Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
File:                     Ktu3GxFSPKM5Ll832dx2shHb4IM.mft (raw, json)
Hash identifier:          9pxMg1lK7oZl7ixWb3+aRJjCzPRU6AGljjWK7Opje30=
Subject key identifier:   E3:40:9F:AC:F4:E4:17:8C:09:0D:47:41:16:2A:F3:FC:DF:E1:EA:EC
Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83
Certificate issuer:       /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
Manifest number:          01C4
Signing time:             Mon 27 Jul 2026 05:48:10 +0000
Manifest this update:     Mon 27 Jul 2026 05:48:09 +0000
Manifest next update:     Mon 03 Aug 2026 05:48:09 +0000
Files and hashes:         1: Ktu3GxFSPKM5Ll832dx2shHb4IM.crl (hash: L8mHpORwiLBFrbmGZb9psAUB+7sTy7OyCygnxgtD5HM=)
                          2: F4777FBEEDDA11EF9731160CC4F9AE02.roa (hash: tZoqe0Wr8WxlyxJlU9JnoVv0Dbj1abCtUlpInyE8avA=)
                          3: 34C7EB4010F411EFB4CD9614C4F9AE02.roa (hash: NXPm9MxFlazPxhF1ZkfK5w9U7zw1CF9xskWoFgFi9BA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl
                          rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8347, serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083
        Validity
            Not Before: Jul 27 05:48:09 2026 GMT
            Not After : Aug  3 05:48:09 2026 GMT
        Subject: CN=6a66f11a-9664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:e0:fd:83:98:20:c2:6f:79:40:b2:43:c3:
                    99:2c:bd:88:f6:20:86:82:11:09:33:38:51:3e:e8:
                    c2:41:e9:29:0e:c2:3d:a6:37:e9:d1:ea:d7:c8:97:
                    4d:5b:a2:e0:8e:b5:b1:17:5c:e1:1c:6b:d3:e0:13:
                    40:51:67:34:4b:6e:fb:22:af:2f:d4:fa:b7:43:4a:
                    fb:29:3c:8e:ee:35:f8:b0:63:f2:b1:96:21:8c:1b:
                    4e:fb:5a:0e:e0:f4:af:ba:bf:b9:8b:74:f3:17:47:
                    f5:77:89:1a:77:84:39:73:b8:05:42:07:db:a6:86:
                    0e:1b:dc:e5:7f:92:59:fd:16:31:1f:72:dc:8f:df:
                    6c:16:d6:7f:35:b4:0b:95:29:dd:75:0b:b1:e6:22:
                    ff:e1:a7:76:b3:df:01:43:83:65:15:fd:b4:f8:e8:
                    af:f9:2f:8d:2e:5f:4d:e2:ad:a4:0c:b0:9f:25:2b:
                    fb:70:63:f3:a6:1d:1c:8a:d8:82:9f:7b:ed:6b:20:
                    b3:0b:29:8f:62:3f:b1:a7:d6:df:d3:e1:75:a0:75:
                    b4:af:e5:de:99:ea:de:64:b8:74:e1:41:1a:4c:a7:
                    20:00:f2:b2:70:f7:02:7c:8e:88:0e:1f:b0:60:e8:
                    e4:4b:81:b4:3b:9e:ae:c9:71:f8:f9:3b:4c:29:b0:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:40:9F:AC:F4:E4:17:8C:09:0D:47:41:16:2A:F3:FC:DF:E1:EA:EC
            X509v3 Authority Key Identifier:
                keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:61:c0:93:d1:dc:f6:fb:96:12:c5:c3:fe:f6:dc:af:bb:6e:
         4a:6f:95:9f:15:d7:27:62:69:99:ca:bf:76:10:52:13:8c:4e:
         42:8e:c5:d0:9f:3b:3f:e0:6d:e5:72:94:73:06:73:cc:ce:8a:
         76:01:e2:18:28:ef:65:f4:00:04:51:40:a3:b9:92:c0:8b:92:
         b2:65:12:a6:2c:e6:66:dc:7c:b7:4c:07:63:1d:5d:c3:b4:14:
         0f:f8:bc:45:e0:d3:f6:95:e5:b3:9a:db:ce:17:ca:c4:6d:5e:
         de:71:1a:a5:a7:0a:80:d5:9f:1d:92:81:d4:f4:0e:18:04:1b:
         1b:5d:b8:c0:e5:77:45:f3:10:0a:66:92:8c:9f:ac:b9:2f:b8:
         6a:be:65:c8:29:a0:95:18:ee:d5:64:75:9c:55:a7:96:4f:db:
         f9:b1:95:14:4e:2a:db:37:8d:2b:7c:96:1f:db:ec:2a:ec:0b:
         12:db:62:df:bb:3a:71:f1:f3:97:6d:5d:ce:63:02:89:28:32:
         29:40:3d:8d:30:2a:2e:0f:9e:a0:f0:c1:4a:c1:22:38:58:14:
         45:12:19:8e:b0:47:76:fb:fd:40:76:a0:a8:4f:a4:4e:83:a6:
         af:e3:d6:26:26:ab:05:2c:60:a4:f1:fa:23:50:7e:0b:43:92:
         10:30:05:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:58 2026 by rpki-client