Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
File:                     X-0ED6bGtlZOQCsut2NpLOJDB-o.mft (raw, json)
Hash identifier:          8J4dRLAL/qtm9UqgfTBVfC78wq/MgJP1XMMzjlqSOJo=
Subject key identifier:   5F:48:04:72:EB:F0:68:7D:A3:A7:57:0C:24:FE:E5:5D:9C:42:57:27
Authority key identifier: 5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA
Certificate issuer:       /CN=A9192F5B/serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
Manifest number:          7B
Signing time:             Tue 23 Jun 2026 07:56:23 +0000
Manifest this update:     Tue 23 Jun 2026 07:56:23 +0000
Manifest next update:     Tue 30 Jun 2026 07:56:23 +0000
Files and hashes:         1: X-0ED6bGtlZOQCsut2NpLOJDB-o.crl (hash: 53g6fmBQbqVpeKWv9NqydLfskqNJOnGv4rnGInDRSjY=)
                          2: B44C2C06B4B211F08EEFDF43C4F9AE02.roa (hash: YYsxvMPCRrMVXD10L+51rkoUdNPvTH6rY0GaRqBHiU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl
                          rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 07:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192F5B, serialNumber=5FED040FA6C6B6564E402B2EB763692CE24307EA
        Validity
            Not Before: Jun 23 07:56:23 2026 GMT
            Not After : Jun 30 07:56:23 2026 GMT
        Subject: CN=6a3a3c27-8a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b2:34:44:ce:30:de:5f:c8:3c:05:4b:62:4f:
                    3b:b2:58:92:47:49:ec:e0:9f:51:6a:e4:f2:fc:68:
                    f7:67:54:e6:5e:41:e1:31:9d:68:bf:da:e9:34:ca:
                    55:db:e4:c5:71:83:fb:bb:f3:38:b1:12:c4:7d:88:
                    6a:b5:22:d8:da:6d:e4:e6:0a:79:8a:d0:64:3e:e4:
                    6a:d5:70:fc:01:93:0c:19:02:60:68:1d:f4:24:b4:
                    bf:31:36:3f:a5:d5:ec:a2:f4:c4:fc:d4:53:f7:92:
                    2a:a4:1a:ab:6a:05:86:ce:a5:f8:da:8b:59:54:c8:
                    52:d4:d9:71:6a:d7:e5:2d:4f:06:59:f9:10:a3:f8:
                    4c:c6:17:66:7a:de:d9:e9:25:86:93:b5:9a:93:55:
                    86:fb:25:f1:8f:58:f7:64:8f:b7:d8:11:6c:90:e6:
                    7b:c0:8e:8a:f5:3d:f1:01:45:2f:9c:d3:3d:31:80:
                    b8:90:d1:0b:29:6e:f5:d1:d7:0d:25:fb:88:58:2e:
                    ac:c9:2f:98:25:e4:2e:3d:84:e5:ec:27:75:f7:2a:
                    ac:8a:54:6b:6b:5e:49:1d:b9:b6:b4:48:b0:3a:5d:
                    09:ce:36:17:b3:43:0a:59:90:32:e8:66:c7:db:71:
                    da:ed:a7:15:2c:6d:d7:9f:9d:b6:f6:27:84:0e:00:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:48:04:72:EB:F0:68:7D:A3:A7:57:0C:24:FE:E5:5D:9C:42:57:27
            X509v3 Authority Key Identifier:
                keyid:5F:ED:04:0F:A6:C6:B6:56:4E:40:2B:2E:B7:63:69:2C:E2:43:07:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-0ED6bGtlZOQCsut2NpLOJDB-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192F5B/D71DC254B4B111F0ADC2B11FC4F9AE02/X-0ED6bGtlZOQCsut2NpLOJDB-o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:b5:c0:e4:31:37:25:3c:a8:eb:4c:79:a1:0a:23:b3:73:b4:
         df:2b:15:3f:2f:39:57:4b:6b:7a:9c:6d:fd:b7:29:0a:50:9e:
         11:2a:f2:10:f7:c0:a6:22:b5:9c:d0:21:51:6a:b0:8b:bd:cb:
         1f:f2:6c:a5:23:7e:1a:85:79:92:70:50:ec:f1:ea:d6:03:22:
         65:4e:05:db:cf:88:f5:72:36:6b:ed:dd:09:2d:95:1d:11:8d:
         80:48:24:99:0d:d5:96:43:1f:f8:20:9b:83:45:74:62:4d:5c:
         37:98:bb:13:eb:83:db:48:53:ab:c5:17:01:20:a0:e7:ea:60:
         f2:9c:a5:08:03:24:74:f1:33:83:fc:14:f6:96:75:40:57:e7:
         ee:54:54:3b:ca:13:16:42:8a:94:4c:8e:4c:82:ba:ff:3d:30:
         73:f2:c7:8b:ca:af:e1:d7:78:c6:e9:6b:3b:57:b9:fd:c4:54:
         1a:ad:6e:01:32:69:cf:fd:ea:7a:c6:b3:8e:32:f1:a6:c6:35:
         4c:6f:57:a5:9c:bf:21:71:29:12:a9:08:99:22:1f:53:a5:71:
         a4:f7:1f:3f:ad:94:96:53:60:35:15:cd:39:b9:1e:93:3c:25:
         29:22:df:a4:6d:91:29:96:91:2b:bb:6a:af:5c:eb:62:20:0d:
         26:87:37:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:14:54 2026 by rpki-client