Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
File:                     KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json)
Hash identifier:          l4qCCca/iPPGkCS3O0uelycTWOb9Jw+rF4MRkGN1YMM=
Subject key identifier:   DD:28:B3:67:3F:E6:57:7B:A2:FA:E1:FC:28:5C:8C:A2:83:C2:FA:3C
Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
Certificate issuer:       /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
Certificate serial:       06DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
Manifest number:          06C7
Signing time:             Thu 24 Sep 2026 22:16:27 +0000
Manifest this update:     Thu 24 Sep 2026 22:16:27 +0000
Manifest next update:     Thu 01 Oct 2026 22:16:27 +0000
Files and hashes:         1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: hH+hXnsx6PA9U0kMvw2LmiztsaGFeBWN1GuEMDANFOM=)
                          2: 590697D6465611EE8128031BC4F9AE02.roa (hash: VAtwg4JA7DKaiR1Y/aQYlkU3CfV+E/YtMAPsl8ob9cY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl
                          rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 22:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1754 (0x6da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
        Validity
            Not Before: Sep 24 22:16:27 2026 GMT
            Not After : Oct  1 22:16:27 2026 GMT
        Subject: CN=6ab5a13b-8a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:27:7a:49:ed:4a:34:34:ee:6e:24:10:c6:
                    f7:d7:0b:ae:75:11:75:4a:4e:51:70:e8:c1:85:b4:
                    b6:3d:67:3f:02:27:02:3e:c7:88:16:15:d1:33:23:
                    f7:55:84:0f:ef:10:0d:5d:58:3d:0a:d9:23:cc:93:
                    bc:2c:2e:37:88:f3:0e:13:b7:4e:99:6d:d3:02:ff:
                    9c:c3:ce:9a:6f:ee:88:ce:c1:c9:b5:e9:41:ec:b8:
                    4d:83:e8:0f:83:e5:71:4b:7d:64:c1:3a:5b:9c:65:
                    72:43:db:ab:70:1a:0a:e7:5c:40:a8:56:a7:ad:3a:
                    1d:c2:f0:9a:51:22:1c:a3:54:83:ad:1d:19:35:ab:
                    4b:66:7d:44:7d:12:df:61:b6:4d:e5:8c:08:5c:6f:
                    60:0f:cd:1a:91:83:77:6d:1b:6d:a7:73:a7:13:2e:
                    da:45:4c:92:58:53:bd:44:10:41:7f:c7:65:8c:0f:
                    0a:58:f7:f1:d0:8e:5a:3d:21:6f:ef:87:6e:ac:2e:
                    16:06:54:28:93:86:70:13:c5:f7:a7:e1:7a:34:7c:
                    8e:db:fb:d4:88:19:7f:58:a3:5e:18:89:d7:ac:ee:
                    42:ff:0f:ea:6a:3a:23:34:21:cf:ae:2f:f2:d1:f4:
                    f2:9a:3d:ae:e9:20:92:2f:99:4c:61:8a:a9:b4:b7:
                    ae:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:28:B3:67:3F:E6:57:7B:A2:FA:E1:FC:28:5C:8C:A2:83:C2:FA:3C
            X509v3 Authority Key Identifier:
                keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:a3:02:5c:08:f9:db:77:50:6a:cb:25:11:eb:b4:35:80:7c:
         7a:93:f8:f1:a0:30:1d:ec:45:86:cb:ab:ee:7d:54:df:48:ec:
         9c:fa:50:55:ed:33:bb:96:97:ad:87:52:dc:3d:04:23:24:14:
         dc:37:ff:67:49:3d:c6:8e:3a:94:e9:62:6a:0e:c6:2e:5a:d6:
         65:17:f1:09:71:c6:6f:0c:50:70:1e:4d:0d:19:51:2b:56:80:
         1a:51:7c:a5:45:31:98:78:bb:9c:1e:60:b5:5e:1f:46:05:4c:
         76:11:e7:43:ff:06:ff:4a:85:4b:cf:8a:3a:a2:29:96:4e:b0:
         1a:80:2c:25:b1:8d:69:4d:3a:b0:e2:ed:88:5e:1c:09:c1:68:
         30:5b:1e:9f:ae:c1:eb:09:15:59:76:8e:22:fc:01:45:b6:c6:
         cd:75:54:cf:3e:70:39:dc:74:a4:71:33:00:b4:8c:5a:7e:e4:
         97:55:bb:6d:ca:b0:15:7a:c8:fb:69:b1:cb:0c:71:8c:78:24:
         72:14:fd:e1:18:59:88:ba:64:d2:e6:26:4b:40:3f:e2:59:f8:
         64:54:a4:f1:ad:3f:26:a7:8b:74:fc:92:d3:02:87:bf:90:0b:
         25:45:50:72:34:42:68:c2:e4:53:85:7f:23:60:eb:34:07:11:
         f6:cd:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:22:29 2026 by rpki-client