Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
File:                     kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json)
Hash identifier:          e43P+EF2nRi4Nk/TAto4TUrSoVTC8v6XCbkrHFWCbrA=
Subject key identifier:   37:70:1B:65:B6:88:76:2E:2A:5D:56:99:8E:63:51:F5:9F:61:9F:3E
Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
Certificate issuer:       /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
Manifest number:          0108
Signing time:             Wed 29 Jul 2026 07:31:12 +0000
Manifest this update:     Wed 29 Jul 2026 07:31:11 +0000
Manifest next update:     Wed 05 Aug 2026 07:31:11 +0000
Files and hashes:         1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: D1aGdBTOhc+yiWwxEBnUk+PGAgLPQnECl2LuV9lJ4ZA=)
                          2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: pFG5/WCaL+yt9ghGi9neBn3ryCri7CWT6hIptpI2Hyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
                          rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 07:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
        Validity
            Not Before: Jul 29 07:31:11 2026 GMT
            Not After : Aug  5 07:31:11 2026 GMT
        Subject: CN=6a69ac3f-2720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:f9:21:5a:34:bc:93:2a:4e:22:8e:06:3a:
                    c4:10:2e:b7:ca:8c:0d:ab:fa:ab:7e:0b:81:83:7b:
                    38:f4:4e:0b:d8:ce:86:fc:c8:de:82:d8:bd:f6:82:
                    cf:7b:71:b9:c8:7d:08:46:a6:74:9d:c8:f1:4e:0b:
                    1c:b0:11:22:23:9d:7b:1c:bb:76:04:10:d0:a1:82:
                    0c:af:13:15:23:ed:44:92:33:0e:7a:84:96:8c:e6:
                    94:f9:42:16:34:39:05:c2:d8:10:6f:e5:35:8d:cc:
                    d0:c4:ad:0d:04:1c:0b:52:57:99:39:63:c6:f2:79:
                    a3:3f:12:1f:fd:52:6d:da:c1:08:78:2a:a7:39:1c:
                    e3:fa:13:fd:cd:eb:fd:4e:41:db:48:7a:18:ea:3b:
                    78:3b:ae:8e:96:0c:8b:8d:01:44:6b:83:24:ae:4c:
                    ee:be:f9:68:f7:5e:d8:4b:ac:be:a1:29:d3:e2:a5:
                    e6:ba:bf:32:c9:54:ef:b1:b5:e4:35:45:0c:4c:bb:
                    52:50:6b:04:87:cb:52:46:6d:18:f0:b3:b6:8b:3d:
                    b9:58:a4:72:54:0e:f5:00:b9:1e:8a:80:30:77:d3:
                    3e:d2:f6:05:95:52:19:aa:bc:84:d5:99:d9:db:f4:
                    9a:80:86:e8:36:db:a9:60:87:b3:22:31:de:0f:08:
                    a5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:70:1B:65:B6:88:76:2E:2A:5D:56:99:8E:63:51:F5:9F:61:9F:3E
            X509v3 Authority Key Identifier:
                keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:78:f9:5e:29:7f:e7:bf:f4:f1:57:55:be:5c:6a:e4:31:43:
         39:40:52:a7:0e:03:84:78:ba:5b:49:6a:b7:7b:b9:f9:41:d1:
         1a:df:cc:3d:7b:25:cc:d7:d5:b4:89:8a:93:a9:f4:df:7f:0a:
         c9:c0:80:ca:a6:cb:31:c6:f9:31:24:6a:af:a7:da:95:4b:ad:
         f5:14:33:d4:2b:3c:f8:43:49:eb:1e:95:92:76:52:0d:1b:87:
         75:4a:f6:f9:d3:42:9e:02:c8:27:2e:bb:02:99:bb:6f:80:21:
         29:6f:05:0e:a1:65:bf:c1:6b:ef:17:54:ba:b6:2f:fd:9b:92:
         43:c0:90:70:72:c0:70:be:67:c0:80:d6:b8:e4:d0:4e:15:2f:
         8c:32:23:20:fc:9f:f7:7a:3b:6b:60:e7:96:93:b5:6d:31:c2:
         6f:b9:4e:52:29:2c:1f:f9:b4:a8:06:c0:5a:8d:66:c3:42:e0:
         4c:86:35:d9:40:0f:e1:3a:f6:7c:4c:e7:03:9e:a4:9a:3d:a0:
         24:87:c5:18:06:23:bb:dc:1a:17:41:76:d5:06:98:ff:47:c6:
         5b:84:2c:a8:9c:05:91:b9:c0:f4:3b:1d:ae:79:97:75:1a:ad:
         a0:da:fa:dc:ce:6f:37:75:55:2a:8a:96:fb:ab:36:f8:54:05:
         0f:43:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:10:08 2026 by rpki-client