Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
File:                     kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json)
Hash identifier:          EAK9OnfvW5NOMpoVdhRgkUFVXKOtlwsp2DCeRnyOJQo=
Subject key identifier:   47:2E:FA:82:3C:C9:35:87:3D:FF:10:6D:87:B9:1B:34:7A:2C:73:DB
Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1
Certificate issuer:       /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1
Certificate serial:       0631
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
Manifest number:          0631
Signing time:             Tue 28 Jul 2026 14:18:17 +0000
Manifest this update:     Tue 28 Jul 2026 14:18:17 +0000
Manifest next update:     Tue 04 Aug 2026 14:18:17 +0000
Files and hashes:         1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: NTx5wPzf1jcs0gNGvrbe/f963deKMWSqgSXDtH/DGQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl
                          rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1
        Validity
            Not Before: Jul 28 14:18:17 2026 GMT
            Not After : Aug  4 14:18:17 2026 GMT
        Subject: CN=6a68ba29-27dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:af:91:52:32:85:ab:4e:20:69:9f:c8:94:54:
                    16:fe:d5:41:f5:60:26:13:8d:81:ff:b7:a5:22:f0:
                    68:82:6a:67:9e:ea:ee:e9:86:5b:b5:b3:16:30:00:
                    a9:65:90:55:64:ef:55:03:a5:60:a3:f4:60:77:49:
                    59:1c:95:ab:28:21:4c:12:3f:dd:e5:44:2c:25:d6:
                    9f:ad:90:75:a2:39:1c:1a:37:20:16:a2:0a:08:42:
                    94:95:d0:c3:e0:c0:4f:c0:f6:10:ef:d6:dc:1b:32:
                    df:f3:14:b4:29:43:b3:0c:78:c0:f3:00:2a:a8:f7:
                    79:60:52:d6:fb:9a:b0:10:1e:7f:ef:ba:55:9f:8f:
                    32:db:75:0f:a9:5c:6f:e2:3c:41:18:f3:53:35:9d:
                    ba:a3:17:fb:06:1f:aa:81:86:72:9c:75:61:4b:81:
                    4c:6a:d0:bf:5c:f9:0d:28:12:fc:7f:c2:be:b0:4b:
                    ef:d9:6d:3e:7c:b6:43:06:46:5c:69:8f:e2:93:f2:
                    df:49:f6:6c:57:1e:38:10:a1:c6:36:3d:36:63:0e:
                    6e:59:5f:a2:77:bd:91:29:82:ba:f6:d0:5d:f5:ba:
                    2d:c6:9c:c1:39:86:3c:d1:bf:19:34:60:3b:83:6b:
                    37:1f:ab:d1:62:22:22:ad:c1:8c:1c:48:67:a3:6c:
                    0b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2E:FA:82:3C:C9:35:87:3D:FF:10:6D:87:B9:1B:34:7A:2C:73:DB
            X509v3 Authority Key Identifier:
                keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:99:e4:6a:ce:62:ef:1e:b4:35:61:49:01:11:06:48:44:0e:
         5b:83:d4:c2:8f:e8:be:a0:25:c8:7a:8f:57:4c:d4:0c:fb:5a:
         9b:7e:ff:3c:3c:ac:e4:55:b8:9a:e0:43:43:5d:79:67:54:fe:
         42:73:14:58:6e:89:a8:0d:d9:19:85:32:63:81:06:25:8c:c5:
         02:a4:db:dd:c4:ed:ce:fb:7a:53:02:e1:d6:40:8b:7a:c9:4e:
         d8:68:06:f2:bc:ac:37:c3:ca:9f:a2:04:ea:36:e3:96:8d:a1:
         84:0b:a1:ef:f5:d0:5e:41:42:98:f3:ff:42:26:25:32:16:ff:
         8a:dd:f7:62:02:bf:59:d7:02:f3:3f:a1:49:d9:0f:d9:0f:b7:
         e2:14:89:eb:db:d1:d0:ca:67:f6:2a:68:9f:07:5f:e7:dc:82:
         a6:a6:1d:87:8b:0c:c1:82:d7:41:9d:91:29:b7:49:82:ee:e3:
         e8:57:d9:a3:a1:2e:84:23:6f:5f:ba:4e:11:8a:3c:7d:bb:07:
         57:8c:f7:c1:0e:93:0d:27:81:ad:9e:67:68:4b:e5:97:7f:86:
         a7:d0:1c:ea:44:d9:ce:3f:80:34:10:08:b2:a6:86:44:85:fd:
         fe:0c:81:29:1d:37:2e:0a:68:e7:36:85:fa:88:69:cf:50:54:
         56:e2:f4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:41:47 2026 by rpki-client