Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
File:                     o9--Ea-KeOViz7RXkAzKuQkMK1k.mft (raw, json)
Hash identifier:          xOIn3oUoX3/B2tSw7mV0UiR+VGNPn3t1F45w6lWJvbg=
Subject key identifier:   EE:CA:D3:EB:C2:99:10:DE:DC:35:B1:7C:EA:B8:8A:7C:9D:E8:81:02
Authority key identifier: A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59
Certificate issuer:       /CN=A9145604/serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
Certificate serial:       09CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
Manifest number:          09C6
Signing time:             Tue 12 May 2026 19:57:20 +0000
Manifest this update:     Tue 12 May 2026 19:57:19 +0000
Manifest next update:     Tue 19 May 2026 19:57:19 +0000
Files and hashes:         1: o9--Ea-KeOViz7RXkAzKuQkMK1k.crl (hash: Z1dGI0CbEkd/3uu1y1ap+bkE11bZwyHIaTJzQ8HQ0po=)
                          2: C0A21C70A4A711EA835CCA70C4F9AE02.roa (hash: w0Mg38kqxU56tToSKDuvE9izP1apCE3Ik6yrPGcnebw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl
                          rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2510 (0x9ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145604, serialNumber=A3DFBE11AF8A78E562CFB457900CCAB9090C2B59
        Validity
            Not Before: May 12 19:57:19 2026 GMT
            Not After : May 19 19:57:19 2026 GMT
        Subject: CN=6a038620-1a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8c:b3:86:31:1c:32:df:87:6b:3e:a0:98:d8:
                    a3:4d:8c:40:1c:fb:ce:4f:c4:f2:2a:f0:8e:bd:64:
                    55:fb:64:81:bb:8b:b9:ac:ec:fa:6b:5a:f8:04:da:
                    c2:3e:44:64:cb:59:17:cc:6d:9b:d5:70:b4:de:a5:
                    2f:27:44:cd:32:0d:c7:d5:ec:ef:22:4f:25:ad:8c:
                    3c:07:0f:28:f1:1b:4c:6b:91:ff:90:c5:98:5f:fe:
                    33:b0:c9:e9:7b:d2:46:9f:f6:54:e0:7e:a1:4d:a8:
                    46:0b:d6:7b:b8:f3:9f:22:a1:3e:2c:9a:6b:d6:81:
                    e3:11:8e:86:c1:58:a1:7e:bd:a1:2c:00:67:ee:49:
                    66:32:ff:52:76:d6:2d:12:e6:6d:38:96:90:4f:33:
                    ea:b1:be:67:44:61:83:62:53:00:c0:04:27:6d:7f:
                    7c:8b:1e:a5:27:fa:b6:26:e7:f6:87:6a:89:ae:bf:
                    31:f2:fd:19:3a:ec:0a:a5:8a:7b:b9:4a:dc:33:36:
                    77:d0:41:62:1b:54:8e:4a:99:2b:f4:6a:a9:ed:8a:
                    0c:05:ce:a2:11:99:7b:cc:9c:47:8d:98:a5:a3:49:
                    71:cd:2d:43:85:8d:02:fd:c7:13:35:8e:54:3e:c4:
                    3d:17:41:b9:60:b1:c5:f5:75:ed:98:a6:6f:cd:68:
                    94:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CA:D3:EB:C2:99:10:DE:DC:35:B1:7C:EA:B8:8A:7C:9D:E8:81:02
            X509v3 Authority Key Identifier:
                keyid:A3:DF:BE:11:AF:8A:78:E5:62:CF:B4:57:90:0C:CA:B9:09:0C:2B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9--Ea-KeOViz7RXkAzKuQkMK1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145604/BCEC6C5EA4A011EA8FBAB45DC4F9AE02/o9--Ea-KeOViz7RXkAzKuQkMK1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:49:40:1a:1c:c2:f3:df:45:ea:e1:e1:45:cb:e9:03:5b:c3:
         52:16:66:3f:68:bf:d4:0f:d7:92:49:06:6c:da:65:2a:c0:d7:
         b2:ee:5f:3a:05:26:ab:16:52:ba:e1:6c:0a:1a:9d:a5:e1:86:
         b2:0d:fa:ab:5c:fa:5d:0a:7e:66:a7:fd:32:cf:4a:b9:00:a4:
         0e:48:92:31:d8:9b:a6:c4:c9:1f:2a:27:7e:f0:7e:72:49:4c:
         c0:ba:67:ca:98:5e:6b:46:a3:d6:ec:b0:23:68:50:1a:fd:6d:
         7b:b4:52:78:9a:26:81:b9:2e:be:8a:15:55:f0:14:1f:80:9b:
         c5:7e:11:d1:77:f3:24:e4:51:21:92:b7:bd:c1:49:42:d9:2b:
         12:f2:be:b3:77:c3:ac:3c:ab:93:2e:7b:7e:ac:5b:1b:67:32:
         7a:8a:bb:23:1e:f8:be:70:6c:35:51:05:81:e5:de:e6:7d:b4:
         97:39:0a:a0:a4:30:b8:74:22:33:6b:c6:65:d6:d4:59:75:fc:
         ce:74:c5:e1:76:1f:51:16:e9:49:3f:43:12:8f:96:25:47:99:
         20:50:24:f6:7e:80:d8:58:b4:79:ac:05:b6:8b:3e:7a:50:d9:
         a8:98:f3:fb:12:0a:2f:0f:17:08:bf:2a:bc:2f:90:e4:1b:46:
         2a:90:9c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:32:21 2026 by rpki-client