Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
File:                     K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json)
Hash identifier:          yAunScS+08VG8/YQhmMtFhHztnSJfRgr2SPAoJNQ06A=
Subject key identifier:   B4:1F:E9:F8:08:7D:DD:01:A4:15:EA:EF:29:B7:27:E3:B5:5C:27:46
Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80
Certificate issuer:       /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
Manifest number:          7B
Signing time:             Wed 23 Sep 2026 07:35:02 +0000
Manifest this update:     Wed 23 Sep 2026 07:35:01 +0000
Manifest next update:     Wed 30 Sep 2026 07:35:01 +0000
Files and hashes:         1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: gRgnrM9KNxozAw/C8TvHKNs5Asmr5MUXlDxsx6Aw4CI=)
                          2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: q72z60cZ6WINAMTAmZNi9B2ywwhzErv8MUiPxFqzU0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl
                          rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
        Validity
            Not Before: Sep 23 07:35:01 2026 GMT
            Not After : Sep 30 07:35:01 2026 GMT
        Subject: CN=6ab38126-df54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:cf:e0:60:7e:3e:fc:cb:04:2b:1e:1b:f9:
                    00:4b:a1:ff:37:b4:72:4a:ae:8d:96:56:24:70:fe:
                    f8:d4:29:21:af:f5:f0:7c:9a:a8:53:f8:c0:ac:34:
                    41:16:08:2c:d0:dd:fc:ea:64:b2:70:02:72:9a:7e:
                    ce:eb:03:c7:b7:6b:7c:e2:36:e2:7f:6b:55:b4:31:
                    bd:c9:16:a0:7c:8d:62:24:2e:64:07:fb:40:90:2e:
                    41:31:58:1c:83:ac:1f:54:8e:8f:c8:55:12:69:59:
                    49:b5:cf:e1:9e:fd:7f:e6:d2:e1:d7:47:a2:30:bc:
                    63:5b:53:d9:9d:ad:e4:cd:0f:ae:d4:9b:16:e4:6e:
                    58:67:bf:e4:8e:55:b4:55:59:ed:e3:5a:22:90:32:
                    3c:65:f7:c6:4b:dc:5a:75:f6:4a:db:c4:ba:f9:55:
                    be:45:ad:8e:26:35:8f:28:01:78:a9:f5:65:73:73:
                    76:1d:cb:3c:62:1a:9f:4c:b2:2e:2d:5b:9d:ec:e6:
                    fd:78:ca:6a:74:7b:a5:1c:f2:9f:b7:e8:b6:a6:9c:
                    6f:9c:ab:21:e2:1c:ad:e4:81:0c:7d:c4:cc:ec:7e:
                    30:ad:65:3e:0e:41:14:a8:0c:e0:9e:c8:fa:9a:75:
                    af:c0:3d:ca:07:0a:ba:d1:a8:7b:42:69:94:a6:cc:
                    04:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1F:E9:F8:08:7D:DD:01:A4:15:EA:EF:29:B7:27:E3:B5:5C:27:46
            X509v3 Authority Key Identifier:
                keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:92:43:b7:4f:b3:01:3d:85:6f:f8:99:21:ff:a9:35:a9:5e:
         f7:f3:69:68:5d:20:a8:a8:6e:ad:3a:bb:62:2b:68:41:a2:eb:
         6d:f5:18:d7:d1:7c:c7:0f:d6:a6:35:fc:e5:84:e1:02:01:a3:
         fd:9c:fa:0d:c9:76:0a:ee:fc:48:a0:b0:3e:8a:c6:29:73:4e:
         e1:c9:a8:2a:6f:57:94:23:4f:0b:06:77:25:d2:94:6b:53:c3:
         b6:c3:a5:9c:03:1d:ce:89:f5:15:38:07:ca:7f:13:f3:c0:38:
         5b:d6:36:f4:4e:8e:a9:af:05:1e:3b:51:35:27:a9:1b:f6:a6:
         3b:54:09:24:3b:8e:0f:e4:ac:9f:2f:38:7d:8c:9e:3a:bc:15:
         7a:01:4c:88:12:b2:4d:0a:be:2e:2a:33:da:5c:77:24:df:48:
         bf:fa:c1:0d:f0:b2:71:6a:87:d4:02:46:14:2b:e8:90:8f:e7:
         ad:8c:33:38:89:38:b7:f3:54:e5:1e:26:2f:59:47:5d:4b:66:
         41:e4:75:c4:85:8b:35:28:fb:32:6f:f9:f0:77:f4:b7:3a:f6:
         e6:40:3d:7c:80:4a:47:5f:fd:a4:db:80:d4:76:03:03:8d:fc:
         09:a9:50:f5:98:7b:23:c4:16:63:51:1c:6e:c0:45:c0:ee:08:
         75:4f:1b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:26:35 2026 by rpki-client