Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
File:                     4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft (raw, json)
Hash identifier:          RG6VAXydH55m0AhEnf5a8Tk29kA8FhCP2XoPLNjE3Lw=
Subject key identifier:   7E:CF:57:BC:85:4C:FA:09:0D:EE:6B:E2:A3:FC:86:8F:66:75:F6:85
Authority key identifier: E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29
Certificate issuer:       /CN=A917A93E/serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
Manifest number:          0138
Signing time:             Mon 27 Jul 2026 07:35:04 +0000
Manifest this update:     Mon 27 Jul 2026 07:35:04 +0000
Manifest next update:     Mon 03 Aug 2026 07:35:04 +0000
Files and hashes:         1: 4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl (hash: 5csTFpJp0TENWEakk3qCt5q97QCFeQjgj8R8J9XFwNQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl
                          rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A93E, serialNumber=E0AB6D977265DB0D5C58D433A28B3CC2051A0C29
        Validity
            Not Before: Jul 27 07:35:04 2026 GMT
            Not After : Aug  3 07:35:04 2026 GMT
        Subject: CN=6a670a28-52e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:42:a5:7b:0c:52:70:9a:c3:19:6e:fc:a6:
                    4a:d9:ba:83:53:7c:74:0e:2f:b5:61:4e:04:40:44:
                    1c:ed:7a:b6:b9:18:57:22:60:0c:3b:c5:b9:8b:0c:
                    3a:19:27:b4:9a:17:42:c3:d8:0d:bd:2b:a0:3f:03:
                    cc:fb:aa:74:5a:44:d1:7a:fb:8e:9c:33:1d:f2:ff:
                    b8:9e:ea:d2:3e:d5:6b:a6:5b:ce:19:b0:68:6f:d6:
                    da:a0:c7:f2:0b:5a:65:c4:77:7c:89:85:8a:b4:ea:
                    39:01:7b:09:00:a6:1b:24:95:22:7a:0f:29:da:68:
                    98:73:98:88:27:70:a7:46:dc:de:3a:32:84:63:ca:
                    70:75:09:fc:dc:a6:43:f6:73:fb:17:7c:74:01:af:
                    fa:7f:d4:df:0c:0b:11:32:5e:ef:05:ff:14:13:69:
                    09:01:22:c1:c6:26:0e:cd:a3:f2:f4:4c:89:ec:0c:
                    fa:05:15:65:4d:36:8b:8b:ad:bc:0a:41:8c:5b:3b:
                    a1:44:54:12:78:58:c0:19:5b:d8:80:98:a3:6c:7a:
                    51:4f:42:0b:5d:25:20:8c:86:9c:68:84:e8:2e:a1:
                    16:17:b3:c5:02:f7:2e:9b:60:8f:9c:75:e9:a0:6d:
                    4a:e7:ee:c6:af:ab:bf:66:fc:76:91:c4:f4:a1:84:
                    a8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:57:BC:85:4C:FA:09:0D:EE:6B:E2:A3:FC:86:8F:66:75:F6:85
            X509v3 Authority Key Identifier:
                keyid:E0:AB:6D:97:72:65:DB:0D:5C:58:D4:33:A2:8B:3C:C2:05:1A:0C:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Kttl3Jl2w1cWNQzoos8wgUaDCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A93E/471B3728B79A11EF8EC49951C4F9AE02/4Kttl3Jl2w1cWNQzoos8wgUaDCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c7:78:78:e8:98:1b:e5:cd:c6:49:cf:06:6f:1f:01:f7:ba:
         b4:ad:ad:ad:5c:63:56:1e:42:98:74:5d:75:02:e2:54:1d:26:
         b8:ea:5f:0e:54:f9:aa:15:1b:35:66:14:3c:da:fa:48:e5:a3:
         8d:e9:3c:df:4d:da:78:c7:4e:a8:23:92:3f:3f:25:f1:5e:ff:
         96:1b:9a:bf:f9:d2:f7:d8:28:d2:11:c4:8c:ad:c2:4b:b4:36:
         74:bb:2d:c8:ef:df:b7:73:7b:c6:79:4d:02:47:36:c8:83:29:
         df:9d:49:e7:93:4f:20:1d:37:c5:61:1d:f7:ef:16:3f:37:72:
         6a:e6:6c:91:88:33:f2:f5:99:76:c8:80:5f:ab:9d:ef:18:a1:
         41:f7:f6:3d:74:73:33:48:9b:e2:5e:92:9f:85:1c:68:f9:f5:
         50:08:dd:4e:ea:ac:43:64:8f:39:01:85:07:9e:64:bf:65:bf:
         5d:66:45:6b:03:5a:ca:ca:9b:ee:b4:e3:6c:10:32:58:7a:a0:
         a1:ba:4b:06:0d:d6:19:ae:e2:55:c2:4e:b7:31:ae:e6:69:19:
         6b:5e:96:c2:e8:77:f6:7f:7a:36:27:69:23:ff:d5:7b:b9:a1:
         8d:7b:fe:32:8f:b8:1b:fb:b1:62:58:55:89:12:d3:3a:3d:e5:
         27:85:d5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:19 2026 by rpki-client