Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
File:                     KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json)
Hash identifier:          ttyifty9coa8zDkicx6oYRrTamEr5dxvR6F9uKViENI=
Subject key identifier:   85:A8:97:E3:69:19:D5:E1:AC:36:B8:6D:6C:A3:EA:6D:18:4E:8F:22
Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
Certificate issuer:       /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Certificate serial:       F2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
Manifest number:          ED
Signing time:             Wed 29 Jul 2026 07:50:17 +0000
Manifest this update:     Wed 29 Jul 2026 07:50:17 +0000
Manifest next update:     Wed 05 Aug 2026 07:50:17 +0000
Files and hashes:         1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: ODjmC+vTeSa/KEu8PgGPbkTwPnu9WdWIH2IO6DVG+d4=)
                          2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: QsP9uqEiNFI8mG4UNJDemIDsWI8VClhN6iYFmbVOcY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
                          rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 07:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
        Validity
            Not Before: Jul 29 07:50:17 2026 GMT
            Not After : Aug  5 07:50:17 2026 GMT
        Subject: CN=6a69b0b9-3654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:be:3a:e4:7b:ec:b0:5a:76:06:e9:d6:14:
                    24:7f:a7:03:3a:b9:e0:37:cb:e1:fd:f1:c7:55:3c:
                    7e:36:51:ef:fb:f2:42:2b:54:6b:3d:12:6d:36:a7:
                    f8:c4:de:5f:cd:7d:c7:fc:54:e9:8b:37:f5:50:d9:
                    08:08:90:60:ad:87:f2:e0:fc:e0:3a:e9:36:39:6d:
                    6c:1b:9d:34:a8:71:90:85:76:73:21:92:39:7a:49:
                    f8:4f:2e:f3:3a:db:46:11:f5:cd:5e:47:a3:2f:d0:
                    c5:c5:b6:1b:bc:b6:67:ac:3a:0b:b2:72:05:b2:f4:
                    94:05:3d:14:7d:cc:86:87:cb:b2:61:12:a9:69:4f:
                    28:3b:31:36:9f:63:24:9c:f4:3e:f0:46:b2:ec:ae:
                    45:40:c1:b1:a8:11:b8:60:b6:ad:7a:2a:4d:e8:97:
                    f2:6f:86:1c:f7:5e:2c:5c:ed:18:0f:df:dc:ef:f9:
                    75:b8:80:d3:e1:bb:5e:a1:36:5d:dd:d6:a9:88:01:
                    f8:68:69:3b:2c:ed:24:13:8d:2c:0c:e3:7d:ab:9b:
                    03:76:28:20:e6:00:23:51:e7:d8:46:43:e3:2b:48:
                    dc:bf:64:f5:41:39:ca:65:4f:70:57:e9:94:7d:63:
                    a5:9b:85:b6:61:9b:49:08:01:92:e3:db:99:54:d7:
                    41:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A8:97:E3:69:19:D5:E1:AC:36:B8:6D:6C:A3:EA:6D:18:4E:8F:22
            X509v3 Authority Key Identifier:
                keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:05:89:aa:14:ce:cf:cd:77:ee:d9:c5:a1:f8:04:ed:23:de:
         66:89:aa:38:94:53:c5:9f:30:33:27:0d:ad:7e:20:54:4b:40:
         06:23:4b:12:b4:ce:f5:d5:bb:d7:7c:e5:f1:28:09:4b:d0:12:
         24:01:d9:1a:71:f0:11:f4:ed:1c:7b:95:a9:2f:ef:2b:bf:61:
         cd:81:9d:6c:6a:ef:1d:1b:f0:ea:94:4d:b3:a8:2f:db:10:d8:
         10:cc:a7:f8:fc:b9:ba:a3:c5:d4:69:30:32:41:84:54:6b:f7:
         f1:a2:1b:6b:e0:65:37:2b:7e:be:e0:3a:b6:2f:c9:9f:16:d3:
         38:e8:80:41:20:a3:82:37:08:20:02:82:f8:5e:77:02:17:1c:
         41:b0:58:91:b1:dc:ea:9a:c9:4b:3a:a3:e3:f6:43:d3:93:c1:
         e3:94:79:03:31:0b:74:73:41:8f:1e:16:e2:16:5c:11:aa:13:
         ad:a6:5b:f1:a6:8d:49:d2:65:e1:a3:04:88:33:ab:6b:df:e3:
         fe:45:14:50:86:11:36:d7:ea:7a:1a:89:47:3d:ed:f5:ba:6d:
         17:3a:b2:6b:e9:23:48:f8:11:d7:98:28:a2:b9:26:4c:e7:f7:
         60:a7:a5:70:86:d4:d6:76:6f:5d:dd:5a:2a:ef:ba:e2:31:cd:
         37:77:16:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:31:00 2026 by rpki-client