Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
File:                     kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json)
Hash identifier:          Opk/R8OTKg3KEaTafmZR48CfVwdhdycvwp7+M6bUN6U=
Subject key identifier:   07:17:06:12:51:F9:54:4E:E1:5D:6C:FE:90:F3:D9:3C:31:EB:F3:21
Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50
Certificate issuer:       /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650
Certificate serial:       06FF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
Manifest number:          06F5
Signing time:             Tue 28 Jul 2026 21:26:44 +0000
Manifest this update:     Tue 28 Jul 2026 21:26:43 +0000
Manifest next update:     Tue 04 Aug 2026 21:26:43 +0000
Files and hashes:         1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: GKPYVoZCz5FHp/HmEttNRfL4omcWdRs2A82afl30MBI=)
                          2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: kx0li/zw87s40T3OezyGkC+0pUIU5Rs0sCA+z6TjHX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl
                          rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1791 (0x6ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650
        Validity
            Not Before: Jul 28 21:26:43 2026 GMT
            Not After : Aug  4 21:26:43 2026 GMT
        Subject: CN=6a691e94-0b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:ac:58:a2:c4:d6:4b:1e:60:41:82:22:73:
                    dd:53:a8:f3:55:a7:e3:1b:6e:f6:0d:fe:27:ac:7d:
                    67:1a:f8:2b:89:45:c3:0e:ea:4c:d2:80:c8:ef:f4:
                    dc:eb:e0:75:1e:89:b7:0c:cf:3d:eb:15:9d:0d:8b:
                    b4:e3:dc:db:04:2c:25:88:92:34:50:6a:b6:d2:ce:
                    be:14:38:69:0c:fc:e9:33:81:9f:2c:b0:aa:7b:3d:
                    a7:ae:4a:95:ff:64:f4:46:8a:70:a6:8e:9e:cd:14:
                    53:1f:a2:7f:3d:4d:9f:6b:53:35:b0:26:3a:e8:b7:
                    04:e6:b5:7d:87:4e:71:30:4f:37:92:2f:08:af:ff:
                    d9:6a:48:1b:5e:dc:5f:65:4d:87:57:c4:07:48:62:
                    ec:66:85:fc:1f:da:2d:2c:38:37:d9:0e:5a:8b:91:
                    0a:d5:78:e9:5f:31:80:81:1b:22:2e:d3:f5:33:5d:
                    1d:c7:17:aa:e3:8a:8b:da:b6:fe:d3:48:e2:32:fd:
                    bf:01:07:16:f5:69:80:76:37:55:96:db:aa:e4:db:
                    b2:8f:16:84:93:b9:19:56:5f:6e:e5:7e:e7:54:41:
                    25:2e:76:41:23:d4:39:a6:c9:53:f1:85:3a:b0:98:
                    7a:d3:d9:cc:ee:b1:fd:48:95:89:ca:f7:98:e5:5b:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:17:06:12:51:F9:54:4E:E1:5D:6C:FE:90:F3:D9:3C:31:EB:F3:21
            X509v3 Authority Key Identifier:
                keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:0a:1d:62:85:ca:7c:4b:bc:ac:51:ef:a2:c7:03:fd:cd:75:
         39:5d:4f:ba:bf:de:0b:fb:c5:23:bf:ea:30:e5:84:7d:38:51:
         dc:9c:9f:04:45:f1:f2:3c:c1:27:b7:ed:3a:96:05:9e:10:24:
         5f:91:b9:62:d6:14:ce:99:ea:7a:22:4b:97:32:3f:d8:12:31:
         88:f0:8c:d7:09:d3:2a:6a:fd:69:22:1b:1b:5d:8d:77:b2:8d:
         00:d5:73:7d:06:6b:6b:03:6c:29:79:29:52:b2:21:ce:b1:0c:
         06:76:f1:f4:88:a9:dd:c6:f1:82:d6:65:de:6b:a6:18:86:79:
         08:05:e3:ad:db:0d:6a:bf:20:8d:b2:77:62:8e:2b:2e:4e:6e:
         37:f9:d8:e6:a1:42:74:87:49:53:4f:3b:73:f8:26:1f:7c:ae:
         d4:06:ec:8e:f2:31:88:ec:c0:3e:8f:eb:04:1b:6c:38:d3:e5:
         c2:c3:4d:3e:67:d5:8f:e8:03:02:16:b1:b0:64:99:1e:29:c1:
         10:73:f7:65:60:68:e5:a2:39:8b:84:19:07:0e:ef:8a:00:1b:
         e5:b8:2e:33:de:1e:30:f5:53:10:d2:6b:01:bc:f7:8c:88:2e:
         dd:7d:4b:2b:59:f3:28:70:ca:2c:ce:d1:c2:64:2c:43:25:8c:
         fa:27:20:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:41:19 2026 by rpki-client