Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
File:                     kMt_oTeWnENWpMpS9wXcoasiX9A.mft (raw, json)
Hash identifier:          RKfCvyfA1SRT288a6MRnazR/0vF0HkVpFogzPPNVLCk=
Subject key identifier:   1E:02:01:FA:F6:BD:86:5C:94:47:A1:89:6E:76:7E:95:16:C6:DC:32
Authority key identifier: 90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0
Certificate issuer:       /CN=A91907D3/serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
Manifest number:          BB
Signing time:             Mon 27 Jul 2026 09:09:50 +0000
Manifest this update:     Mon 27 Jul 2026 09:09:49 +0000
Manifest next update:     Mon 03 Aug 2026 09:09:49 +0000
Files and hashes:         1: kMt_oTeWnENWpMpS9wXcoasiX9A.crl (hash: eWXOKKUfnXSaIs9QI3AcNT988MmGMEbXyOTf8unoVqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl
                          rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91907D3, serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0
        Validity
            Not Before: Jul 27 09:09:49 2026 GMT
            Not After : Aug  3 09:09:49 2026 GMT
        Subject: CN=6a67205d-53f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:23:0e:6b:89:b8:5d:94:79:20:ac:ac:ce:
                    a7:a5:4d:50:7c:5f:a3:a2:f1:75:c7:9e:c2:3e:48:
                    a8:9b:53:e7:50:a3:ca:bd:8c:67:4f:13:fa:a6:79:
                    e4:86:81:a0:8d:8d:59:42:a3:33:f7:3b:39:05:9f:
                    d4:46:3c:66:53:86:c3:75:6a:ce:4a:92:22:9c:d5:
                    bd:93:b8:10:33:64:fa:d9:44:a0:8f:f0:a7:f6:fe:
                    73:1c:f2:20:8a:23:e8:f8:b1:07:d2:76:70:56:19:
                    af:5c:9f:36:65:01:79:2e:eb:3c:94:44:79:33:89:
                    46:5a:6f:d0:1a:11:b8:6d:39:4c:6a:e0:97:69:2c:
                    72:9d:f7:5f:4f:70:6b:06:7f:08:d1:54:6a:2d:c4:
                    6d:9f:39:4f:79:ea:ac:84:b6:2f:75:b1:d4:bf:60:
                    00:36:c5:89:06:d9:1e:52:a3:94:9d:ed:d4:ae:06:
                    de:1b:b3:c5:3e:f7:43:c3:77:b4:22:ec:01:c7:e5:
                    e0:49:70:e8:0f:82:d0:85:ae:7f:2f:86:61:49:cf:
                    64:8a:cc:df:a9:d0:f9:74:3c:28:59:8f:73:5b:a2:
                    60:94:ba:b7:29:f1:7f:ec:b3:d4:cd:33:a6:5d:47:
                    9f:89:f6:7e:72:b2:b9:7b:02:5d:e1:a0:23:d1:3e:
                    22:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:02:01:FA:F6:BD:86:5C:94:47:A1:89:6E:76:7E:95:16:C6:DC:32
            X509v3 Authority Key Identifier:
                keyid:90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:90:86:8c:29:c2:a4:9b:94:4d:8c:b1:af:9f:04:b1:b4:24:
         74:50:ad:1d:16:d4:34:0f:07:81:89:ad:53:dc:76:b2:67:0b:
         b3:ee:25:ef:c0:12:14:63:39:46:bc:45:f8:22:64:e5:9f:73:
         fa:db:7c:3b:3b:4e:ee:bc:d5:e8:19:11:3f:d5:79:da:eb:f0:
         a8:2c:78:09:9b:22:a4:4d:cb:c3:15:6b:8a:77:bf:6a:f5:ef:
         68:a4:9c:d1:2e:43:2e:cc:a4:be:26:15:df:23:d8:20:9e:68:
         b7:a6:0b:1c:41:c2:5d:73:87:d4:df:e2:54:4e:f1:1c:be:84:
         55:81:6a:b8:b8:01:9a:d0:0e:24:26:2d:37:ef:47:3f:b3:4f:
         d2:ff:c8:b6:b1:30:57:28:a4:97:bc:31:2c:fb:c3:82:cc:56:
         b4:31:20:bc:87:30:ab:d6:d3:09:95:21:1c:95:a4:07:9d:af:
         ca:b2:5b:25:b0:1a:cf:88:8e:46:d8:cb:0d:b7:1f:13:74:fa:
         a9:a8:00:7f:3f:a4:f4:98:3c:b0:1a:71:3f:b4:9f:e9:ab:36:
         7f:48:db:96:46:76:f9:52:a6:e1:6f:6e:0f:1b:30:0c:37:5e:
         b6:6b:a4:12:31:ca:c7:b3:b0:67:e0:88:ae:47:4c:74:63:dc:
         19:0f:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:42 2026 by rpki-client