Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
File:                     4klmeNb9TiLorA6f9s1YENb7eU0.mft (raw, json)
Hash identifier:          pvZygx+zr0U34eWjblyxYzGywlNbHNHgl4sYxaAkEBg=
Subject key identifier:   04:37:A2:5B:27:93:AE:EF:2B:CE:D7:94:E7:04:69:A0:A2:6B:7C:A5
Authority key identifier: E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D
Certificate issuer:       /CN=A9177E33/serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
Certificate serial:       3564
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
Manifest number:          3563
Signing time:             Tue 28 Jul 2026 14:28:15 +0000
Manifest this update:     Tue 28 Jul 2026 14:28:15 +0000
Manifest next update:     Tue 04 Aug 2026 14:28:15 +0000
Files and hashes:         1: 4klmeNb9TiLorA6f9s1YENb7eU0.crl (hash: Un5ZLhBoeSboUrbumeuj8NviA6ZljBkqHMskqwcbKUY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl
                          rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13668 (0x3564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177E33, serialNumber=E2496678D6FD4E22E8AC0E9FF6CD5810D6FB794D
        Validity
            Not Before: Jul 28 14:28:15 2026 GMT
            Not After : Aug  4 14:28:15 2026 GMT
        Subject: CN=6a68bc7f-a48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:54:00:25:bd:e4:34:d2:0d:a3:97:86:b7:
                    d0:1b:2b:f7:dc:2e:90:da:f1:5b:08:ec:b7:43:6f:
                    fa:c3:87:e6:2e:d9:a4:5a:e3:9b:8b:ba:c5:5b:e3:
                    b7:63:4f:be:7c:ef:90:8b:f5:61:32:95:80:72:c1:
                    b6:f2:98:dc:8d:09:7e:44:6f:82:20:61:00:a3:1e:
                    e2:55:b4:ba:1e:02:fc:b9:96:0a:bb:4d:0f:c8:d0:
                    e4:67:a8:c1:67:05:24:a0:a6:9d:06:c2:79:37:9d:
                    3e:3c:87:d0:7a:41:87:08:34:9a:8c:62:21:dc:e6:
                    ed:24:81:06:01:67:de:64:7a:55:dc:a4:16:52:2a:
                    37:29:ab:ab:42:ed:2d:ea:fb:15:2f:12:9d:12:e4:
                    c2:c7:76:eb:86:25:fa:17:0a:a9:eb:4f:98:bd:15:
                    c8:21:cf:8e:b4:94:80:f4:48:d7:f8:a7:bd:55:2f:
                    71:6b:09:95:fc:db:15:cb:2b:8b:c9:b1:72:a6:79:
                    7a:cd:75:dc:bc:7e:c7:d4:4f:f5:02:09:93:12:2b:
                    83:28:17:1a:bf:10:dc:d5:e0:d9:73:99:06:d7:6f:
                    dc:29:fe:2d:b8:5c:1b:11:63:b6:7c:e9:60:e3:d7:
                    06:50:d9:54:94:70:2a:a2:cc:ac:65:e3:51:e1:57:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:37:A2:5B:27:93:AE:EF:2B:CE:D7:94:E7:04:69:A0:A2:6B:7C:A5
            X509v3 Authority Key Identifier:
                keyid:E2:49:66:78:D6:FD:4E:22:E8:AC:0E:9F:F6:CD:58:10:D6:FB:79:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4klmeNb9TiLorA6f9s1YENb7eU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177E33/A80ECE481D8611E2BE930ADE08B02CD2/4klmeNb9TiLorA6f9s1YENb7eU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:15:db:31:23:58:38:e6:fb:44:cc:ac:a6:0e:4d:80:b0:36:
         aa:98:2b:1c:f4:12:55:08:71:6f:df:47:9b:56:c2:60:be:aa:
         fc:82:0d:b7:2f:93:ca:58:a6:19:8d:aa:5b:d9:93:b4:08:92:
         8b:1e:cd:78:eb:9c:e9:f2:19:97:3d:ee:58:1e:ad:03:2d:f3:
         74:ec:81:87:e1:a0:c1:65:26:ca:e7:72:cb:e7:c9:a2:73:32:
         72:18:b6:03:31:e3:45:78:fc:7d:0d:b9:18:68:d4:d9:34:2a:
         28:f2:63:25:b9:59:55:5c:74:21:e0:57:93:7c:f5:f0:15:eb:
         63:09:f5:58:94:ee:33:ef:fb:04:55:dd:44:12:bb:7c:62:39:
         1c:aa:34:c1:95:c0:7c:1a:77:c2:2b:f1:05:dd:da:9a:9a:f7:
         d5:24:48:91:78:7c:ad:15:52:59:f8:75:b0:53:f3:7c:35:44:
         26:2e:21:2e:7e:ab:20:d7:00:89:24:68:68:27:cb:6f:21:d5:
         18:f3:35:b5:40:a1:3c:4b:80:e5:44:ac:d6:b8:5a:c7:4f:1c:
         7e:21:9b:3b:4d:28:2b:cf:db:c8:80:c7:a4:57:9c:08:a1:4e:
         b2:cc:1e:f5:02:cc:07:92:fc:f0:b5:8d:c9:d6:8e:7e:ab:58:
         37:bc:ce:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzdFMzMxMTAvBgNVBAUTKEUyNDk2Njc4RDZGRDRFMjJFOEFDMEU5RkY2Q0Q1ODEw
RDZGQjc5NEQwHhcNMjYwNzI4MTQyODE1WhcNMjYwODA0MTQyODE1WjAYMRYwFAYD
VQQDEw02YTY4YmM3Zi1hNDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx9lUACW95DTSDaOXhrfQGyv33C6Q2vFbCOy3Q2/6w4fmLtmkWuObi7rFW+O3
Y0++fO+Qi/VhMpWAcsG28pjcjQl+RG+CIGEAox7iVbS6HgL8uZYKu00PyNDkZ6jB
ZwUkoKadBsJ5N50+PIfQekGHCDSajGIh3ObtJIEGAWfeZHpV3KQWUio3KaurQu0t
6vsVLxKdEuTCx3brhiX6Fwqp60+YvRXIIc+OtJSA9EjX+Ke9VS9xawmV/NsVyyuL
ybFypnl6zXXcvH7H1E/1AgmTEiuDKBcavxDc1eDZc5kG12/cKf4tuFwbEWO2fOlg
49cGUNlUlHAqosysZeNR4VemYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQ3olsn
k67vK87XlOcEaaCia3ylMB8GA1UdIwQYMBaAFOJJZnjW/U4i6KwOn/bNWBDW+3lN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0UzMy9BODBFQ0U0ODFE
ODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRpTG9yQTZmOXMxWUVOYjdl
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRrbG1lTmI5VGlMb3JBNmY5czFZRU5iN2VVMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
N0UzMy9BODBFQ0U0ODFEODYxMUUyQkU5MzBBREUwOEIwMkNEMi80a2xtZU5iOVRp
TG9yQTZmOXMxWUVOYjdlVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAChXbMSNYOOb7RMyspg5NgLA2qpgrHPQSVQhxb99Hm1bCYL6q/IINty+Tylim
GY2qW9mTtAiSix7NeOuc6fIZlz3uWB6tAy3zdOyBh+GgwWUmyudyy+fJonMychi2
AzHjRXj8fQ25GGjU2TQqKPJjJblZVVx0IeBXk3z18BXrYwn1WJTuM+/7BFXdRBK7
fGI5HKo0wZXAfBp3wivxBd3ampr31SRIkXh8rRVSWfh1sFPzfDVEJi4hLn6rINcA
iSRoaCfLbyHVGPM1tUChPEuA5USs1rhax08cfiGbO00oK8/byIDHpFecCKFOsswe
9QLMB5L88LWNydaOfqtYN7zOog==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:28 2026 by rpki-client