Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
File:                     K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft (raw, json)
Hash identifier:          mi5pt/PtqiLH9b0CRl6lVNdNs4Zk56yx+g8cQhOThdw=
Subject key identifier:   BF:95:2A:48:84:AD:AD:D3:4C:9B:8D:8B:70:A1:CA:58:CE:11:5E:46
Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80
Certificate issuer:       /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
Manifest number:          37
Signing time:             Mon 11 May 2026 08:50:02 +0000
Manifest this update:     Mon 11 May 2026 08:50:02 +0000
Manifest next update:     Mon 18 May 2026 08:50:02 +0000
Files and hashes:         1: K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl (hash: mjfmg/L4NvcLkgmeChdvQNdlNdYrNN3OBOKWLPoSYIc=)
                          2: A801B786055211F1AC4F64FE2A3D8C67.roa (hash: q72z60cZ6WINAMTAmZNi9B2ywwhzErv8MUiPxFqzU0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl
                          rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
        Validity
            Not Before: May 11 08:50:02 2026 GMT
            Not After : May 18 08:50:02 2026 GMT
        Subject: CN=6a01983a-f8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:7b:e6:fb:b6:b5:32:9a:6b:ae:77:f3:5e:
                    c5:1e:8a:8b:ca:59:4b:68:2b:56:1f:ff:b5:88:51:
                    82:d5:eb:da:5d:b4:56:3b:92:01:07:a2:37:bb:6c:
                    0c:ed:2d:ee:1c:c4:2f:11:f6:92:55:6e:49:35:5e:
                    39:1c:06:b6:7c:c4:e6:96:20:7b:34:6a:bd:42:f3:
                    8b:17:f1:98:a6:72:7c:09:ed:4a:0c:ee:cc:37:d4:
                    af:ea:6e:41:99:f0:78:aa:75:63:a9:99:61:20:64:
                    5a:59:7a:9a:96:08:48:ac:40:d3:4d:27:33:71:91:
                    dc:6f:ec:d5:87:6f:43:68:71:d9:1a:fe:cb:16:b0:
                    8b:4a:82:05:56:f1:cf:4c:37:84:02:2b:07:4a:96:
                    45:e2:7a:af:9e:68:55:a9:f2:7c:37:00:44:d0:13:
                    4b:c5:3d:7d:e5:a2:02:1e:04:fa:50:37:bc:a7:b3:
                    ae:c4:bd:07:b7:e3:7d:09:d4:5c:b2:81:f5:6a:5f:
                    0d:dc:45:89:fc:67:41:76:b4:50:79:6b:a6:df:b8:
                    41:9a:a2:40:d3:be:e0:c4:91:35:79:1a:9f:5e:62:
                    72:d4:0d:64:43:04:7d:94:23:2b:b8:02:52:be:46:
                    14:f5:f5:2f:85:eb:93:dd:7f:f5:8f:13:69:3d:71:
                    bb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:95:2A:48:84:AD:AD:D3:4C:9B:8D:8B:70:A1:CA:58:CE:11:5E:46
            X509v3 Authority Key Identifier:
                keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:61:24:a5:af:1b:d9:a8:93:a5:3f:a5:45:76:50:b4:6a:f8:
         6e:a7:fb:2a:e8:9b:51:c5:03:b3:84:c2:9f:72:e9:0d:7e:6e:
         d3:8c:c5:f5:58:9a:4c:82:24:e7:67:3b:b2:b5:72:c3:92:b0:
         57:c0:a3:c9:9c:a3:9f:fa:cc:46:0b:72:cd:6b:d1:92:85:8e:
         a2:60:70:3a:e9:98:86:74:a2:2e:f8:da:f6:d9:c1:3e:a9:7d:
         e9:0d:79:13:1d:1c:36:85:2d:4b:ae:30:5f:34:ba:61:0d:fe:
         93:96:87:f2:5b:6b:96:7d:9d:80:25:37:35:1e:4b:04:1c:3a:
         aa:f7:45:ec:66:a2:de:7e:4d:ac:15:8e:ec:17:7f:c1:48:50:
         b3:c0:6a:c2:a0:eb:bb:b9:31:00:f8:95:99:d8:eb:2d:01:52:
         ab:6c:01:3d:22:99:01:48:20:a6:54:44:7a:97:79:a8:49:49:
         94:4b:07:98:b6:8c:d1:a1:47:68:ee:9b:31:40:fa:d7:0c:32:
         79:2a:2e:98:84:b1:8f:5d:b6:ae:9e:33:4d:15:c3:04:a8:90:
         ca:2b:a2:0f:d9:17:96:9f:90:83:ec:fb:84:99:b4:05:00:4a:
         5f:97:2d:84:03:63:bd:4a:34:e4:bb:43:94:c7:ad:4d:88:f8:
         34:ca:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:15 2026 by rpki-client