Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
File:                     rKBb-WKVthwuROndPExIxFm56Vw.mft (raw, json)
Hash identifier:          nSI5mLYaq7h6DlEomYnt0lu4HfB7F3H0dERHG1FxaUU=
Subject key identifier:   67:0B:A3:E2:FC:60:E6:C8:A9:0A:DA:59:E1:94:A9:B1:13:F5:7C:2B
Authority key identifier: AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
Certificate issuer:       /CN=A91547EC/serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
Manifest number:          A8
Signing time:             Mon 27 Jul 2026 09:19:46 +0000
Manifest this update:     Mon 27 Jul 2026 09:19:46 +0000
Manifest next update:     Mon 03 Aug 2026 09:19:46 +0000
Files and hashes:         1: rKBb-WKVthwuROndPExIxFm56Vw.crl (hash: jCoZ28DwXPHU/eGA6WQnWujUmxQI00Ghc9tt+KvfhcU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
                          rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91547EC, serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
        Validity
            Not Before: Jul 27 09:19:46 2026 GMT
            Not After : Aug  3 09:19:46 2026 GMT
        Subject: CN=6a6722b2-d807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:7c:a3:d6:1c:43:bd:20:64:0a:6b:2e:24:
                    0d:02:cb:93:76:c9:b7:ec:71:c4:76:e6:fe:3a:d7:
                    7a:fb:3e:1e:cc:73:da:7c:d5:df:e4:d0:ae:3b:0e:
                    87:1f:e4:be:c5:7d:85:5f:c4:00:ad:1c:ac:cf:ba:
                    19:7a:52:4b:3d:7f:fb:af:4b:c4:db:1b:b1:47:ae:
                    f9:ae:d9:dd:28:35:42:19:25:52:4c:a6:b6:fd:e7:
                    53:f3:55:f1:c2:df:93:02:57:b6:7d:7d:f1:87:d9:
                    3e:af:30:8b:07:ef:a7:be:72:24:fd:c6:0e:d7:60:
                    89:be:4b:d3:df:66:8c:04:32:bc:4b:b6:2d:5d:70:
                    59:82:00:85:0d:9c:c5:9f:2c:e1:af:dd:4f:92:23:
                    52:88:53:36:fe:24:85:ed:e4:9f:a1:75:46:39:e2:
                    91:54:51:c5:92:05:b8:41:ad:a3:59:e1:9c:dd:10:
                    48:8e:e7:59:25:22:e0:33:f7:69:e8:b7:0c:0d:60:
                    83:41:ca:c3:0e:af:37:ee:24:23:52:3c:9e:13:98:
                    69:42:0e:70:a0:21:b5:9a:d0:1f:40:29:db:ed:82:
                    ab:12:72:d4:f6:82:4b:16:09:2a:37:66:41:55:40:
                    0b:16:ad:53:a3:12:df:51:94:1e:09:f0:2f:30:9a:
                    77:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0B:A3:E2:FC:60:E6:C8:A9:0A:DA:59:E1:94:A9:B1:13:F5:7C:2B
            X509v3 Authority Key Identifier:
                keyid:AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:84:23:9b:0e:2b:08:65:b8:8a:cd:38:69:bd:10:79:8b:c3:
         40:d0:f1:bc:75:98:e2:e9:c1:3a:75:ec:ff:1a:55:1a:99:2d:
         e3:f7:13:19:48:bc:11:1a:3f:eb:97:8a:68:48:c3:3e:ee:a0:
         c0:64:87:01:64:18:6d:ce:1f:ce:6e:4a:1d:bc:6f:03:80:cd:
         74:93:cd:ef:64:12:2b:4a:48:08:59:c7:fe:2e:36:99:ea:c9:
         45:de:68:7d:04:a9:a2:9f:1c:ec:86:9c:82:7a:b5:a8:97:1a:
         54:05:5c:72:b6:fc:3b:9e:4b:e7:0e:a0:79:01:2f:f5:1b:8a:
         d2:e2:4c:b8:9d:c1:58:d2:4e:4e:1e:27:65:64:50:ab:47:e0:
         64:f0:0b:26:f7:9e:fe:14:4a:6a:b0:13:a4:76:6b:d3:fc:65:
         8a:24:1c:f2:6f:0e:13:ac:17:3c:49:00:ab:a1:b5:e1:fe:e1:
         9e:08:4c:19:8c:a6:83:25:38:bf:fe:d8:93:29:c9:de:11:0d:
         70:c8:da:ca:b4:30:fe:ad:89:0e:f1:e4:f0:a1:52:9b:76:05:
         ee:ab:31:bb:e2:b0:1b:25:66:2d:82:d8:7f:db:b2:14:a2:0d:
         c2:53:61:3d:66:fb:84:4a:d8:68:18:95:e0:97:40:bc:3e:41:
         89:34:87:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ3RUMxMTAvBgNVBAUTKEFDQTA1QkY5NjI5NUI2MUMyRTQ0RTlERDNDNEM0OEM0
NTlCOUU5NUMwHhcNMjYwNzI3MDkxOTQ2WhcNMjYwODAzMDkxOTQ2WjAYMRYwFAYD
VQQDEw02YTY3MjJiMi1kODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1E58o9YcQ70gZAprLiQNAsuTdsm37HHEdub+Otd6+z4ezHPafNXf5NCuOw6H
H+S+xX2FX8QArRysz7oZelJLPX/7r0vE2xuxR675rtndKDVCGSVSTKa2/edT81Xx
wt+TAle2fX3xh9k+rzCLB++nvnIk/cYO12CJvkvT32aMBDK8S7YtXXBZggCFDZzF
nyzhr91PkiNSiFM2/iSF7eSfoXVGOeKRVFHFkgW4Qa2jWeGc3RBIjudZJSLgM/dp
6LcMDWCDQcrDDq837iQjUjyeE5hpQg5woCG1mtAfQCnb7YKrEnLU9oJLFgkqN2ZB
VUALFq1ToxLfUZQeCfAvMJp3uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcLo+L8
YObIqQraWeGUqbET9XwrMB8GA1UdIwQYMBaAFKygW/lilbYcLkTp3TxMSMRZuelc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDdFQy8yRTY1OTc5Njg3
REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9yS0JiLVdLVnRod3VST25kUEV4SXhGbTU2
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JLQmItV0tWdGh3dVJPbmRQRXhJeEZtNTZWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDdFQy8yRTY1OTc5Njg3REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9yS0JiLVdLVnRo
d3VST25kUEV4SXhGbTU2VncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe4Qjmw4rCGW4is04ab0QeYvDQNDxvHWY4unBOnXs/xpVGpkt4/cTGUi8ERo/
65eKaEjDPu6gwGSHAWQYbc4fzm5KHbxvA4DNdJPN72QSK0pICFnH/i42merJRd5o
fQSpop8c7Iacgnq1qJcaVAVccrb8O55L5w6geQEv9RuK0uJMuJ3BWNJOTh4nZWRQ
q0fgZPALJvee/hRKarATpHZr0/xliiQc8m8OE6wXPEkAq6G14f7hnghMGYymgyU4
v/7YkynJ3hENcMjayrQw/q2JDvHk8KFSm3YF7qsxu+KwGyVmLYLYf9uyFKINwlNh
PWb7hErYaBiV4JdAvD5BiTSHyw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:13:57 2026 by rpki-client