Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
File:                     _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json)
Hash identifier:          Y0SkA0lWGi1vuConNmvN2asZQZR3jdSPF22k/Okw7Gk=
Subject key identifier:   CF:43:C0:1E:D1:0D:E9:55:0F:3B:2A:FE:03:0A:71:94:DA:BC:44:B0
Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B
Certificate issuer:       /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
Certificate serial:       01B2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
Manifest number:          01A7
Signing time:             Wed 29 Jul 2026 05:26:44 +0000
Manifest this update:     Wed 29 Jul 2026 05:26:43 +0000
Manifest next update:     Wed 05 Aug 2026 05:26:43 +0000
Files and hashes:         1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: qH3g41PD/+8dTzfRGu88W9GAihqs+3DwjavYkKFzHb8=)
                          2: F5F28CC6739E11F1B96BB9EF75A30FBC.roa (hash: /KxNlXfeXQcDBu4my/p7c/P1DQJwjmP4hrFW2B3nPNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl
                          rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 05:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
        Validity
            Not Before: Jul 29 05:26:43 2026 GMT
            Not After : Aug  5 05:26:43 2026 GMT
        Subject: CN=6a698f14-ca34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ab:b4:7f:70:77:31:88:48:1f:30:40:db:a3:
                    d0:a8:50:42:9b:d2:67:1d:e4:61:30:a7:d2:1a:82:
                    d6:29:7b:d7:3e:c2:6e:d2:83:70:c3:cd:b1:85:33:
                    d2:93:e5:96:c3:57:39:41:14:9f:84:44:91:29:94:
                    ef:d0:fe:78:d9:87:19:c8:4a:7c:23:46:46:78:06:
                    66:51:16:9d:9e:c5:14:01:fd:d9:e6:ef:0c:1b:d1:
                    39:61:d8:2b:a6:95:64:72:3b:99:90:08:18:74:97:
                    5b:b5:d8:c2:ca:28:49:34:c2:a6:9f:ab:24:03:ee:
                    8e:d5:ae:4a:8c:a3:1e:96:f8:0f:72:fb:d5:d4:27:
                    44:da:b7:d4:cd:94:5a:37:4d:70:34:70:85:5d:85:
                    db:2b:9a:95:0e:08:79:5d:6f:48:4c:6f:d3:f7:d9:
                    d4:7b:d7:60:d5:cd:5c:d9:82:25:6d:41:e0:d3:2a:
                    96:e5:e4:58:90:ce:5a:da:ba:ec:c3:34:77:03:a3:
                    d8:d0:b0:29:68:4c:7c:be:5a:ce:7a:11:23:99:f7:
                    14:46:54:36:6d:17:b8:87:ab:9f:0e:58:25:01:b0:
                    00:d5:c3:40:f6:49:82:7c:42:54:fc:95:41:91:03:
                    79:fd:d6:b9:0a:bf:3d:bc:66:ab:4a:f5:2f:fd:f3:
                    ba:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:43:C0:1E:D1:0D:E9:55:0F:3B:2A:FE:03:0A:71:94:DA:BC:44:B0
            X509v3 Authority Key Identifier:
                keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:bf:f0:40:3f:ab:ae:8a:bd:44:5d:3d:77:d5:bf:50:8b:d8:
         9c:eb:1f:7c:43:e5:9c:4e:8d:38:4a:73:d0:9c:bf:b0:19:80:
         12:ab:fb:d8:11:fa:b5:ff:f4:b8:af:31:08:c9:2f:cb:b5:a9:
         3d:66:82:87:12:92:9a:f4:53:b7:23:e1:48:8e:f9:a0:72:77:
         fd:13:81:da:1e:e0:a5:f7:c3:3e:fd:b9:86:22:ca:00:43:64:
         b1:7a:70:8a:ee:fa:f7:65:3d:97:1b:d1:ed:77:52:ca:90:62:
         8a:ba:7e:f4:4a:12:f3:6e:ec:43:9b:58:10:87:e4:78:ec:d6:
         1b:c5:b8:45:9d:39:d6:f1:9b:5f:5c:f1:b5:87:93:dd:97:60:
         e3:5e:ff:0f:3b:8b:c1:7d:9c:6d:c2:cc:10:cd:1d:1b:7e:05:
         fa:6a:61:2e:64:4d:a5:af:86:a0:d8:60:8e:c9:a8:df:1c:46:
         4a:2b:c4:ee:de:4a:9f:c4:c1:31:8d:39:ef:62:fd:1d:e5:7d:
         36:40:7d:30:d9:bb:e2:42:69:0a:d9:b5:56:78:2b:28:8f:91:
         ed:30:8d:de:cd:ba:f8:53:ec:3b:62:23:f8:11:da:29:22:09:
         e2:34:5b:e6:00:45:49:5c:c3:c7:b8:54:d2:bc:58:12:b3:58:
         c2:88:52:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:15 2026 by rpki-client