Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
File:                     KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft (raw, json)
Hash identifier:          yrUttRW45lhxhK5qtBlGJ+c3PTKJ4HS8vlacm+u4vRI=
Subject key identifier:   F1:A3:66:23:8B:53:84:F1:94:86:15:0E:F6:A5:AB:C7:8F:B6:B0:6B
Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD
Certificate issuer:       /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
Certificate serial:       10E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
Manifest number:          10D0
Signing time:             Tue 28 Jul 2026 17:25:05 +0000
Manifest this update:     Tue 28 Jul 2026 17:25:04 +0000
Manifest next update:     Tue 04 Aug 2026 17:25:04 +0000
Files and hashes:         1: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl (hash: fcDIpBrKQqcw4y4oRqGGwcEh+ps0W1mfU8Ylt/wfv7k=)
                          2: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (hash: vMIdusdjtj9hlcGq2gI+hsj/mLp2lRpI2Yrz/QIdsz8=)
                          3: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (hash: xjuxHTm+G9he/JFBNF/J7ScezC0X5PCaznrRtGeATtQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl
                          rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4325 (0x10e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
        Validity
            Not Before: Jul 28 17:25:04 2026 GMT
            Not After : Aug  4 17:25:04 2026 GMT
        Subject: CN=6a68e5f1-da22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:b1:00:40:22:37:b4:f7:f1:37:2f:0a:a1:
                    79:06:22:bb:68:b2:68:ba:56:73:79:38:9e:d6:50:
                    83:5a:f0:b5:77:a5:f6:61:da:b5:3a:d4:96:50:f8:
                    5e:27:63:71:a7:54:2a:a1:8a:95:0b:ee:0a:58:69:
                    b7:24:04:23:69:d4:aa:8e:9e:ac:0b:f9:1f:0c:42:
                    a1:22:85:75:be:3b:0b:fc:f6:15:47:de:53:09:df:
                    35:85:62:9a:d4:94:22:ac:da:70:08:1c:f8:5c:3b:
                    cc:88:a1:01:41:b8:71:64:16:f4:94:36:4b:fb:cd:
                    fe:56:3f:23:c1:42:fc:f7:96:38:d0:b7:44:f2:af:
                    37:5f:95:f0:9f:b7:72:b9:e4:c6:72:d9:40:9b:e4:
                    93:88:20:65:4b:f9:a9:66:46:42:85:b4:ac:24:aa:
                    25:3c:fc:16:75:98:71:19:83:82:a0:53:3e:ff:4b:
                    83:3b:5f:ad:89:21:41:e2:28:4c:f8:7c:8a:f1:49:
                    a6:90:83:e9:f2:3f:79:55:39:78:67:18:dc:55:36:
                    ba:fc:d0:ee:87:ba:6f:7e:58:27:76:fc:93:65:1d:
                    77:1e:04:a1:02:1b:d2:0c:fc:a3:c7:4d:6c:c6:ae:
                    81:ef:66:3a:b3:7d:60:95:82:15:d0:94:e6:ad:ec:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A3:66:23:8B:53:84:F1:94:86:15:0E:F6:A5:AB:C7:8F:B6:B0:6B
            X509v3 Authority Key Identifier:
                keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:56:ad:df:c8:26:7d:50:09:29:af:8e:52:f0:50:15:06:0d:
         f7:51:2d:45:b7:40:a0:fe:72:d0:17:2d:55:00:58:5d:70:e5:
         93:93:5b:99:ca:06:96:22:e4:7e:95:ab:18:0f:9e:dc:87:40:
         5b:dd:d5:26:7a:f0:23:51:24:6f:53:e2:bf:74:14:31:fb:39:
         44:68:00:bb:98:1d:e5:57:b5:f8:4d:b2:d3:89:12:46:3c:69:
         3c:4f:c9:7b:92:69:bc:bd:d2:87:79:a9:28:10:6e:e8:67:82:
         cd:71:12:67:5a:e8:82:94:b3:a7:07:d6:2b:a2:b1:95:bd:96:
         20:12:a6:b4:62:5d:da:2d:c7:78:3b:cd:21:7f:ca:5c:73:b1:
         fb:29:f3:bd:08:76:63:e5:a7:64:7e:1c:90:d9:b6:83:7a:56:
         e8:5d:b1:ac:de:b2:b6:b7:64:59:a6:a4:14:c5:20:38:b7:b6:
         6d:38:61:29:b6:cb:6e:c0:18:4d:79:a7:f6:f0:0e:8d:fe:ff:
         1e:ba:da:56:13:95:53:85:14:a9:8d:09:b6:d6:6a:44:a7:8c:
         ec:a4:dd:33:5a:6c:43:72:60:d3:e8:e1:de:45:b7:16:37:c8:
         ce:86:42:3a:29:79:78:b7:19:cc:bf:a6:27:a6:c3:3b:91:4c:
         5a:a7:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:34:43 2026 by rpki-client