Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
File:                     KN1yVzxbraKIuDKzmB_0yYsvjFE.mft (raw, json)
Hash identifier:          fpfld3vGuc82miXRp5d/2cpXDDCDAqi/j7kjZIvg+Jk=
Subject key identifier:   19:97:0B:40:23:24:82:F9:D4:FD:8B:2C:12:F3:1E:7C:AC:AD:6C:A7
Authority key identifier: 28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51
Certificate issuer:       /CN=A9180174/serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
Certificate serial:       05D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
Manifest number:          05CB
Signing time:             Sun 26 Jul 2026 23:57:50 +0000
Manifest this update:     Sun 26 Jul 2026 23:57:50 +0000
Manifest next update:     Sun 02 Aug 2026 23:57:50 +0000
Files and hashes:         1: KN1yVzxbraKIuDKzmB_0yYsvjFE.crl (hash: J7dkdXRklgWwFsB+n5thDdR2z8qcPVoctp44ZjiCqwc=)
                          2: F6750B60168D11EC89C9CB5DC4F9AE02.roa (hash: a2MlG0wEMN1OaH7j49XfTWV8ol9vPnU4AAth6CS9+gs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl
                          rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180174, serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
        Validity
            Not Before: Jul 26 23:57:50 2026 GMT
            Not After : Aug  2 23:57:50 2026 GMT
        Subject: CN=6a669efe-42ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:dc:6f:91:b2:b0:7a:32:c9:20:d7:e1:24:
                    c1:67:af:3f:5d:7a:28:aa:d0:bc:03:25:af:ca:29:
                    38:42:94:cf:69:8d:fa:5f:8f:28:c4:a0:c7:25:61:
                    ae:c7:1a:71:1b:2e:f7:88:57:32:7d:01:80:3f:41:
                    88:25:27:65:b8:6b:56:9e:17:25:ca:41:01:f5:b9:
                    7d:64:59:fe:ec:86:20:d7:07:de:18:a9:ad:59:20:
                    f8:b4:f2:60:f4:f4:2b:df:d0:6e:ac:a0:02:50:b0:
                    8d:37:69:64:fe:c2:d0:d1:1e:57:0c:db:ab:bd:3a:
                    4d:4b:d2:63:3c:23:de:25:83:be:43:d5:ff:44:b1:
                    0e:36:78:4d:f2:83:96:1e:ec:12:26:7d:53:5a:3a:
                    0d:53:8f:aa:a4:2e:0e:e5:3d:40:70:5f:40:43:11:
                    ba:36:0f:5e:2a:60:ab:a1:09:84:91:a9:c2:1e:b2:
                    85:32:ca:53:5b:31:21:2e:32:4b:69:0b:0a:b9:59:
                    58:69:8d:a6:10:12:84:7f:9f:99:aa:aa:4d:60:c4:
                    a5:02:60:da:0c:5f:ef:47:4b:d6:a0:d1:22:e6:e4:
                    63:c7:07:1c:84:81:be:9b:d4:cf:ae:92:4e:79:bd:
                    b9:7c:cd:7f:4c:7e:cc:1c:95:8d:27:6a:58:e3:01:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:97:0B:40:23:24:82:F9:D4:FD:8B:2C:12:F3:1E:7C:AC:AD:6C:A7
            X509v3 Authority Key Identifier:
                keyid:28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:91:3a:84:35:4b:bf:4a:89:74:c7:50:9b:52:e3:54:82:b1:
         eb:68:ea:f2:4b:ea:93:a3:af:d9:5d:4b:d1:57:b7:d9:be:18:
         ca:83:87:44:2d:21:d6:91:86:d2:8d:a0:06:7f:fa:b4:a0:fd:
         eb:b1:b4:79:cf:d9:f2:6b:7a:e0:db:6e:d1:94:89:f3:3b:48:
         79:69:25:fe:66:a3:38:04:c8:f6:48:82:dd:a2:37:fb:67:9a:
         84:83:93:cc:2c:57:d5:be:a6:2d:d7:ae:fe:65:4a:cc:7f:0b:
         10:dc:1e:f4:f2:d0:97:5d:c8:9b:db:fb:65:6c:11:9b:11:1d:
         a7:1f:43:8f:29:20:3e:12:ee:c2:b4:51:aa:8e:ee:55:e4:08:
         33:05:3e:4d:6c:ad:01:7e:b1:31:1b:0d:89:a4:fb:e3:8f:11:
         96:fa:97:2e:3c:52:f6:3d:ac:db:e9:e7:ed:1b:3b:61:d4:7b:
         54:d0:15:6a:22:2b:1f:53:88:e5:47:f3:14:38:c0:bb:8e:d6:
         d9:b0:01:de:90:c1:c4:19:0c:13:4f:19:91:ec:47:a8:af:67:
         7d:0c:0c:8c:7b:3f:34:8c:e9:48:a6:d7:69:35:ce:72:ef:c0:
         60:68:5e:bd:29:9f:92:25:16:a7:d1:f4:b2:98:f8:66:2a:03:
         cd:d5:a3:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxNzQxMTAvBgNVBAUTKDI4REQ3MjU3M0M1QkFEQTI4OEI4MzJCMzk4MUZGNEM5
OEIyRjhDNTEwHhcNMjYwNzI2MjM1NzUwWhcNMjYwODAyMjM1NzUwWjAYMRYwFAYD
VQQDEw02YTY2OWVmZS00MmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArnTcb5GysHoyySDX4STBZ68/XXooqtC8AyWvyik4QpTPaY36X48oxKDHJWGu
xxpxGy73iFcyfQGAP0GIJSdluGtWnhclykEB9bl9ZFn+7IYg1wfeGKmtWSD4tPJg
9PQr39BurKACULCNN2lk/sLQ0R5XDNurvTpNS9JjPCPeJYO+Q9X/RLEONnhN8oOW
HuwSJn1TWjoNU4+qpC4O5T1AcF9AQxG6Ng9eKmCroQmEkanCHrKFMspTWzEhLjJL
aQsKuVlYaY2mEBKEf5+ZqqpNYMSlAmDaDF/vR0vWoNEi5uRjxwcchIG+m9TPrpJO
eb25fM1/TH7MHJWNJ2pY4wEVbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBmXC0Aj
JIL51P2LLBLzHnysrWynMB8GA1UdIwQYMBaAFCjdclc8W62iiLgys5gf9MmLL4xR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE3NC83OUQ2NjYyQTE2
ODkxMUVDODE2MjU4MENDNEY5QUUwMi9LTjF5Vnp4YnJhS0l1REt6bUJfMHlZc3Zq
RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tOMXlWenhicmFLSXVES3ptQl8weVlzdmpGRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDE3NC83OUQ2NjYyQTE2ODkxMUVDODE2MjU4MENDNEY5QUUwMi9LTjF5Vnp4YnJh
S0l1REt6bUJfMHlZc3ZqRkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb5E6hDVLv0qJdMdQm1LjVIKx62jq8kvqk6Ov2V1L0Ve32b4YyoOHRC0h1pGG
0o2gBn/6tKD967G0ec/Z8mt64Ntu0ZSJ8ztIeWkl/majOATI9kiC3aI3+2eahIOT
zCxX1b6mLdeu/mVKzH8LENwe9PLQl13Im9v7ZWwRmxEdpx9DjykgPhLuwrRRqo7u
VeQIMwU+TWytAX6xMRsNiaT7448RlvqXLjxS9j2s2+nn7Rs7YdR7VNAVaiIrH1OI
5UfzFDjAu47W2bAB3pDBxBkME08ZkexHqK9nfQwMjHs/NIzpSKbXaTXOcu/AYGhe
vSmfkiUWp9H0spj4ZioDzdWj/w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:50 2026 by rpki-client