Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
File:                     K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json)
Hash identifier:          m5kSoWra/OgJ8sm6+7q5wo2qapddoz33IyhY2vbTE1U=
Subject key identifier:   FF:5F:24:2A:04:1C:04:71:4C:F6:96:2B:5B:90:64:A9:9D:C5:DD:BA
Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80
Certificate issuer:       /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
Manifest number:          5B
Signing time:             Thu 23 Jul 2026 10:11:28 +0000
Manifest this update:     Thu 23 Jul 2026 10:11:27 +0000
Manifest next update:     Thu 30 Jul 2026 10:11:27 +0000
Files and hashes:         1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: vJn6gQ0GXPgEa1wUrwGLQXb4YAyUdqX6RROHm6n1cxY=)
                          2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: q72z60cZ6WINAMTAmZNi9B2ywwhzErv8MUiPxFqzU0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl
                          rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
        Validity
            Not Before: Jul 23 10:11:27 2026 GMT
            Not After : Jul 30 10:11:27 2026 GMT
        Subject: CN=6a61e8d0-c198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:aa:d3:48:5d:80:ff:8f:ae:ba:f2:73:d0:d2:
                    71:2a:dc:0d:66:df:b3:1b:d0:17:6c:a2:76:d8:09:
                    d7:5f:99:07:ac:f0:08:44:f4:ed:a0:aa:c6:35:6c:
                    40:ac:bd:60:88:a4:84:ad:f9:46:cf:68:b8:19:2e:
                    0f:22:78:c9:06:91:e9:52:da:fb:98:43:f4:73:cf:
                    b7:9b:f4:21:5c:53:c5:3b:e4:9f:84:38:a6:44:18:
                    ca:e7:ef:49:04:e3:a5:09:5d:db:b3:6f:2d:35:9c:
                    2c:cc:83:b0:ea:e2:df:16:13:07:3e:66:d8:b1:eb:
                    13:dc:c3:95:6b:77:05:94:31:26:99:3a:7a:21:8a:
                    0e:b6:2f:70:0f:76:4e:c2:e3:09:7b:47:f9:d3:24:
                    1a:91:66:04:a1:c9:3a:e8:dd:55:da:5f:8b:3f:6b:
                    c1:f7:73:2c:c8:35:0d:e6:b6:71:bb:0c:07:42:6b:
                    a0:e7:2c:d3:fc:49:ce:eb:90:8f:b7:f0:38:88:a2:
                    d6:2f:4d:61:ef:85:bf:64:94:8f:1a:a7:80:b5:ae:
                    0a:e9:19:7d:eb:c7:90:fb:fd:53:9c:f4:b2:65:30:
                    99:82:79:13:44:e4:9b:c0:58:4b:71:7b:52:90:b4:
                    cb:f2:ce:6e:79:a4:b8:01:69:24:a8:56:ac:2e:db:
                    4d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5F:24:2A:04:1C:04:71:4C:F6:96:2B:5B:90:64:A9:9D:C5:DD:BA
            X509v3 Authority Key Identifier:
                keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f1:60:b0:77:94:59:5b:4d:25:34:2a:c4:a7:10:c3:0b:9f:
         e9:d3:35:76:ba:af:e0:22:e9:b5:4f:f7:14:82:08:c5:fe:ff:
         c9:06:31:39:c0:ea:a5:d8:70:2a:5b:8e:73:34:28:78:a2:8d:
         70:ef:9d:1c:9c:f8:06:b2:36:32:8d:8d:9d:f1:4a:c1:e2:08:
         e6:cb:30:fc:fb:c6:d6:2a:51:5f:d7:aa:31:5f:cf:35:32:8e:
         2b:db:bd:0a:bf:2a:8d:97:7d:f8:d8:b7:5e:8d:31:c0:83:2c:
         81:6f:22:61:bc:73:6b:58:a9:28:eb:d3:e6:13:14:43:4f:50:
         87:48:e2:6b:a5:a4:8e:07:83:c2:07:76:f4:01:e7:da:17:84:
         db:5a:3b:7f:43:9a:73:3c:b6:4e:85:7c:cb:a4:25:3e:00:ae:
         7d:dc:18:a0:76:ca:41:24:c1:10:39:91:5f:f5:e5:ba:e5:00:
         06:9a:62:c0:a4:d3:7f:87:41:89:0d:37:c4:a4:0d:e0:72:74:
         96:f5:5b:45:cb:8d:0b:21:65:da:d1:3e:ee:8f:dc:18:5f:b0:
         c0:98:66:7f:51:e2:3d:f7:2a:01:ab:c5:76:0f:43:1b:9f:87:
         81:9b:a4:47:ba:c3:c1:f6:33:78:31:75:f6:95:07:a0:0e:53:
         e3:ca:bc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:45:19 2026 by rpki-client