Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
File:                     Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json)
Hash identifier:          3E+gNWm7f4jvZ/zFynkzCH45b9Hf7Tr3t0C+IXcJg5k=
Subject key identifier:   DE:3E:78:D0:AD:D3:C7:30:4F:8C:60:64:A4:85:0F:58:30:E2:72:76
Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
Certificate issuer:       /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
Manifest number:          012E
Signing time:             Mon 27 Jul 2026 07:37:08 +0000
Manifest this update:     Mon 27 Jul 2026 07:37:07 +0000
Manifest next update:     Mon 03 Aug 2026 07:37:07 +0000
Files and hashes:         1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: N5Knr7MIjqf+lOgw5FeWrqBVoQmtyCzSvHFF6Ue79hU=)
                          2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: fMdXJV+1ucniyu3k/11VAI6qy/FxoiJSc5x07sN7B60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
                          rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
        Validity
            Not Before: Jul 27 07:37:07 2026 GMT
            Not After : Aug  3 07:37:07 2026 GMT
        Subject: CN=6a670aa3-ff8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9f:2b:18:d7:a9:77:f0:3e:a9:9e:f7:25:49:
                    e3:74:bf:3e:3b:d9:ad:e0:23:5d:e4:7e:01:3d:9d:
                    fd:6d:98:de:88:d9:08:ea:d3:e5:07:81:66:4e:db:
                    a0:40:44:87:62:4e:d6:66:e3:44:ff:7b:1e:6a:9d:
                    ad:53:d4:26:43:c1:97:f0:a1:51:4e:13:83:40:dc:
                    a7:a9:dd:59:0a:4f:01:3b:c8:f3:86:a1:60:c0:a6:
                    ee:ff:50:95:4c:34:f1:21:1b:d8:bc:42:93:a2:83:
                    cf:18:e0:c7:03:c6:0f:ac:f8:6f:d9:36:2d:06:37:
                    cc:1f:2c:3f:3c:57:f5:ab:6f:75:2a:bc:b4:5c:2b:
                    13:71:23:9a:34:c5:4f:66:38:fd:6d:ce:df:c1:5e:
                    53:9b:04:ba:b1:fa:e2:43:5b:48:a9:d6:1d:89:bf:
                    a4:11:a1:16:45:f1:68:fd:d4:54:ec:bb:94:a7:2b:
                    6c:a3:99:e6:4a:86:80:d6:36:09:e9:e0:ef:94:50:
                    06:30:22:cd:42:c6:27:3e:f7:a3:32:83:77:e8:ac:
                    7d:46:76:a1:80:5d:8a:97:c0:61:3b:62:d3:04:d8:
                    63:11:b9:d5:d2:04:5d:a0:ba:86:a8:1e:48:9b:28:
                    72:4f:d1:67:d3:7a:1a:d6:94:2e:3c:fd:09:14:4d:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3E:78:D0:AD:D3:C7:30:4F:8C:60:64:A4:85:0F:58:30:E2:72:76
            X509v3 Authority Key Identifier:
                keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:79:bc:c0:ed:b5:0a:c3:0a:43:98:8c:6f:42:16:ad:67:25:
         dc:59:1b:3e:c8:c3:1a:41:fb:1c:a3:eb:66:57:cf:96:d8:5f:
         ab:f6:b1:84:fc:df:36:bf:b9:86:b5:64:54:d9:77:2f:23:00:
         79:08:59:2c:fb:2f:6a:ad:ac:25:c3:1d:11:72:f7:c8:f1:76:
         46:a6:34:60:cd:ea:7e:65:6c:78:70:08:bd:83:a6:90:f9:9a:
         95:92:dd:88:fe:b9:e8:03:84:d7:01:71:9b:38:07:11:2e:f1:
         69:d3:19:09:ec:cb:6e:3d:3a:d1:93:c2:bb:ca:7e:00:5b:dc:
         b4:e5:b8:55:d5:67:1a:86:78:da:af:78:f3:2c:aa:53:1b:b2:
         31:51:f8:15:38:e0:3a:ae:55:80:35:cf:dc:7e:ca:6f:7e:a0:
         5b:29:1d:56:72:18:a6:9a:a9:04:0e:3a:6f:3f:f4:72:e8:08:
         78:90:c7:eb:94:01:8e:7f:b7:c7:cc:2c:f0:5c:0c:c5:d2:d6:
         c9:b6:23:30:c8:a1:43:87:80:7b:63:ad:f3:61:39:a9:da:eb:
         57:8c:bc:70:47:a7:05:7a:1c:d8:48:f1:02:3b:ca:1b:62:41:
         1d:7f:0d:9d:62:f9:a6:70:4b:4c:85:a3:55:0a:5b:29:ac:af:
         54:0e:9a:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNCOTQxMTAvBgNVBAUTKDJBNTczOTZEQ0U3MEVCNTZDMDczREUxQTc2MEI2MkE3
MjJCMDQ3OEUwHhcNMjYwNzI3MDczNzA3WhcNMjYwODAzMDczNzA3WjAYMRYwFAYD
VQQDEw02YTY3MGFhMy1mZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA558rGNepd/A+qZ73JUnjdL8+O9mt4CNd5H4BPZ39bZjeiNkI6tPlB4FmTtug
QESHYk7WZuNE/3seap2tU9QmQ8GX8KFRThODQNynqd1ZCk8BO8jzhqFgwKbu/1CV
TDTxIRvYvEKTooPPGODHA8YPrPhv2TYtBjfMHyw/PFf1q291Kry0XCsTcSOaNMVP
Zjj9bc7fwV5TmwS6sfriQ1tIqdYdib+kEaEWRfFo/dRU7LuUpytso5nmSoaA1jYJ
6eDvlFAGMCLNQsYnPvejMoN36Kx9RnahgF2Kl8BhO2LTBNhjEbnV0gRdoLqGqB5I
myhyT9Fn03oa1pQuPP0JFE1fiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN4+eNCt
08cwT4xgZKSFD1gw4nJ2MB8GA1UdIwQYMBaAFCpXOW3OcOtWwHPeGnYLYqcisEeO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0I5NC9BRjQxQkQxMEJD
RDkxMUVGOTJBQjMzMTNDNEY5QUUwMi9LbGM1YmM1dzYxYkFjOTRhZGd0aXB5S3dS
NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0tsYzViYzV3NjFiQWM5NGFkZ3RpcHlLd1I0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0I5NC9BRjQxQkQxMEJDRDkxMUVGOTJBQjMzMTNDNEY5QUUwMi9LbGM1YmM1dzYx
YkFjOTRhZGd0aXB5S3dSNDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXXm8wO21CsMKQ5iMb0IWrWcl3FkbPsjDGkH7HKPrZlfPlthfq/axhPzfNr+5
hrVkVNl3LyMAeQhZLPsvaq2sJcMdEXL3yPF2RqY0YM3qfmVseHAIvYOmkPmalZLd
iP656AOE1wFxmzgHES7xadMZCezLbj060ZPCu8p+AFvctOW4VdVnGoZ42q948yyq
UxuyMVH4FTjgOq5VgDXP3H7Kb36gWykdVnIYppqpBA46bz/0cugIeJDH65QBjn+3
x8ws8FwMxdLWybYjMMihQ4eAe2Ot82E5qdrrV4y8cEenBXoc2EjxAjvKG2JBHX8N
nWL5pnBLTIWjVQpbKayvVA6aqg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:50 2026 by rpki-client