Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
File:                     ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft (raw, json)
Hash identifier:          gmmrk+4/9gnU3y4cjVvciL2OKMgOudO0iCV2Negpb/0=
Subject key identifier:   ED:4C:A5:14:3F:DD:62:02:A9:BD:12:73:3B:62:2D:D0:52:05:05:F1
Authority key identifier: 01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E
Certificate issuer:       /CN=A914BCB6/serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
Certificate serial:       0674
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
Manifest number:          0662
Signing time:             Sun 10 May 2026 22:41:55 +0000
Manifest this update:     Sun 10 May 2026 22:41:54 +0000
Manifest next update:     Sun 17 May 2026 22:41:54 +0000
Files and hashes:         1: ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl (hash: LVT5jgkATL5ZSuhSj4myO3f8khMNU872OHQhQW2aU5E=)
                          2: F2004572BAED11ECA89EC43AC4F9AE02.roa (hash: UBx1y7FSM/8qHR/vlHmktHDa3vYZBkRs325ySHzChAs=)
                          3: 3D3D3166A8C511EC8F560C42C4F9AE02.roa (hash: rcfOfPwM1mtTZBMyIgbUUmBfYL7Ft727iB8QQjEHiwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl
                          rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 22:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1652 (0x674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BCB6, serialNumber=0110BB3AB50E3A0D4490C32103BBC4054DC6821E
        Validity
            Not Before: May 10 22:41:54 2026 GMT
            Not After : May 17 22:41:54 2026 GMT
        Subject: CN=6a0109b3-a666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:e3:0c:d9:9d:17:4d:30:c6:8c:a4:42:f6:
                    29:73:80:bc:2f:af:a9:dd:65:54:c1:5e:5e:d7:ba:
                    d3:7f:78:de:a6:77:ae:28:08:ae:63:ef:a2:40:fa:
                    2a:34:ee:83:aa:da:b2:c7:1c:80:0e:5f:b5:fe:85:
                    f9:9b:cf:4d:7b:99:56:52:61:17:1b:36:1f:f2:89:
                    53:3f:4e:6b:dc:fa:f4:44:cf:c5:e5:74:cb:16:7e:
                    c8:a0:3f:f6:a4:88:27:ac:62:4a:eb:b2:0d:f1:48:
                    71:2b:23:d7:70:14:7e:96:f7:5e:9b:aa:ca:2a:ba:
                    36:52:78:15:6b:10:4c:d5:ca:a7:77:41:ed:5d:41:
                    30:0a:cb:99:dc:d8:69:65:d3:5e:fb:78:d8:06:1b:
                    74:90:f7:18:53:ad:27:70:c9:1f:45:06:75:76:39:
                    57:e3:5a:fe:72:1a:45:bb:2a:da:23:0e:f0:ae:9f:
                    db:41:bb:f0:7a:bb:38:76:c4:f6:10:82:9b:c9:7c:
                    5f:33:5e:ab:c9:fa:6a:10:ca:d0:2b:26:fb:a3:f9:
                    78:54:f7:5c:4b:41:97:b0:bf:f5:0c:fc:af:6e:c3:
                    fe:70:6a:c0:ca:fe:92:8f:7b:10:03:86:f7:17:eb:
                    c0:99:1e:c2:92:48:c2:b6:b9:2b:ce:a0:95:a3:65:
                    81:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4C:A5:14:3F:DD:62:02:A9:BD:12:73:3B:62:2D:D0:52:05:05:F1
            X509v3 Authority Key Identifier:
                keyid:01:10:BB:3A:B5:0E:3A:0D:44:90:C3:21:03:BB:C4:05:4D:C6:82:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BCB6/2AB7CC5ACCF111EB91421958C4F9AE02/ARC7OrUOOg1EkMMhA7vEBU3Ggh4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:39:e8:ae:a9:9d:af:d5:92:10:7a:bb:f4:6f:7c:a2:d4:e6:
         27:ae:8d:5f:25:63:34:5a:3c:56:19:9e:82:d5:00:3c:62:48:
         dc:69:4b:2b:d1:ed:fc:e5:df:b2:a3:b8:ba:84:ae:0e:53:ac:
         ac:df:35:c1:97:e6:23:67:80:33:ad:8a:81:92:90:b3:16:00:
         6c:8f:77:28:06:30:5f:97:6b:b0:17:68:41:d6:d1:70:4e:ab:
         c6:a8:d3:b3:e1:1b:25:a2:c8:e4:67:24:77:cd:0a:28:d1:94:
         8f:70:5c:a2:5a:f8:4e:c2:90:9d:56:bd:0a:90:58:33:44:c8:
         f5:f8:f4:1f:77:e4:e4:d3:b9:30:82:93:57:64:9f:74:fd:a3:
         78:87:90:4b:c3:ad:98:40:1a:d0:c1:12:76:9b:50:a1:38:68:
         7b:71:1b:c4:1d:c2:b5:30:60:52:cd:ea:5b:33:81:22:0b:fc:
         ab:4c:a5:fb:59:1e:05:f2:53:4a:fa:50:a1:1c:67:67:55:58:
         ad:bb:4e:9e:9f:22:d3:27:0a:b6:4f:b9:c4:f4:8b:98:00:0f:
         d3:79:da:95:07:b1:21:be:f5:29:97:9b:4f:7f:61:f7:eb:47:
         79:e6:fe:8d:cb:d7:e5:e7:c3:22:d3:6c:b4:a1:0d:2d:2d:52:
         33:15:5e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:26:28 2026 by rpki-client