Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft
File:                     KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json)
Hash identifier:          ivPDodnaiWaKxj0uR+MiLfTwBrbczWAX6g2JyWmNOvo=
Subject key identifier:   59:C2:1C:3F:46:97:CD:5C:9E:CE:CD:D5:40:59:DD:83:35:46:60:69
Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58
Certificate issuer:       /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758
Certificate serial:       1B46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft
Manifest number:          1B20
Signing time:             Tue 28 Jul 2026 16:23:53 +0000
Manifest this update:     Tue 28 Jul 2026 16:23:52 +0000
Manifest next update:     Tue 04 Aug 2026 16:23:52 +0000
Files and hashes:         1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: F+kzKEiJ0qOwnltndcfAOKkNfdI3pW4eyhuKDylJIFQ=)
                          2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: y1WBN7gHbpcQFgS5AiIM5+b+xvlqJCl6oOkurOSohSs=)
                          3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: Kuw7O4GbqUm/LsdHrCx6y55gHQykPcsm3zG17OVPWXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl
                          rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:23:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6982 (0x1b46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758
        Validity
            Not Before: Jul 28 16:23:52 2026 GMT
            Not After : Aug  4 16:23:52 2026 GMT
        Subject: CN=6a68d799-1794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a0:e6:2a:fa:08:8f:d2:65:a5:c1:4c:69:e2:
                    fd:30:1a:4a:67:e3:ba:d2:6f:11:19:ed:3f:42:32:
                    e6:7a:d8:f1:01:e0:ba:b3:90:fa:60:e5:f1:ea:4b:
                    55:0b:d9:93:23:00:dd:6e:2c:c6:76:c8:14:e5:76:
                    37:ca:0d:33:7b:5e:73:c5:18:f7:19:bb:c8:70:c4:
                    b8:a4:1f:04:c5:e0:de:3a:31:27:00:0e:09:f9:e3:
                    16:94:ab:28:b8:85:9c:75:9e:81:4f:60:82:42:d6:
                    1f:3d:3d:bc:eb:56:f6:85:e5:ad:7e:57:9b:bd:a5:
                    52:75:0c:0e:29:fa:2d:9c:f4:79:f9:df:e7:2a:25:
                    74:34:82:5f:f4:97:cd:44:f5:ac:72:46:1b:8f:31:
                    dd:e6:ac:f8:e0:41:80:5c:4c:cf:cb:3a:0d:c2:74:
                    dd:04:3c:b7:ec:13:51:5d:7f:5b:d7:59:6e:9d:5e:
                    97:9d:02:e7:5d:12:e8:19:12:19:c8:df:3f:85:eb:
                    b3:32:65:83:75:c2:37:c9:64:b9:22:f6:d4:bd:fe:
                    46:9c:13:c3:a0:99:fd:21:89:18:13:ce:75:11:29:
                    29:bb:36:b5:f3:4c:06:a0:eb:62:30:76:ad:1d:80:
                    42:27:10:da:69:ef:79:69:b7:3e:ae:e8:1e:af:af:
                    55:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C2:1C:3F:46:97:CD:5C:9E:CE:CD:D5:40:59:DD:83:35:46:60:69
            X509v3 Authority Key Identifier:
                keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:97:3e:69:3a:df:95:ca:2f:c5:7a:20:0c:c6:10:6c:0c:0f:
         20:84:99:e4:5c:7b:0f:b4:39:8c:51:42:c3:bc:6f:ba:36:3f:
         2e:39:79:c2:dd:9f:31:cb:5d:43:af:95:a5:a9:2e:dd:57:68:
         ec:a1:58:a1:fc:bc:f8:bd:6d:2b:d2:12:3a:f4:d7:0a:ee:75:
         c8:1f:e7:5e:25:94:ae:e0:50:95:9e:8e:e0:5a:07:f9:35:5e:
         04:6f:18:b8:bc:5b:41:85:2f:d3:31:82:d6:59:bb:08:b9:e1:
         a4:b9:b4:93:5b:19:5b:c6:d0:e0:23:f4:be:45:65:5d:c8:f0:
         a7:23:12:46:c9:66:a7:44:94:8d:d3:ea:c9:bc:7c:b4:e8:a6:
         3c:55:7e:0a:7c:20:89:de:1d:51:41:24:6f:e1:f8:58:b1:d0:
         aa:4e:f8:a8:59:b8:e7:5f:9e:fa:97:f6:a4:39:1c:3a:84:45:
         83:fa:de:fa:df:7e:fa:9c:7e:ed:a1:e0:3e:61:3b:d0:00:ff:
         69:82:48:75:15:bb:0d:f4:97:18:f8:ec:ca:be:fc:2c:ae:e8:
         01:cd:b5:de:b0:c7:42:39:49:e2:1c:59:e4:ef:48:88:25:51:
         4c:18:98:f3:7a:24:b0:21:10:cf:3f:9c:5d:79:87:f8:7e:87:
         84:8e:83:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICG0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw
MTJCQzM3NTgwHhcNMjYwNzI4MTYyMzUyWhcNMjYwODA0MTYyMzUyWjAYMRYwFAYD
VQQDEw02YTY4ZDc5OS0xNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmaDmKvoIj9JlpcFMaeL9MBpKZ+O60m8RGe0/QjLmetjxAeC6s5D6YOXx6ktV
C9mTIwDdbizGdsgU5XY3yg0ze15zxRj3GbvIcMS4pB8ExeDeOjEnAA4J+eMWlKso
uIWcdZ6BT2CCQtYfPT2861b2heWtflebvaVSdQwOKfotnPR5+d/nKiV0NIJf9JfN
RPWsckYbjzHd5qz44EGAXEzPyzoNwnTdBDy37BNRXX9b11lunV6XnQLnXRLoGRIZ
yN8/heuzMmWDdcI3yWS5IvbUvf5GnBPDoJn9IYkYE851ESkpuza180wGoOtiMHat
HYBCJxDaae95abc+ruger69VswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnCHD9G
l81cns7N1UBZ3YM1RmBpMB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw
RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO
MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl
VGNuZHZGZHE0bmNCSzhOMWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuZc+aTrflcovxXogDMYQbAwPIISZ5Fx7D7Q5jFFCw7xvujY/Ljl5wt2fMctd
Q6+Vpaku3Vdo7KFYofy8+L1tK9ISOvTXCu51yB/nXiWUruBQlZ6O4FoH+TVeBG8Y
uLxbQYUv0zGC1lm7CLnhpLm0k1sZW8bQ4CP0vkVlXcjwpyMSRslmp0SUjdPqybx8
tOimPFV+Cnwgid4dUUEkb+H4WLHQqk74qFm451+e+pf2pDkcOoRFg/re+t9++px+
7aHgPmE70AD/aYJIdRW7DfSXGPjsyr78LK7oAc213rDHQjlJ4hxZ5O9IiCVRTBiY
83oksCEQzz+cXXmH+H6HhI6DCw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:50:18 2026 by rpki-client