Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
File:                     kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json)
Hash identifier:          raz941C8n422g7L2fjHpsx6296Opni8Szv4jeBaheKc=
Subject key identifier:   77:89:DD:1D:D5:40:71:C0:E2:B3:C3:91:AB:D6:AD:62:98:A1:9F:CF
Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82
Certificate issuer:       /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
Certificate serial:       3561
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
Manifest number:          355F
Signing time:             Tue 28 Jul 2026 15:21:47 +0000
Manifest this update:     Tue 28 Jul 2026 15:21:46 +0000
Manifest next update:     Tue 04 Aug 2026 15:21:46 +0000
Files and hashes:         1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: 0aqjMl5iZOaBLuzL4a+oHO8SKPgdfh4ZiVdokuG2zoU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl
                          rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13665 (0x3561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9C05, serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
        Validity
            Not Before: Jul 28 15:21:46 2026 GMT
            Not After : Aug  4 15:21:46 2026 GMT
        Subject: CN=6a68c90b-3d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:d8:f8:27:16:13:67:82:d1:b8:a1:d2:63:
                    fd:f9:42:45:44:39:ec:46:c9:04:a9:aa:3d:e2:b5:
                    6b:97:24:f0:71:7c:0e:f4:d5:75:98:67:4c:1c:d9:
                    34:b7:1d:ee:a1:9f:3d:a9:ff:24:a2:71:9e:96:1e:
                    8f:2e:64:71:2c:fd:5f:a5:d6:24:95:b8:f5:4f:e0:
                    0a:45:59:c2:01:d7:43:90:b1:df:2c:dc:ed:eb:b1:
                    7b:88:16:93:55:34:0b:c5:e6:1d:57:56:03:21:d7:
                    78:d6:b2:b6:c1:c9:bc:c0:14:1b:5e:5b:8a:34:36:
                    74:cd:d4:cf:05:79:81:fa:39:2c:6a:50:e9:d1:61:
                    13:0a:01:b5:62:5c:ef:bb:ed:2c:b0:1e:aa:11:93:
                    a3:2d:a6:2c:47:96:06:c5:ad:6a:38:7f:fd:0a:45:
                    93:bb:d9:6c:aa:ec:b8:5c:2c:b2:0a:48:65:67:5f:
                    d2:36:03:6f:1a:1e:11:83:0f:e0:fd:8d:cf:d1:08:
                    a5:5d:cf:df:92:1f:66:29:a6:32:21:f2:fb:4a:39:
                    2b:a5:dc:34:1d:06:d9:c6:31:2e:45:4c:05:42:34:
                    b0:19:fa:76:1d:0b:65:74:08:30:f2:99:c1:be:ea:
                    a0:4a:8f:8e:02:e7:47:21:71:bc:57:60:09:bd:75:
                    46:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:89:DD:1D:D5:40:71:C0:E2:B3:C3:91:AB:D6:AD:62:98:A1:9F:CF
            X509v3 Authority Key Identifier:
                keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:dd:df:42:ea:43:49:d5:fa:c4:56:19:30:ee:c6:03:ea:fa:
         50:3d:58:ab:1f:2f:d4:40:ae:a4:0b:bc:d7:87:99:36:97:d6:
         9c:c1:3c:00:57:16:3d:47:7d:4b:df:6e:d4:ac:63:53:14:de:
         1a:72:c7:88:9d:5a:f6:c3:c8:b1:1e:87:b2:6c:b9:37:d7:6e:
         9c:0b:33:15:e9:19:36:73:49:9a:94:18:51:52:32:58:44:0c:
         d3:74:e7:8a:27:b3:8a:6e:1c:e7:b9:f9:b2:e7:5c:1a:c2:0a:
         1e:f6:16:28:35:9e:18:bd:fc:51:01:0c:61:bb:c8:fd:6e:f2:
         d5:d0:a7:3e:55:57:ae:2e:ae:74:90:a0:68:33:1e:ee:60:5e:
         80:d2:4c:f2:e2:e4:d1:48:dc:45:0d:e8:22:af:81:b0:e0:16:
         ab:42:f7:1a:44:27:78:f4:da:2f:fe:38:68:fc:2b:b0:b6:b0:
         0b:32:ff:38:a0:28:86:00:57:58:32:a1:75:25:b8:d1:34:43:
         b5:ea:02:07:a3:bc:4d:e9:4e:d4:1b:05:f9:27:29:80:78:57:
         69:59:e4:78:4d:79:70:5e:92:67:a8:63:1d:07:11:c1:a9:17:
         78:da:44:eb:ae:2f:88:04:e3:60:c2:46:5f:d2:d6:12:6f:49:
         c8:7b:3a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:31:34 2026 by rpki-client