Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
File:                     kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json)
Hash identifier:          bFJ0UeJuFz4tv2IfqXf67RZHAEZD9UtTjQsXPbShA2Y=
Subject key identifier:   AE:F9:EC:A0:3C:08:C1:06:1D:DE:CF:A4:69:7A:B1:A5:B5:B2:D3:13
Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01
Certificate issuer:       /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
Certificate serial:       0D4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
Manifest number:          0D42
Signing time:             Tue 28 Jul 2026 18:11:08 +0000
Manifest this update:     Tue 28 Jul 2026 18:11:07 +0000
Manifest next update:     Tue 04 Aug 2026 18:11:07 +0000
Files and hashes:         1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: 5arEp6wXEJUKo/c1XzTvxouYqyM0f+73oj6rNx0O+2o=)
                          2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: YjPccAzJNBU/ZdWKFo5jYPgMQyoV2n/b3P7n6tGh3TQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl
                          rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3406 (0xd4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
        Validity
            Not Before: Jul 28 18:11:07 2026 GMT
            Not After : Aug  4 18:11:07 2026 GMT
        Subject: CN=6a68f0bc-2ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:5e:b4:ed:a4:fa:b4:16:f5:b7:b0:e8:31:
                    da:06:9b:48:e5:86:79:94:38:d7:45:ca:d5:50:2b:
                    b1:d9:32:92:7d:b7:c3:5d:4a:45:23:36:52:19:61:
                    04:58:a0:3b:c8:bc:a5:b9:82:f5:8a:a0:cb:8b:26:
                    ca:a2:5e:54:57:e4:9e:af:de:0f:44:db:0e:35:56:
                    b5:3b:bb:62:7c:f6:2c:d1:4f:5a:3e:36:42:c4:ac:
                    a9:36:6e:d0:32:2d:67:78:ba:59:28:f5:7b:ad:84:
                    46:7f:41:8b:b9:3b:9d:1c:19:7b:e5:87:45:eb:ad:
                    2f:5b:9b:9f:aa:03:f8:63:93:ea:96:cc:70:1b:54:
                    e1:7f:6b:04:cd:e4:73:18:07:1e:89:98:8d:cd:32:
                    0a:29:2a:a4:25:40:0c:cd:60:b3:1b:ca:91:bf:3a:
                    08:38:69:69:bc:e1:b6:70:37:91:59:7c:10:19:2f:
                    f0:29:3c:f8:b7:ad:41:2b:77:e4:e0:ee:3f:35:13:
                    25:15:b7:c0:ec:74:d7:59:1f:58:12:1f:dd:ec:b6:
                    b4:30:7f:19:0a:46:16:d4:56:7c:ab:a7:09:21:1c:
                    cf:9e:d8:e3:34:8c:a4:0a:67:bb:84:5c:b0:f5:7d:
                    bc:2b:26:b6:78:d1:19:8c:d6:26:a8:fc:d7:97:fa:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F9:EC:A0:3C:08:C1:06:1D:DE:CF:A4:69:7A:B1:A5:B5:B2:D3:13
            X509v3 Authority Key Identifier:
                keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f6:fd:90:b2:ca:3e:9e:d1:c3:f5:90:c5:90:0a:1e:39:9e:
         cd:2f:4b:a6:e7:c9:93:50:84:f7:6d:ba:52:32:c8:96:3e:47:
         03:6e:e0:c4:c7:6d:88:5c:72:4a:90:c4:a5:99:fe:ad:bb:d1:
         b3:f1:c8:20:d7:2a:26:f7:27:9e:78:f6:b6:a4:9e:8c:48:7c:
         43:1b:bc:2c:30:0e:d5:1b:ea:e2:ec:04:a9:ed:0e:f8:64:d3:
         ae:63:4f:47:c6:8d:08:2c:bd:6f:c3:76:7c:3f:ef:b4:27:92:
         3f:e3:e4:14:15:4a:66:75:5e:37:3d:dc:64:40:30:af:0a:7f:
         21:7f:da:ef:4c:d6:4f:74:be:b8:4c:33:5f:df:3f:01:ee:3d:
         a2:03:e6:bd:75:df:04:73:15:ed:cb:e3:d6:1d:fe:bf:53:83:
         fc:91:b2:08:5c:91:55:72:5d:58:6b:94:4b:0b:31:e3:59:51:
         33:3c:7c:a7:7f:3d:c8:5a:85:77:6a:05:de:81:b2:8c:34:b2:
         ed:b3:ef:f1:d6:e5:81:fe:a0:d4:e2:08:f3:97:82:f2:f6:7f:
         45:c1:cd:80:4c:ea:22:e4:62:21:53:13:14:a6:d8:9a:4d:a1:
         1b:93:dd:20:6a:ac:60:5a:5d:41:ac:86:2d:b7:ea:4e:be:58:
         f2:a5:7d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:20 2026 by rpki-client