Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
File:                     KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json)
Hash identifier:          mCKXWceS2acs3zh6sJIG3B9QbOw/L42u37AfItAcfNQ=
Subject key identifier:   E3:87:A8:47:1E:2F:F9:B4:4F:76:67:1F:3F:63:35:5F:FF:6F:51:82
Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
Certificate issuer:       /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
Certificate serial:       06BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
Manifest number:          06A8
Signing time:             Sun 26 Jul 2026 23:17:40 +0000
Manifest this update:     Sun 26 Jul 2026 23:17:39 +0000
Manifest next update:     Sun 02 Aug 2026 23:17:39 +0000
Files and hashes:         1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: 3gEo7F1aJYch1YUttu/t6g7F7Cs0IgwvgXuVnzj/CIU=)
                          2: 590697D6465611EE8128031BC4F9AE02.roa (hash: VAtwg4JA7DKaiR1Y/aQYlkU3CfV+E/YtMAPsl8ob9cY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl
                          rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1723 (0x6bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
        Validity
            Not Before: Jul 26 23:17:39 2026 GMT
            Not After : Aug  2 23:17:39 2026 GMT
        Subject: CN=6a669594-e23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:31:bf:00:73:3b:4f:6c:41:94:b7:90:5b:
                    42:55:49:8d:9c:3e:82:d8:0f:03:a6:dc:8d:a9:ef:
                    b4:bd:99:8b:ce:45:58:67:26:51:4a:61:b1:f5:c4:
                    a9:d1:73:54:ce:73:10:15:dd:9a:8b:9b:bb:a7:a0:
                    88:d9:dc:8d:8c:f9:a5:6d:d4:79:ca:21:09:d6:ee:
                    eb:c3:cb:6a:13:59:a4:d4:ba:9a:e1:3e:32:35:59:
                    cf:b4:b6:36:35:b3:1c:af:50:b6:83:b6:a4:fa:bb:
                    c1:38:00:b4:67:7a:27:06:a4:64:aa:72:de:a9:e1:
                    3b:cd:5a:dc:80:b5:3a:6c:ed:dd:9e:46:82:9b:17:
                    e9:62:11:1b:2c:c9:02:a3:ae:7b:89:90:77:68:43:
                    1a:31:90:01:fb:1c:53:1e:c6:64:fe:36:f4:b7:52:
                    45:74:88:ac:77:81:b8:b1:38:0e:7b:5c:bb:52:f3:
                    9a:f7:d0:28:b6:74:2a:11:c8:ce:03:d2:db:ab:73:
                    a8:2c:ea:c3:96:93:f3:2b:52:24:4e:d1:c4:29:8f:
                    31:be:6d:0e:b7:59:8d:9c:be:7b:28:5c:2c:f4:86:
                    0f:b0:91:cc:0d:00:3b:54:82:d0:0c:2b:6c:81:ff:
                    63:6e:87:7a:90:62:fa:09:66:8d:09:22:88:83:3e:
                    36:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:87:A8:47:1E:2F:F9:B4:4F:76:67:1F:3F:63:35:5F:FF:6F:51:82
            X509v3 Authority Key Identifier:
                keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:58:23:e5:0c:88:b9:05:ac:df:bc:e0:de:4d:07:93:d8:5f:
         d6:a6:06:74:db:23:f6:a1:ab:2f:72:76:2f:9e:1a:61:a9:b5:
         5c:bd:88:34:c9:39:95:36:bb:97:98:db:39:9a:bc:92:2e:d3:
         ce:6d:07:9b:b1:ca:d6:b5:4b:1e:16:fc:71:2b:96:ef:02:70:
         7e:66:ae:a3:e5:0d:5a:95:0c:a0:98:ad:88:a8:4b:87:8f:8e:
         d6:2d:ed:82:1b:c7:1c:d8:b4:ec:d5:1d:0a:24:f0:a2:31:ee:
         b4:2a:8f:37:e4:22:38:a6:c3:84:99:12:87:c5:82:40:24:5e:
         71:36:c6:0e:32:a6:2e:62:7e:1e:eb:0b:21:d9:ee:16:56:e8:
         61:6c:f9:7e:e8:43:21:1a:a5:73:70:81:ed:7a:fe:ca:07:d1:
         76:a8:4a:c1:c6:c9:ff:74:fc:88:df:0e:4d:7d:ec:51:20:9d:
         8f:a9:ee:a2:20:c8:c8:62:27:25:41:fa:60:52:87:95:d7:07:
         ed:39:89:af:8c:48:33:ce:78:da:f5:4a:c0:1b:0a:a8:e1:c5:
         7a:77:51:70:29:14:04:40:3f:a0:b7:95:66:67:b5:c8:fa:27:
         4a:78:1b:5d:ac:0e:19:b0:ed:69:a8:d1:76:7a:ea:94:a6:5b:
         5e:d9:61:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG
ODE1NkUwRTkwHhcNMjYwNzI2MjMxNzM5WhcNMjYwODAyMjMxNzM5WjAYMRYwFAYD
VQQDEw02YTY2OTU5NC1lMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApXcxvwBzO09sQZS3kFtCVUmNnD6C2A8DptyNqe+0vZmLzkVYZyZRSmGx9cSp
0XNUznMQFd2ai5u7p6CI2dyNjPmlbdR5yiEJ1u7rw8tqE1mk1Lqa4T4yNVnPtLY2
NbMcr1C2g7ak+rvBOAC0Z3onBqRkqnLeqeE7zVrcgLU6bO3dnkaCmxfpYhEbLMkC
o657iZB3aEMaMZAB+xxTHsZk/jb0t1JFdIisd4G4sTgOe1y7UvOa99AotnQqEcjO
A9Lbq3OoLOrDlpPzK1IkTtHEKY8xvm0Ot1mNnL57KFws9IYPsJHMDQA7VILQDCts
gf9jbod6kGL6CWaNCSKIgz420wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOOHqEce
L/m0T3ZnHz9jNV//b1GCMB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1
MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjEwOS9DODIwNzIxMkM1MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNr
Y0gyN0ZKN1ZWOEQ0Rlc0T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVVgj5QyIuQWs37zg3k0Hk9hf1qYGdNsj9qGrL3J2L54aYam1XL2INMk5lTa7
l5jbOZq8ki7Tzm0Hm7HK1rVLHhb8cSuW7wJwfmauo+UNWpUMoJitiKhLh4+O1i3t
ghvHHNi07NUdCiTwojHutCqPN+QiOKbDhJkSh8WCQCRecTbGDjKmLmJ+HusLIdnu
FlboYWz5fuhDIRqlc3CB7Xr+ygfRdqhKwcbJ/3T8iN8OTX3sUSCdj6nuoiDIyGIn
JUH6YFKHldcH7TmJr4xIM8542vVKwBsKqOHFendRcCkUBEA/oLeVZme1yPonSngb
XawOGbDtaajRdnrqlKZbXtlhsQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:37:22 2026 by rpki-client