Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
File:                     kI2z-bdG9SC7uahMhT9pJsFeub0.mft (raw, json)
Hash identifier:          u7YGvgH0swPItfktkFMANGArbPHgdbEZUzPShvRAK44=
Subject key identifier:   05:A8:52:EB:34:77:B0:14:FC:90:1F:72:93:C6:F3:C3:18:82:BE:8C
Authority key identifier: 90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD
Certificate issuer:       /CN=A919A909/serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
Manifest number:          0191
Signing time:             Mon 27 Jul 2026 06:10:24 +0000
Manifest this update:     Mon 27 Jul 2026 06:10:23 +0000
Manifest next update:     Mon 03 Aug 2026 06:10:23 +0000
Files and hashes:         1: kI2z-bdG9SC7uahMhT9pJsFeub0.crl (hash: bQ7dYKSHNEV66mNaORIEF+RXIgHv9REQ7RGKav9QAWg=)
                          2: CCAF2918109411F186362BB2353D8C67.roa (hash: Upvyy2jPvhhD/OdsNESStZNIXsW/r3KlLDVUrD02B1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl
                          rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A909, serialNumber=908DB3F9B746F520BBB9A84C853F6926C15EB9BD
        Validity
            Not Before: Jul 27 06:10:23 2026 GMT
            Not After : Aug  3 06:10:23 2026 GMT
        Subject: CN=6a66f650-a2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:61:6e:0e:35:22:f3:d9:13:09:b0:bf:c3:
                    89:50:95:23:27:79:22:fd:fb:64:6f:02:15:69:66:
                    27:fc:cd:4b:4b:0f:f7:d1:c4:e6:43:7d:f6:78:c4:
                    b3:19:82:f3:44:f7:fe:cd:87:e6:b2:0e:a0:ae:86:
                    3e:e0:47:e9:3a:3f:9b:ad:72:f4:5f:f6:f6:31:e3:
                    44:a8:12:f8:8e:25:fb:fe:f5:b4:4e:ea:c9:1b:80:
                    c8:1b:5f:29:1d:04:db:8b:f2:cf:f3:20:c3:69:f3:
                    7f:c0:c3:8b:ab:8f:87:76:45:1f:1d:80:1f:d2:82:
                    f5:67:56:c2:8c:65:0e:81:b8:a6:0f:ce:22:92:87:
                    9c:bf:3d:3e:84:56:5c:eb:9b:9f:82:21:0f:2c:c5:
                    bb:c5:6b:4b:7e:d6:74:eb:4d:50:3b:e0:f6:f0:19:
                    36:68:51:34:1e:91:8d:fa:6f:f1:e6:5f:92:f4:8f:
                    22:ce:e8:09:b4:a2:07:fa:d0:d4:ef:3c:8b:b6:6c:
                    45:16:9c:cd:1f:1c:f3:4e:ed:e6:49:7f:3f:12:54:
                    ee:2f:16:8d:87:82:29:e5:62:04:68:69:30:f9:3f:
                    26:32:44:e1:d4:65:ef:ca:bf:31:78:dc:06:a4:54:
                    96:21:18:8e:00:cf:9e:df:69:4b:50:c4:7c:33:7f:
                    1a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A8:52:EB:34:77:B0:14:FC:90:1F:72:93:C6:F3:C3:18:82:BE:8C
            X509v3 Authority Key Identifier:
                keyid:90:8D:B3:F9:B7:46:F5:20:BB:B9:A8:4C:85:3F:69:26:C1:5E:B9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kI2z-bdG9SC7uahMhT9pJsFeub0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/209EDDCE2A3311EFBE9AA859C4F9AE02/kI2z-bdG9SC7uahMhT9pJsFeub0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:db:67:ab:76:65:f5:84:59:d5:9e:5a:29:b6:db:b1:14:4c:
         65:4c:ce:cd:e3:6f:fd:25:95:d2:01:9e:86:d5:34:6e:5a:6c:
         14:21:95:08:8a:fa:c6:08:13:40:04:68:e6:52:5d:aa:ef:ec:
         f0:5b:0f:87:85:44:1c:12:8e:25:41:ae:0d:18:c2:34:cb:72:
         bd:79:66:20:15:a4:cf:c3:5e:bd:55:c3:7b:5a:94:27:14:48:
         af:13:02:29:19:d4:cc:6e:bc:74:28:36:ac:be:0d:46:a0:9a:
         8a:d4:04:07:13:73:57:d1:63:f9:b0:96:8e:37:33:a4:90:13:
         7b:28:ce:8c:b9:de:db:03:c9:4c:65:f3:b7:60:83:01:30:3d:
         b5:d9:7a:31:f2:76:81:a4:2e:f5:2d:10:86:17:55:c0:dc:b0:
         3a:f9:45:86:71:46:9a:a2:4a:02:b8:a5:6a:74:2b:07:b6:c7:
         b7:c1:9d:29:7d:75:28:13:ce:6f:67:c7:25:cc:60:50:4d:ef:
         f2:07:1e:fe:7c:c1:9f:0d:a4:47:ff:0f:20:14:d8:2f:f1:9d:
         90:42:e0:26:b3:be:08:ad:eb:04:87:ce:43:bc:99:a8:ee:35:
         4e:0a:bb:f8:a5:9f:be:55:fb:c9:99:c5:3a:ab:51:0b:6c:0d:
         8b:34:59:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:03 2026 by rpki-client