b9:02:5b:c9:b7:56:ad:
         c1:ae:8f:cb:6d:4c:63:a9:3a:6f:c5:bf:c7:51:94:22:1b:3c:
         71:88:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:21:09 2026 by rpki-client