Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
File:                     KsCrS187tbDveb0hpknK_-f5wgo.mft (raw, json)
Hash identifier:          d3qkG3LQI91tW2GmAnm/H72pLI3Z5viI9uTTbahh7Dk=
Subject key identifier:   29:62:1C:14:8B:05:1B:DE:AC:7F:60:6E:17:FC:44:0F:C6:29:26:88
Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
Certificate issuer:       /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Certificate serial:       07E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
Manifest number:          12E8
Signing time:             Tue 28 Jul 2026 19:35:02 +0000
Manifest this update:     Tue 28 Jul 2026 19:35:02 +0000
Manifest next update:     Tue 04 Aug 2026 19:35:02 +0000
Files and hashes:         1: KsCrS187tbDveb0hpknK_-f5wgo.crl (hash: Lk3JmU8Mc4eVBay4OkTKL8ehT/R12Bx7oRK/QmGrhh8=)
                          2: 6243075E653411EB98060C17C4F9AE02.roa (hash: v0uC7Tgqg5Ka5gyjZsM8cExfBYnQ3ib9cJkCqTADvOs=)
                          3: 37868F90574711EBB6BA4183C4F9AE02.roa (hash: OYV9eK2HNZwk+SVet5sg0PfolaNTvnaGC/XgX9+ge9A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl
                          rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2023 (0x7e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B927E, serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
        Validity
            Not Before: Jul 28 19:35:02 2026 GMT
            Not After : Aug  4 19:35:02 2026 GMT
        Subject: CN=6a690466-9e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:d0:a3:e0:7b:81:7e:90:93:16:ce:4f:83:
                    ba:ac:f6:2a:73:b7:68:87:6e:1e:10:56:a1:b2:6e:
                    f4:be:57:a5:13:29:c3:68:93:35:d4:8a:81:c4:fd:
                    b5:22:5e:a9:b1:f7:a1:14:c6:de:a9:8b:b0:24:ec:
                    b0:bb:53:5c:31:2d:38:dc:7b:3b:d8:a6:4c:54:76:
                    cd:3a:de:a3:68:ef:56:34:5a:4c:d9:d7:92:3a:b1:
                    86:6e:27:9e:ad:0c:e4:80:35:ca:bb:8d:67:1f:49:
                    c5:be:c3:11:82:c0:25:06:32:a9:2b:cd:06:48:2f:
                    6b:74:1b:64:95:d5:06:7d:9f:8a:6e:fb:95:d1:d2:
                    28:43:2a:66:39:78:e9:8f:61:92:de:3b:4b:6c:09:
                    f0:d9:32:fc:1f:c3:51:e9:3a:25:65:20:d6:b2:fd:
                    3c:d2:44:77:5c:d6:fb:ab:99:3b:30:80:dc:53:9f:
                    d8:37:d4:0b:c0:b1:76:0b:9a:23:9f:0d:85:49:fe:
                    35:05:a7:66:ba:38:5d:81:d3:d9:ff:7d:6b:c3:66:
                    e5:b7:e3:6f:c5:67:c3:fc:26:75:ef:af:4e:64:a5:
                    06:be:1f:58:fe:6d:a0:07:8c:c5:d7:75:cc:5a:36:
                    3d:d2:a4:b7:38:52:90:b1:ea:1d:7e:93:99:4d:aa:
                    c5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:62:1C:14:8B:05:1B:DE:AC:7F:60:6E:17:FC:44:0F:C6:29:26:88
            X509v3 Authority Key Identifier:
                keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:72:6a:f6:11:50:44:29:d2:76:34:e6:74:69:29:89:65:ce:
         57:fa:34:a2:26:07:11:36:ce:bb:7f:f3:91:d9:1a:d2:bb:c9:
         da:c0:75:14:c4:eb:55:76:b9:ee:02:04:31:5c:4d:c2:4c:37:
         b9:ee:d3:fc:3e:dd:a6:29:56:a3:e4:e3:49:f2:3d:5f:f4:5a:
         ec:7e:16:64:7b:d7:e0:7b:76:13:20:13:cc:40:83:9f:74:17:
         bb:bc:31:de:5d:a4:de:36:34:e7:22:3c:66:dc:65:2a:51:46:
         55:dd:3f:07:0c:7d:e8:20:09:36:51:ca:6e:fd:68:a1:ba:d8:
         9a:ee:31:ac:9d:a9:ec:84:ce:f4:1c:26:83:21:40:eb:89:68:
         32:ea:7b:bf:50:cd:d9:a9:47:be:5e:34:0d:8a:61:e6:12:cf:
         7b:ed:ef:d5:e1:23:28:d4:b0:44:33:46:28:bb:79:53:05:64:
         6a:70:43:37:8e:92:c1:9e:59:d3:d7:07:70:c8:b5:df:1e:3f:
         ad:5f:b0:d1:06:04:83:d0:20:0d:69:21:07:9a:64:f0:77:f1:
         f3:cf:66:87:70:30:75:71:9c:c3:6f:8d:fc:3b:45:11:59:e3:
         f3:4d:c1:21:1a:80:0e:61:3d:45:f4:c8:4b:0e:f5:b5:d3:0c:
         3f:d1:39:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:49 2026 by rpki-client