Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
File:                     kl2pi04IXWgNFte6GD8OpUJqGgM.mft (raw, json)
Hash identifier:          5wXVO8qtSzQ7BmahrUT3GSMekQvYNlaRoPApVGDVMwQ=
Subject key identifier:   F2:41:57:88:10:1E:71:6F:D9:35:D9:DC:91:18:95:EA:79:0D:EF:5E
Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
Certificate issuer:       /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
Certificate serial:       0625
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
Manifest number:          060F
Signing time:             Sun 26 Jul 2026 23:45:07 +0000
Manifest this update:     Sun 26 Jul 2026 23:45:07 +0000
Manifest next update:     Sun 02 Aug 2026 23:45:07 +0000
Files and hashes:         1: kl2pi04IXWgNFte6GD8OpUJqGgM.crl (hash: UxHfmZrtC8BjxI/E+9CLY0Y4jS5dxKy9FwJNjVkyxOA=)
                          2: C7B754BEF85311ED8D59CA87C4F9AE02.roa (hash: rObNodnl4kiW2HwSgTl4V+2eGCn624eHu1NbbTBXI6o=)
                          3: A87AE518D2E011EDA1EF340FC4F9AE02.roa (hash: dU7VVF3QG8CRfa6WG2OEmnhKj0juHLcrGojTpDvzWz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl
                          rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:45:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1573 (0x625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112320, serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
        Validity
            Not Before: Jul 26 23:45:07 2026 GMT
            Not After : Aug  2 23:45:07 2026 GMT
        Subject: CN=6a669c03-b504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:89:68:fe:aa:64:3d:79:5f:af:23:b3:91:40:
                    ce:fc:33:e5:79:23:95:1f:1b:87:ed:cd:e8:ac:53:
                    30:84:16:ea:4c:37:50:82:43:06:25:2d:c4:d2:3c:
                    9c:78:6a:66:89:73:39:f5:37:14:49:c0:d5:7a:cf:
                    7e:c9:81:bd:16:f2:6a:27:66:5c:e1:ad:ec:0c:9b:
                    2c:8b:b1:9b:f7:40:20:46:16:57:a3:46:5b:d1:21:
                    42:34:0d:e2:c0:c6:0c:13:38:38:61:3a:31:6d:5d:
                    1c:dd:8f:b8:fa:53:e8:f9:6c:d7:f6:90:45:97:16:
                    e5:08:7c:e3:02:9c:62:d4:03:72:cf:44:58:14:a4:
                    02:70:58:86:98:5a:c1:17:8d:2e:82:22:a8:ab:98:
                    6a:05:c2:c4:d3:00:35:80:2c:30:63:bf:65:8b:ef:
                    61:53:09:64:6e:2d:59:0e:ab:d3:3e:7d:b3:8a:c9:
                    ad:c5:c1:6f:91:a4:fc:77:8a:f1:4c:51:a2:d9:ff:
                    95:66:63:1d:2f:87:b0:c5:45:72:42:ac:27:65:65:
                    d2:13:ea:f0:2a:97:0b:de:2f:f8:e7:d2:fb:38:29:
                    38:33:2c:3a:3f:28:fb:0c:24:cb:eb:c3:74:7e:6f:
                    ba:29:17:f9:97:8d:91:77:0b:36:24:a5:f4:ba:2c:
                    56:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:41:57:88:10:1E:71:6F:D9:35:D9:DC:91:18:95:EA:79:0D:EF:5E
            X509v3 Authority Key Identifier:
                keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e2:d0:15:a3:7c:01:17:ad:fe:ea:86:c7:ae:d6:a8:c6:b7:
         47:c6:63:36:3b:82:d8:ad:68:bb:a3:a8:c7:43:3d:37:d4:66:
         d4:17:31:ea:02:0f:05:ea:09:b9:93:b4:6a:d9:df:aa:62:c3:
         57:6c:7d:32:08:ff:e5:af:75:a9:2f:b4:c3:e6:e0:26:58:98:
         ef:d8:e6:e4:23:69:ac:e6:d6:bc:bf:fb:ae:17:47:bf:6c:6a:
         d7:13:56:76:c5:43:87:4f:8b:8b:05:5f:41:a1:c3:c7:da:b5:
         e8:5c:29:36:31:4b:97:a1:56:2e:09:e6:63:1e:e5:4c:cf:1b:
         7d:69:83:34:80:33:bd:79:b7:6c:b5:8e:76:69:89:ec:7e:85:
         e9:db:71:77:be:84:7c:88:ee:72:dc:3b:6a:a0:58:05:13:0c:
         0b:90:cd:7d:2c:df:6d:18:21:2d:c7:54:5c:18:60:37:33:19:
         79:b9:f2:0b:41:43:fb:cb:57:5a:3c:f6:d4:74:04:16:54:c0:
         ca:8a:d4:4a:f3:54:f6:d6:54:ca:f3:ee:91:e2:73:06:0d:d4:
         4e:c3:41:a7:94:33:b8:5c:f6:d2:0e:a6:b0:8f:be:6d:f5:f0:
         d1:12:e2:c3:d8:97:6f:d1:37:83:ce:ef:df:0e:77:69:88:70:
         0b:3e:67:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:21 2026 by rpki-client