Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft
File:                     OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json)
Hash identifier:          swZqe7tveaIlSWmb+mlPzjjPWwa/ByVm1UqFvv3nQFo=
Subject key identifier:   36:56:17:A5:B7:E3:C1:0F:1A:8B:08:E9:63:63:5B:E5:ED:E8:17:B4
Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C
Certificate issuer:       /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C
Certificate serial:       0AB3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft
Manifest number:          0AA2
Signing time:             Wed 22 Jul 2026 19:55:09 +0000
Manifest this update:     Wed 22 Jul 2026 19:55:09 +0000
Manifest next update:     Wed 29 Jul 2026 19:55:09 +0000
Files and hashes:         1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: LqdiDrrD8mRCNh/VHqsCRQufT16IKGgz0n9uAasoKQI=)
                          2: C9F37B86584111F09E8EC450C4F9AE02.roa (hash: lMbLeQ9y+VcqNaUu40E6Ont31pNHR+PjOYoL46iU/ug=)
                          3: E35939C2261711EC9990A750C4F9AE02.roa (hash: tTZXDpG6s0I7epPtJd00/Iy7JGi1h8+PbbN85OVIZMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl
                          rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2739 (0xab3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C
        Validity
            Not Before: Jul 22 19:55:09 2026 GMT
            Not After : Jul 29 19:55:09 2026 GMT
        Subject: CN=6a61201d-aceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:30:fa:94:51:6b:2e:bb:0f:39:8b:81:1e:84:
                    3d:51:21:d5:e0:da:a7:51:0e:30:4b:e7:b6:6b:d0:
                    b8:79:c9:fd:46:2f:12:bd:de:c2:63:23:15:48:14:
                    96:a7:b8:79:45:e7:6d:5c:b1:31:a8:e4:70:ed:4c:
                    5a:01:ed:39:60:1e:2a:a3:6f:6e:86:c1:8a:99:7a:
                    58:4a:6e:c0:a9:3f:83:cc:4c:ab:4b:66:46:02:3e:
                    e2:a3:d8:ad:e5:f1:80:ef:da:9f:8c:12:4e:39:a1:
                    a0:c0:6d:f4:81:f2:c5:85:5e:ca:fb:c8:52:ae:0e:
                    43:65:a6:85:52:c4:53:3e:75:ab:a3:b5:41:52:59:
                    5a:49:67:d9:4b:1b:98:c2:88:c7:cb:7e:e8:33:65:
                    18:c2:f3:84:59:75:95:cb:51:7c:47:90:39:ab:6e:
                    0b:8b:93:db:82:8c:54:8c:a7:ff:f9:71:a5:0d:67:
                    59:28:5d:c0:94:3d:4c:80:6c:40:96:af:55:4f:82:
                    45:d6:67:1d:f5:eb:dc:6a:bb:35:ac:50:c2:17:05:
                    ca:c7:98:78:bb:7c:32:e7:af:90:71:55:d5:9a:01:
                    a3:f4:b3:19:71:50:e6:2d:d0:e5:06:a1:cf:69:08:
                    22:bc:7c:d2:e9:bb:b0:fb:10:2f:ee:f8:57:bd:34:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:56:17:A5:B7:E3:C1:0F:1A:8B:08:E9:63:63:5B:E5:ED:E8:17:B4
            X509v3 Authority Key Identifier:
                keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:90:ce:e9:4d:3d:d7:c8:9c:45:84:b8:33:e1:52:70:2e:a7:
         df:69:0d:6d:37:e8:c9:26:b7:1c:d5:96:8b:44:ae:5b:83:5d:
         da:e1:b0:b7:d0:94:86:99:23:e0:fc:7f:e4:16:35:c0:09:f7:
         7a:4d:db:4e:ff:66:0f:b0:2b:a8:48:32:be:6d:01:86:46:62:
         b5:3f:63:c6:a6:68:bb:62:1a:9e:05:5f:24:67:c1:0f:5d:11:
         04:19:b2:55:e3:f7:cf:c7:48:4e:57:ca:1a:0f:c8:df:1e:5f:
         f6:37:71:f1:4d:f2:68:b4:51:ba:07:6b:2b:fe:e0:1a:59:c1:
         e4:01:b8:9a:aa:bc:24:cd:29:b9:66:56:87:d8:a0:94:6d:3c:
         77:ae:79:f7:f1:a4:42:75:8a:63:41:bd:21:f1:b7:8d:ae:94:
         b7:64:00:6d:37:57:ad:57:d4:4a:ff:c7:45:39:6e:1a:a5:b5:
         f8:9d:69:5b:e5:af:61:4f:cf:6d:2e:90:4b:f2:d5:93:e3:9a:
         5e:0e:77:ab:7e:af:ee:2f:41:2d:00:15:f2:3e:8f:8b:4f:6b:
         42:f0:a4:cb:32:28:4f:11:8c:47:d5:01:35:81:65:9a:8b:92:
         19:37:d3:d3:ab:05:23:54:76:af:b2:9c:a8:a7:ca:e3:82:dd:
         54:ea:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:21:18 2026 by rpki-client