Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
File:                     kDfAsp43CSqDhSzkuIW3dqfB47Y.mft (raw, json)
Hash identifier:          fJavmIYYUYh2C3WnOTGwfisWLndym/e02Ppavrt+Rds=
Subject key identifier:   82:18:B2:88:DE:77:B6:90:45:84:01:50:D9:52:44:0D:85:16:3D:D3
Authority key identifier: 90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
Certificate issuer:       /CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
Manifest number:          01F4
Signing time:             Mon 27 Jul 2026 04:58:05 +0000
Manifest this update:     Mon 27 Jul 2026 04:58:04 +0000
Manifest next update:     Mon 03 Aug 2026 04:58:04 +0000
Files and hashes:         1: kDfAsp43CSqDhSzkuIW3dqfB47Y.crl (hash: aIWGyyEnKkpuzCU/b+uLlpBhgfgJ9NUH/uoofzY5xTg=)
                          2: 72CE4D80958411EEB3748B58C4F9AE02.roa (hash: EaakEgdFwicKWl6P4v+HQcFOhGMzWeAMEZbE1mBKQ84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
                          rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:58:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91957D1, serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
        Validity
            Not Before: Jul 27 04:58:04 2026 GMT
            Not After : Aug  3 04:58:04 2026 GMT
        Subject: CN=6a66e55d-0142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d8:28:3a:47:d1:d6:8e:e9:8f:26:3a:6e:2b:
                    2b:d0:5e:34:62:c3:5b:c2:44:5c:bd:a3:ee:13:e2:
                    9f:e7:04:b0:9b:de:13:d6:61:c4:53:d4:71:2f:01:
                    85:c7:12:b3:55:d1:2c:3e:19:1a:2d:38:8e:cf:cc:
                    94:3d:78:0f:64:c3:fc:fc:ec:53:98:1d:9b:00:e1:
                    ed:ea:c9:a5:ae:87:ae:ed:14:ce:e3:c5:f0:ab:78:
                    33:53:8f:f1:48:4c:44:f3:e8:cc:43:75:c8:9e:d4:
                    37:86:99:86:c9:d7:6e:87:db:9b:1f:c7:d6:cd:ba:
                    e6:25:15:e4:91:62:df:f2:91:1e:37:f1:ec:83:59:
                    ae:ae:04:86:5c:67:1f:41:63:4f:10:18:dc:0b:18:
                    c1:02:bd:6b:8f:c9:ef:ca:68:00:96:7e:51:d7:9a:
                    bd:ab:e1:3a:06:a5:12:78:32:a9:2a:24:7b:28:b5:
                    af:1e:d5:72:70:88:c8:1e:2e:d6:33:05:d2:d1:f9:
                    a3:e6:e8:51:23:ff:a8:45:a9:fe:08:f4:4d:b1:9a:
                    b2:20:95:81:6d:fd:e3:f9:78:1e:fd:c8:d1:17:d6:
                    bb:a0:40:14:07:b2:37:34:12:50:a9:a7:63:63:83:
                    d4:0f:57:f1:90:b5:51:d5:79:14:19:96:e9:d0:1c:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:18:B2:88:DE:77:B6:90:45:84:01:50:D9:52:44:0D:85:16:3D:D3
            X509v3 Authority Key Identifier:
                keyid:90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:43:7c:49:3f:f0:68:b4:77:38:a1:33:b4:df:84:28:db:00:
         0f:f0:15:f1:52:e5:9b:f0:55:a2:03:63:0f:a7:ac:07:a1:5b:
         a5:43:08:ad:d4:47:5e:35:82:52:48:85:9f:22:2b:cf:fc:36:
         a7:7d:18:46:cc:29:41:54:e7:e3:17:fa:88:f2:0c:00:83:e2:
         97:a8:b2:cf:a2:53:b4:dc:9e:03:25:1c:72:01:0a:95:6f:06:
         64:6f:1f:67:4e:15:8e:25:9d:5c:04:a2:91:d3:72:05:9d:82:
         b5:95:40:66:d3:3a:a4:2a:54:43:bb:98:8a:80:fa:f8:37:c2:
         8f:87:0f:0e:11:61:7b:da:9c:de:35:6b:6a:6b:f8:cb:ee:a6:
         f3:5e:5d:19:e7:4d:63:ad:4c:a6:99:0b:e9:ce:b8:27:61:f8:
         1d:18:ef:d7:15:66:19:16:0e:d6:c2:a0:5d:9d:73:95:ef:21:
         b4:e5:aa:41:b0:6d:93:cd:5a:c4:b9:20:28:cb:e6:74:74:7f:
         b6:e0:07:ec:f0:90:4c:7c:82:89:7d:10:85:46:84:b2:57:fc:
         ae:66:07:56:95:49:df:f5:14:d8:b3:c4:e9:52:35:8d:5f:8a:
         80:21:fc:2f:5d:11:b1:24:e8:1e:6c:15:ab:36:c8:fa:0d:38:
         bf:7b:b5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:41 2026 by rpki-client