Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
File:                     kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json)
Hash identifier:          kDZehc27RKaVathN2QXyUyvWOsKKICFlLHOPoqcS+1U=
Subject key identifier:   C3:C5:71:D2:B2:F6:16:38:88:43:CE:CB:C5:40:F3:45:61:36:1C:64
Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60
Certificate issuer:       /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60
Certificate serial:       046F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
Manifest number:          0466
Signing time:             Mon 27 Jul 2026 01:12:36 +0000
Manifest this update:     Mon 27 Jul 2026 01:12:36 +0000
Manifest next update:     Mon 03 Aug 2026 01:12:36 +0000
Files and hashes:         1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: /BX1Qn7Oxmb5zf7tHwubclD25+JiigKQZIEsizBa850=)
                          2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: xky0bkAGJZiPmJrh1utEauZh7Xc1VAPTEfxwrtpScXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl
                          rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0432, serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60
        Validity
            Not Before: Jul 27 01:12:36 2026 GMT
            Not After : Aug  3 01:12:36 2026 GMT
        Subject: CN=6a66b084-a75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:78:52:cb:33:f7:b5:26:65:c5:01:16:e9:
                    96:2d:01:61:f6:57:5e:38:3a:19:09:33:c2:70:13:
                    aa:36:d7:0e:d0:da:97:35:5a:af:83:38:1e:0b:36:
                    26:e5:f1:32:e7:00:58:0c:71:df:56:79:5c:db:37:
                    55:23:a4:dd:24:d8:13:a1:5e:26:16:76:3c:c9:8e:
                    72:2a:c6:65:37:21:8a:5e:d9:8e:a0:f4:2d:3f:ae:
                    81:8e:22:ec:1a:64:bf:a1:84:e0:be:49:82:87:0c:
                    10:6a:1f:30:99:d2:d7:8e:d9:8a:5a:88:fb:1d:03:
                    2f:13:e5:78:36:bf:2c:15:90:d8:52:58:70:da:d0:
                    b9:b3:fd:ae:a3:85:8f:27:68:6c:69:9a:13:db:6d:
                    bd:ea:f1:1b:ba:27:10:5f:99:68:d8:36:a0:9d:eb:
                    5a:a0:de:c8:b4:f6:5e:79:49:e1:4c:00:07:c7:18:
                    cb:df:33:d0:9b:92:77:50:0c:94:29:6a:2d:38:8e:
                    2c:b4:23:1d:ec:f8:1e:63:cf:93:ea:f0:0c:2f:ad:
                    36:28:51:e7:af:2a:ad:b6:38:40:16:81:eb:63:97:
                    3b:91:f2:43:1f:cb:5a:19:21:db:9b:5a:02:36:cb:
                    ae:36:1e:96:5b:e2:d6:5b:9b:0f:9a:44:a8:1f:f9:
                    25:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C5:71:D2:B2:F6:16:38:88:43:CE:CB:C5:40:F3:45:61:36:1C:64
            X509v3 Authority Key Identifier:
                keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c5:0c:a9:0c:26:4f:44:71:5a:ee:e9:b9:68:ed:c9:34:82:
         68:4e:c6:72:00:58:63:89:06:2b:04:75:1e:3a:27:66:c2:c7:
         b1:da:ed:a2:9e:f0:20:d9:79:f7:11:a7:cf:d1:58:4a:fa:f4:
         96:40:dc:4b:11:07:40:86:f9:34:7d:f2:f6:90:37:69:a0:e2:
         7d:73:72:fc:ee:b0:1b:ea:e1:29:63:17:58:dd:4d:26:c9:85:
         ec:bb:15:c8:c4:a4:1d:ee:21:2e:06:da:3e:c7:24:2b:71:3d:
         b3:c2:6c:77:4b:51:5b:68:80:7e:b2:ed:29:95:50:84:2d:92:
         f6:5a:f5:aa:14:49:f1:27:e7:d1:77:87:96:e2:53:61:8c:45:
         b5:59:df:48:95:30:65:b9:06:36:14:f2:05:6b:59:8f:ea:ba:
         18:1e:8c:d2:20:97:1d:04:3d:f0:2e:98:62:af:64:7b:c1:a1:
         25:7f:ec:a0:88:28:85:61:5b:44:9b:63:e1:65:51:fa:f7:ab:
         8e:40:83:a2:73:ac:b5:eb:a4:95:5e:23:d7:ee:f4:94:f2:76:
         77:b6:e8:77:06:12:0f:88:78:ec:db:2c:e4:6a:38:03:61:45:
         fc:e1:61:8f:be:43:8f:e1:80:fc:fa:51:89:59:13:68:cd:bd:
         89:3f:4a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:48 2026 by rpki-client