Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
File:                     rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json)
Hash identifier:          Jx1ssYY3xRXmNMUr9Tayq1pp+brHhnVo7PrCYzi2G7Y=
Subject key identifier:   1C:36:85:91:A2:83:33:47:DD:A9:FA:F0:43:A9:79:D3:23:C1:97:C3
Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
Certificate issuer:       /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
Manifest number:          01C7
Signing time:             Thu 23 Jul 2026 05:11:50 +0000
Manifest this update:     Thu 23 Jul 2026 05:11:49 +0000
Manifest next update:     Thu 30 Jul 2026 05:11:49 +0000
Files and hashes:         1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: uNj9vNX8exEh2I5O2lCBaqkV5q+d4+BA0Xp63zYGkOU=)
                          2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: zQuRWZynPjX+xVieuFFOjcx7urcSlA8n96bIrvyW0V4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
                          rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
        Validity
            Not Before: Jul 23 05:11:49 2026 GMT
            Not After : Jul 30 05:11:49 2026 GMT
        Subject: CN=6a61a296-50aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:97:04:8c:00:84:bc:cb:63:11:77:a0:2f:
                    7c:79:af:5d:d3:72:d9:e2:e0:42:36:1f:df:9d:e5:
                    b0:83:ba:56:86:47:c0:99:bc:c3:62:c4:de:c9:36:
                    a2:4c:33:2d:a8:ed:85:de:ef:36:65:c7:9d:2a:34:
                    f7:31:86:66:3d:b5:5f:e2:ee:10:a3:e6:f1:6a:a7:
                    ea:e6:ce:d8:9e:63:3c:9e:93:3c:42:5d:2b:29:75:
                    91:5a:69:98:8f:99:ea:b3:b7:0f:1e:45:17:5b:b6:
                    d0:70:e6:e9:fe:d4:ca:ab:7c:ea:48:b9:9b:7d:45:
                    80:32:de:04:a3:ef:b7:7e:f4:12:94:7a:2d:11:3f:
                    1a:5b:c8:cc:bb:f5:a6:25:71:b3:36:0b:49:a9:01:
                    87:da:9e:5a:05:f1:c9:4d:11:e5:49:57:ea:b4:10:
                    3b:bd:6c:eb:4f:97:0e:69:fa:be:72:cd:11:f1:3e:
                    cd:07:48:9e:59:51:12:f8:d4:f9:d9:41:96:9c:0f:
                    f8:98:f2:2b:80:7e:f8:00:cf:27:e6:85:95:12:b9:
                    6a:b7:c0:43:9b:2d:69:0f:60:c0:fe:a6:07:61:41:
                    76:14:e6:30:21:ab:70:f3:d6:e1:7e:6c:b5:de:9e:
                    5e:4a:5d:48:48:74:73:6f:30:ca:67:84:ad:f4:72:
                    0a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:36:85:91:A2:83:33:47:DD:A9:FA:F0:43:A9:79:D3:23:C1:97:C3
            X509v3 Authority Key Identifier:
                keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:eb:81:23:56:4e:68:69:de:f1:f4:6b:af:ce:92:ef:be:de:
         6d:4b:7d:dd:e3:6c:04:6c:b0:e5:b5:e2:93:d3:a5:a9:d8:a4:
         41:15:ca:1d:1d:ed:0a:a1:c5:43:8b:db:cc:22:21:bd:18:f5:
         8a:95:9e:b8:17:4f:8c:85:cf:95:c6:4c:a8:38:06:9a:b2:1b:
         82:3d:62:32:25:61:f7:e8:5e:bb:7b:e3:62:f1:4f:1d:c4:f1:
         d9:6e:ee:b2:b0:7c:ad:81:3b:43:46:b6:24:42:27:0a:ed:f1:
         b8:8a:6d:ed:1e:a5:53:af:c9:9a:63:8c:4a:2f:7d:4a:57:9b:
         10:06:7f:64:4a:6a:2d:bd:a5:6d:09:ce:16:10:de:26:66:fd:
         ec:6c:c6:32:c2:06:d2:51:8a:36:09:a5:9f:32:6c:22:29:41:
         76:9b:c7:e0:d1:76:d7:d9:6c:5e:90:3f:d1:c1:da:c7:56:72:
         bf:6a:12:d8:12:a8:f8:45:6f:f7:3f:07:34:e3:c0:0f:21:4c:
         f9:ce:cb:c1:bb:72:6b:55:94:be:6c:df:8a:a6:af:68:85:88:
         5e:26:91:9a:0e:be:59:d1:73:6b:73:07:fa:9d:8e:f2:03:e9:
         ee:07:7f:dc:e3:87:fc:36:e4:be:f0:80:b6:51:a8:0a:3e:d3:
         5b:75:c1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:34 2026 by rpki-client