Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
File:                     K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json)
Hash identifier:          V9HV+7MDTv9z/32o3DyMsFivP2rqRUlrPyEUIA31G9g=
Subject key identifier:   F7:87:8A:AA:5B:7A:88:40:98:05:86:A2:49:7C:E3:00:E7:2E:AE:9B
Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80
Certificate issuer:       /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
Manifest number:          80
Signing time:             Sat 03 Oct 2026 08:27:48 +0000
Manifest this update:     Sat 03 Oct 2026 08:27:48 +0000
Manifest next update:     Sat 10 Oct 2026 08:27:48 +0000
Files and hashes:         1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: sTjLpXCMkbrpJxWe04+JUj1t5dEPUa7Nvlb0cvaEUvU=)
                          2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: q72z60cZ6WINAMTAmZNi9B2ywwhzErv8MUiPxFqzU0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl
                          rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
        Validity
            Not Before: Oct  3 08:27:48 2026 GMT
            Not After : Oct 10 08:27:48 2026 GMT
        Subject: CN=6ac0bc84-c64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:dc:91:a3:54:96:2a:fd:10:77:5f:94:6e:
                    b7:a8:c6:1a:cb:bc:a9:e8:d6:75:7e:97:6b:92:47:
                    02:b5:f3:b5:3f:d2:8e:88:79:ee:d6:05:53:b5:08:
                    8e:1c:53:9e:f3:61:54:4d:5b:2e:23:45:2d:a9:c9:
                    1d:96:1a:55:ee:5d:1c:b6:2a:fe:60:76:ed:f0:65:
                    69:ec:59:ea:23:01:88:d1:65:7e:bb:17:46:f1:c8:
                    7f:c8:25:2c:4e:66:fa:28:ed:c5:a6:77:eb:7d:ba:
                    fa:26:7d:8c:87:d9:14:4f:dc:bf:ab:9e:53:be:a6:
                    ea:ef:72:d2:71:0b:88:c8:a6:db:a5:e9:25:f2:4d:
                    2f:08:51:20:bb:f9:51:65:a5:d7:8b:34:7a:ed:3d:
                    81:f6:1c:72:44:24:fc:ba:5a:38:9f:e9:2b:c9:d4:
                    57:f4:d1:c8:9d:d5:6b:6f:61:7f:29:de:09:c8:0a:
                    4d:58:9b:df:a0:2e:7d:20:fc:66:31:5f:77:f4:af:
                    b6:67:67:74:1c:d7:6e:f5:5c:4a:65:00:6a:cd:2b:
                    6b:9a:8f:66:76:c5:04:71:37:fa:e5:99:ec:54:9e:
                    77:f0:9c:69:c4:d9:ec:61:eb:f2:c1:0b:8b:d3:50:
                    db:88:06:26:64:7c:13:1b:97:cb:d6:79:a7:99:e3:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:87:8A:AA:5B:7A:88:40:98:05:86:A2:49:7C:E3:00:E7:2E:AE:9B
            X509v3 Authority Key Identifier:
                keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c2:db:c8:ab:51:cc:3c:3c:bf:16:49:21:f6:98:d1:4e:d4:
         42:b6:a3:da:45:23:c9:7a:75:d7:f8:0c:67:7c:d0:5d:ad:93:
         18:88:11:93:0a:5d:43:a3:bf:6d:7c:95:8d:3f:e7:1d:1b:89:
         b3:2c:17:bc:40:9b:f0:bd:83:5a:36:13:7d:8c:1f:31:82:7d:
         d2:91:18:68:c9:38:c5:13:a2:0a:1b:35:2d:d6:51:19:ef:8d:
         ea:0f:fd:09:bf:d2:f5:92:c0:e3:a0:31:72:16:33:b9:f5:90:
         fc:a8:ce:81:c1:78:40:9a:bd:66:e2:c1:da:4c:2d:be:99:61:
         86:e5:7b:70:2a:73:4d:a9:a6:b0:d3:4d:2e:b7:78:7d:4f:66:
         07:f5:2b:d4:98:fd:d7:8b:4b:08:ea:1f:a3:8a:a3:11:31:ba:
         cc:f9:c1:2e:99:58:48:dc:a8:4c:5f:1d:aa:8e:13:57:6f:d7:
         a6:f6:78:b2:2d:e7:af:8c:97:8c:60:f5:0b:71:c5:9b:4a:df:
         60:7e:93:90:b1:23:fc:70:98:eb:90:65:6f:34:af:0d:7f:a1:
         b9:c6:f2:f2:d8:73:cf:a8:83:2a:f1:13:bb:1e:df:e4:7c:a4:
         c7:6d:13:e9:1c:95:03:e8:7e:d2:be:88:a3:39:21:0f:ce:cb:
         ef:c4:fa:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:01:11 2026 by rpki-client