Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
File:                     kOgVQgZDtd1jkSg9Z3RKOrowctM.mft (raw, json)
Hash identifier:          J+xMRSqip6B4RZy5iOaTxc/RFTnZWeclCxeOJUiOomA=
Subject key identifier:   A8:EF:EC:C2:18:D6:3D:5B:80:31:D6:25:31:DB:BC:12:88:36:82:E3
Authority key identifier: 90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3
Certificate issuer:       /CN=A914BB5D/serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
Certificate serial:       0CDF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
Manifest number:          0CCD
Signing time:             Tue 28 Jul 2026 18:38:58 +0000
Manifest this update:     Tue 28 Jul 2026 18:38:57 +0000
Manifest next update:     Tue 04 Aug 2026 18:38:57 +0000
Files and hashes:         1: kOgVQgZDtd1jkSg9Z3RKOrowctM.crl (hash: q3NhmAm9krhWFe3wKly8VvQLyKeFhNADPsEphjHpJdE=)
                          2: B52B819E14F411EA96EC5874C4F9AE02.roa (hash: 0ylwtp+Xde2oLtmDBX2li5EHhsIVUZ6el50n4zuRj9M=)
                          3: B49D829014F411EA96EC5874C4F9AE02.roa (hash: jzZbajVx8oCsyDMI49EOzkY4Rk+3PCwW3QcgbUirijU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl
                          rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3295 (0xcdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BB5D, serialNumber=90E815420643B5DD6391283D67744A3ABA3072D3
        Validity
            Not Before: Jul 28 18:38:57 2026 GMT
            Not After : Aug  4 18:38:57 2026 GMT
        Subject: CN=6a68f742-f66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:b9:eb:28:f3:ff:31:68:6c:f8:5f:34:47:
                    a1:49:a7:8e:7c:6b:bd:f0:71:fe:48:8a:0d:64:5a:
                    91:fc:66:ec:e8:ef:d3:d5:d5:29:46:57:de:fc:e1:
                    ff:47:da:f9:66:18:e9:09:39:00:c2:49:95:75:8f:
                    85:99:ed:b9:35:30:78:07:8f:43:37:b1:7f:7d:88:
                    e3:18:a2:ba:7f:66:e3:14:bd:bf:66:93:2f:e7:b7:
                    0e:b9:92:3e:18:e5:51:bd:e7:2b:1f:d7:8e:ae:ea:
                    11:da:38:a0:f2:5d:09:35:2f:24:b1:79:0f:ce:9f:
                    07:85:19:a9:49:61:8a:cd:b9:04:21:50:3d:36:77:
                    e0:7d:83:55:bd:69:56:1d:60:c8:4d:56:8a:2d:f0:
                    2d:ca:73:8a:2d:b1:f2:c7:d5:a3:39:5a:d1:18:21:
                    03:29:51:f2:64:66:01:81:55:25:51:7e:0a:d6:3d:
                    e3:6b:3f:7d:93:1a:77:ac:7a:90:df:da:c7:e3:45:
                    6b:25:ed:34:01:7e:1b:a0:60:6c:be:8d:57:60:b8:
                    c1:fe:56:f7:51:28:e5:20:6d:3a:00:b5:1d:0c:6f:
                    81:c7:f3:e6:54:bb:d4:ac:e0:97:32:5d:6a:81:fa:
                    4d:e6:53:10:cc:b6:a4:66:13:a3:8c:de:99:ce:ba:
                    f3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EF:EC:C2:18:D6:3D:5B:80:31:D6:25:31:DB:BC:12:88:36:82:E3
            X509v3 Authority Key Identifier:
                keyid:90:E8:15:42:06:43:B5:DD:63:91:28:3D:67:74:4A:3A:BA:30:72:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kOgVQgZDtd1jkSg9Z3RKOrowctM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BB5D/F027CDB414F111EA9A06846BC4F9AE02/kOgVQgZDtd1jkSg9Z3RKOrowctM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:f1:8c:29:ee:22:15:8e:72:1b:e0:d4:01:84:55:03:3e:
         91:50:72:c1:a7:14:bb:ad:8c:6b:84:d9:b5:2f:b4:8f:46:0c:
         bf:08:14:e3:9c:17:70:1a:cf:9c:52:b2:c3:a3:bb:ad:d2:0e:
         5a:d1:26:28:2f:d7:ce:07:86:35:93:ca:a7:81:eb:1b:df:cd:
         a1:8d:43:47:eb:21:27:ca:6b:5c:f9:9e:18:2c:92:50:61:ef:
         6f:47:19:cb:a9:bd:6a:32:dd:c1:ad:3c:35:e9:14:20:88:b9:
         0e:86:11:b2:16:d8:2d:33:0a:d2:e6:ad:35:bb:fc:f9:5a:62:
         bc:a1:8f:b9:fc:57:b9:74:f8:98:c2:d9:2a:73:19:e8:90:0a:
         71:3f:88:f7:5f:77:db:e9:de:57:14:5d:58:8c:25:84:0f:78:
         9e:f3:c7:0f:27:0d:fb:5c:92:68:0d:df:b2:e8:49:83:57:1d:
         9b:29:9c:0c:0d:51:ed:df:7b:0d:95:97:51:09:64:34:ab:a1:
         ff:8f:3a:e5:cb:58:d3:8d:a5:2b:3b:48:9a:17:f9:bf:6b:78:
         a3:fb:a3:51:9c:3e:a6:a3:07:34:00:ab:57:ff:d4:84:54:81:
         e6:8c:97:fc:ba:87:09:05:62:03:3e:ab:73:95:82:9f:14:38:
         5b:39:1f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:15:34 2026 by rpki-client