Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft
File:                     KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft (raw, json)
Hash identifier:          Dn25qzw+CK3zleVtnqnBA+NI4OKwYSiT1MdGd52jWyo=
Subject key identifier:   FC:2F:1F:1C:D5:C2:45:A9:33:FE:2E:3E:DD:68:50:15:A9:8A:93:BC
Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7
Certificate issuer:       /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft
Manifest number:          0218
Signing time:             Mon 27 Jul 2026 04:24:09 +0000
Manifest this update:     Mon 27 Jul 2026 04:24:08 +0000
Manifest next update:     Mon 03 Aug 2026 04:24:08 +0000
Files and hashes:         1: KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl (hash: MIYsMrJNSFRGY6EPECC+jOiFTgn2HTS9kGbRYchWyY4=)
                          2: 21525A1C520B11EE8B79021AC4F9AE02.roa (hash: KWX82VUSGhT9UsPkifLZyX4n6ROSHucaBgxHHGSJG/Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl
                          rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5AEE, serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7
        Validity
            Not Before: Jul 27 04:24:08 2026 GMT
            Not After : Aug  3 04:24:08 2026 GMT
        Subject: CN=6a66dd68-ab6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:e7:6e:34:f2:0c:6b:a8:40:97:7c:df:d9:
                    db:50:09:2d:d0:8f:7c:f4:56:e2:e6:c4:aa:bf:3e:
                    2e:f2:39:12:64:d3:c0:79:cb:35:d7:9c:67:e1:58:
                    19:c8:28:ef:f4:9d:7b:17:17:f0:1d:7b:1f:5e:40:
                    f8:11:78:e2:cc:32:cc:aa:2c:07:a1:a8:13:97:5a:
                    5e:58:06:96:03:80:92:43:a8:e0:a3:da:fb:4d:d3:
                    0b:7b:b0:b7:90:04:9b:f2:cd:c2:4d:bd:7c:ed:56:
                    9a:62:fe:29:7a:7f:60:e2:9d:f9:81:87:d1:44:06:
                    17:bb:20:9b:62:13:cc:36:56:1d:68:04:a2:57:30:
                    35:cf:85:b2:72:6e:d1:c9:aa:05:3c:c1:f7:bf:53:
                    6a:36:64:61:84:60:85:05:59:1a:95:49:5e:f1:f6:
                    b5:96:ef:68:c5:85:77:d3:76:3a:48:15:df:a6:fc:
                    1d:e0:e6:56:52:85:84:0d:d8:45:42:b2:44:50:67:
                    ef:bf:3e:eb:35:41:b1:77:d0:7e:da:f5:24:0c:36:
                    63:2f:74:b5:05:5b:40:bf:87:66:11:e8:eb:d9:25:
                    7f:22:29:f1:d4:63:dc:1c:88:38:4a:c5:69:08:45:
                    ae:40:57:48:4e:a2:bf:14:10:b8:60:7b:9c:af:67:
                    34:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2F:1F:1C:D5:C2:45:A9:33:FE:2E:3E:DD:68:50:15:A9:8A:93:BC
            X509v3 Authority Key Identifier:
                keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:dd:76:4f:3b:d8:88:97:85:ce:37:15:67:e1:c6:76:40:95:
         9c:95:a4:dd:bc:71:0d:19:89:c0:de:7b:f6:4a:d6:c6:85:f9:
         b6:89:d7:cd:5f:bb:ed:87:92:77:b5:72:9a:b4:4e:c6:8f:c7:
         f4:46:bf:33:ca:12:a4:da:3c:bb:97:d9:0d:6c:9f:ef:0d:56:
         86:00:81:4d:db:9c:bb:30:8d:d6:ae:ba:8f:46:c5:14:98:27:
         c8:2e:6b:d5:a2:06:43:00:f9:f5:bd:67:fb:fa:50:e8:41:6a:
         fe:45:4d:f1:57:26:08:47:63:02:5f:00:2e:ba:86:ed:a7:21:
         df:16:b2:f9:72:ba:8c:7b:0c:08:c6:94:9c:f9:36:e8:8f:2d:
         9a:3e:bc:02:07:61:54:1a:d7:5c:4d:2f:ed:03:a6:a3:a7:db:
         5a:f2:2c:ea:ea:f3:96:0d:67:14:11:f4:d3:73:e1:77:81:17:
         15:f9:a2:ce:17:f2:7d:0f:d1:1f:f6:b5:ec:99:0b:38:e7:9d:
         62:31:bc:ce:0d:5f:9a:3e:a6:40:f0:df:41:c9:6b:a2:28:5d:
         80:95:81:b3:80:c5:74:b6:67:b5:11:ee:19:a0:ac:da:29:9b:
         8b:d0:3b:36:4a:e8:91:6f:5d:6b:48:d8:09:ff:19:75:85:61:
         11:08:45:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVBRUUxMTAvBgNVBAUTKDI4QzA2MDdEOTY4MzFBM0QxODA5MzM0NUIzNzI1OEVF
M0JEN0YzRTcwHhcNMjYwNzI3MDQyNDA4WhcNMjYwODAzMDQyNDA4WjAYMRYwFAYD
VQQDEw02YTY2ZGQ2OC1hYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqWjnbjTyDGuoQJd839nbUAkt0I989Fbi5sSqvz4u8jkSZNPAecs115xn4VgZ
yCjv9J17FxfwHXsfXkD4EXjizDLMqiwHoagTl1peWAaWA4CSQ6jgo9r7TdMLe7C3
kASb8s3CTb187VaaYv4pen9g4p35gYfRRAYXuyCbYhPMNlYdaASiVzA1z4Wycm7R
yaoFPMH3v1NqNmRhhGCFBVkalUle8fa1lu9oxYV303Y6SBXfpvwd4OZWUoWEDdhF
QrJEUGfvvz7rNUGxd9B+2vUkDDZjL3S1BVtAv4dmEejr2SV/Iinx1GPcHIg4SsVp
CEWuQFdITqK/FBC4YHucr2c0ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPwvHxzV
wkWpM/4uPt1oUBWpipO8MB8GA1UdIwQYMBaAFCjAYH2Wgxo9GAkzRbNyWO471/Pn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUFFRS8zRTM5MDFGMjUy
MDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdqMFlDVE5GczNKWTdqdlg4
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tNQmdmWmFER2owWUNUTkZzM0pZN2p2WDgtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUFFRS8zRTM5MDFGMjUyMDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdq
MFlDVE5GczNKWTdqdlg4LWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT912TzvYiJeFzjcVZ+HGdkCVnJWk3bxxDRmJwN579krWxoX5tonXzV+77YeS
d7VymrROxo/H9Ea/M8oSpNo8u5fZDWyf7w1WhgCBTducuzCN1q66j0bFFJgnyC5r
1aIGQwD59b1n+/pQ6EFq/kVN8VcmCEdjAl8ALrqG7ach3xay+XK6jHsMCMaUnPk2
6I8tmj68AgdhVBrXXE0v7QOmo6fbWvIs6urzlg1nFBH003Phd4EXFfmizhfyfQ/R
H/a17JkLOOedYjG8zg1fmj6mQPDfQclroihdgJWBs4DFdLZntRHuGaCs2imbi9A7
NkrokW9da0jYCf8ZdYVhEQhFOA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:43 2026 by rpki-client