Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
File:                     2kcnine73_Ktn5igEaKnoufNYNg.mft (raw, json)
Hash identifier:          PttZ7T4xN5ALmHwldfTjyfU2eVXqtRcnF5mzfSDYZe8=
Subject key identifier:   78:F0:90:E4:2D:6F:2C:FB:1D:2B:8A:83:24:EF:48:1D:9F:6F:5A:32
Authority key identifier: DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8
Certificate issuer:       /CN=A91393BE/serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
Manifest number:          0172
Signing time:             Mon 27 Jul 2026 06:32:19 +0000
Manifest this update:     Mon 27 Jul 2026 06:32:18 +0000
Manifest next update:     Mon 03 Aug 2026 06:32:18 +0000
Files and hashes:         1: 2kcnine73_Ktn5igEaKnoufNYNg.crl (hash: YSi9tng18AQMAns0fpC44adj7tgZ+zrp27w3Djx9Y8Q=)
                          2: 05A966C652DB11EF990CB840C4F9AE02.roa (hash: /ju6tAC2YvQK9Mt9Ug1vYucEJYF6/PAoDqUqSoXsrZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl
                          rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91393BE, serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8
        Validity
            Not Before: Jul 27 06:32:18 2026 GMT
            Not After : Aug  3 06:32:18 2026 GMT
        Subject: CN=6a66fb72-edf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:af:49:0a:da:44:18:d5:57:58:56:da:87:32:
                    b8:1b:65:19:5d:30:77:11:87:19:96:be:88:50:66:
                    2f:ca:c2:fe:0d:43:3c:8f:92:ed:0d:20:2b:16:61:
                    aa:12:93:6d:50:ab:c3:8d:b7:5d:01:33:e9:7a:66:
                    fe:c2:7f:a9:dc:e2:39:64:a5:90:c7:03:c5:58:71:
                    3b:3a:3b:29:ee:c7:dd:dd:c4:95:97:b4:a8:3a:8d:
                    ea:18:d4:e8:cb:1b:4b:16:b2:b1:53:af:f0:7e:f8:
                    7e:16:68:e6:51:d1:ef:39:62:e3:ea:0a:9d:55:c1:
                    8f:87:0b:87:ce:ea:3c:c0:e0:0c:5c:26:2f:47:fe:
                    a3:d4:08:00:f7:76:7c:b0:02:7b:98:1e:97:dd:bd:
                    3b:d6:6f:a3:be:91:93:5f:cb:87:65:56:30:7b:97:
                    4a:40:4d:f4:d3:d1:dc:43:f8:c1:31:f2:5c:e5:08:
                    92:e4:6d:c0:c4:cd:7d:e4:6e:fa:4d:1d:0d:98:3d:
                    22:a7:10:14:7f:5c:c3:95:e8:39:f9:e1:1e:74:ff:
                    a0:e2:e1:a6:3b:90:49:06:01:e6:02:fb:6b:1f:74:
                    6d:6c:a8:26:f3:20:31:3e:fa:82:de:26:de:fd:72:
                    72:a7:c4:38:cc:b1:91:d9:df:3a:1f:df:c3:68:6f:
                    85:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F0:90:E4:2D:6F:2C:FB:1D:2B:8A:83:24:EF:48:1D:9F:6F:5A:32
            X509v3 Authority Key Identifier:
                keyid:DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a3:4a:92:14:36:d2:4f:32:2b:b0:ee:ba:f5:d8:7e:3f:60:
         ef:73:60:41:50:c9:63:3f:c7:15:03:89:0d:e5:da:b2:be:47:
         ec:19:7f:fa:19:5e:55:bf:08:e6:23:db:86:f8:b5:64:8a:03:
         26:a4:1b:d3:53:2d:43:02:b8:da:7f:f8:ee:dd:d7:d3:ee:e8:
         96:0e:08:a0:bf:bc:2e:80:75:bf:89:46:2b:25:62:e7:e4:26:
         17:01:90:d2:20:58:75:a1:73:3a:48:51:0d:cb:e7:67:f2:52:
         64:de:38:90:d7:5a:e6:a6:f1:47:b5:05:ea:7f:e0:05:b8:da:
         d7:13:53:b0:48:1a:9d:38:4b:e1:a6:e1:f5:ad:58:d7:85:c9:
         80:c5:d3:61:d5:b2:6c:79:fd:d9:1a:df:fc:a5:dd:1c:c2:41:
         cb:f6:49:bc:a7:ea:2e:6b:35:cc:c4:e5:c8:b8:8f:69:7a:7f:
         36:6b:52:ca:78:e6:3e:46:41:58:45:41:78:f6:66:da:70:c8:
         1a:af:65:70:cc:2d:24:3f:2a:68:af:03:0d:8c:f4:7a:81:59:
         c4:51:98:e0:58:f0:3d:14:12:8a:71:f1:a0:5a:a5:b7:78:36:
         c9:d0:48:a9:c4:26:b7:2d:4c:31:68:db:e4:ac:4b:d4:dd:6f:
         53:5a:df:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkzQkUxMTAvBgNVBAUTKERBNDcyNzhBNzdCQkRGRjJBRDlGOThBMDExQTJBN0Ey
RTdDRDYwRDgwHhcNMjYwNzI3MDYzMjE4WhcNMjYwODAzMDYzMjE4WjAYMRYwFAYD
VQQDEw02YTY2ZmI3Mi1lZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0K9JCtpEGNVXWFbahzK4G2UZXTB3EYcZlr6IUGYvysL+DUM8j5LtDSArFmGq
EpNtUKvDjbddATPpemb+wn+p3OI5ZKWQxwPFWHE7Ojsp7sfd3cSVl7SoOo3qGNTo
yxtLFrKxU6/wfvh+FmjmUdHvOWLj6gqdVcGPhwuHzuo8wOAMXCYvR/6j1AgA93Z8
sAJ7mB6X3b071m+jvpGTX8uHZVYwe5dKQE3009HcQ/jBMfJc5QiS5G3AxM195G76
TR0NmD0ipxAUf1zDleg5+eEedP+g4uGmO5BJBgHmAvtrH3RtbKgm8yAxPvqC3ibe
/XJyp8Q4zLGR2d86H9/DaG+F/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHjwkOQt
byz7HSuKgyTvSB2fb1oyMB8GA1UdIwQYMBaAFNpHJ4p3u9/yrZ+YoBGip6LnzWDY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTNCRS83NzQxNjE0QzUy
RDMxMUVGQkFFRERDMUVDNEY5QUUwMi8ya2NuaW5lNzNfS3RuNWlnRWFLbm91Zk5Z
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJrY25pbmU3M19LdG41aWdFYUtub3VmTllOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTNCRS83NzQxNjE0QzUyRDMxMUVGQkFFRERDMUVDNEY5QUUwMi8ya2NuaW5lNzNf
S3RuNWlnRWFLbm91Zk5ZTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg6NKkhQ20k8yK7DuuvXYfj9g73NgQVDJYz/HFQOJDeXasr5H7Bl/+hleVb8I
5iPbhvi1ZIoDJqQb01MtQwK42n/47t3X0+7olg4IoL+8LoB1v4lGKyVi5+QmFwGQ
0iBYdaFzOkhRDcvnZ/JSZN44kNda5qbxR7UF6n/gBbja1xNTsEganThL4abh9a1Y
14XJgMXTYdWybHn92Rrf/KXdHMJBy/ZJvKfqLms1zMTlyLiPaXp/NmtSynjmPkZB
WEVBePZm2nDIGq9lcMwtJD8qaK8DDYz0eoFZxFGY4FjwPRQSinHxoFqlt3g2ydBI
qcQmty1MMWjb5KxL1N1vU1rfFQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:46:40 2026 by rpki-client