Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
File:                     kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json)
Hash identifier:          c3RH1wUQyijr57x1TQAwhNfcTzxwzWjbq28jFdewZUY=
Subject key identifier:   52:14:E8:2E:56:6F:17:88:73:31:2E:2D:55:BA:51:A1:63:C5:29:F4
Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E
Certificate issuer:       /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E
Certificate serial:       0DBA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
Manifest number:          0DA7
Signing time:             Tue 28 Jul 2026 18:03:20 +0000
Manifest this update:     Tue 28 Jul 2026 18:03:20 +0000
Manifest next update:     Tue 04 Aug 2026 18:03:20 +0000
Files and hashes:         1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: qxWEXePfS162AhvqLWB2fWUfEyE4pyNzOwf/Iob1S8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl
                          rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3514 (0xdba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E
        Validity
            Not Before: Jul 28 18:03:20 2026 GMT
            Not After : Aug  4 18:03:20 2026 GMT
        Subject: CN=6a68eee8-d2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:84:b0:4d:c0:6b:60:97:ad:28:26:4d:49:fa:
                    f3:10:7f:96:f5:b4:99:e1:ac:78:7e:2c:91:12:d8:
                    f9:86:a0:f9:48:26:8e:e0:cd:c5:4c:80:80:b2:47:
                    77:20:d9:71:6f:86:08:53:26:86:fc:de:91:ac:89:
                    03:45:34:8a:37:e4:63:c7:9c:e5:03:34:68:12:81:
                    5c:11:c6:c0:05:d2:c4:00:ea:75:74:5c:23:4b:64:
                    94:41:e5:61:de:93:3a:64:41:64:82:16:fe:a6:36:
                    10:39:b4:7e:74:45:c8:10:0b:79:d7:95:ac:cb:ba:
                    d8:70:bb:d4:88:1a:5d:a1:11:67:1d:65:7f:33:d9:
                    1e:00:db:96:ec:a5:f9:73:41:c6:54:43:e0:da:b4:
                    fa:94:cf:f8:e4:b6:e2:06:47:d6:d2:43:49:4f:2d:
                    b0:2b:74:e5:ba:88:7e:01:09:5a:e7:b2:99:9f:c0:
                    71:72:62:5f:58:83:9b:34:27:23:9e:2d:de:89:9b:
                    81:16:53:45:c7:28:a1:3d:dd:a8:c7:03:b4:37:65:
                    83:7f:04:cb:e4:80:f2:ac:f4:0b:bb:ce:e1:3f:ab:
                    20:e4:e9:a0:80:f3:d9:cb:f3:e4:7e:4e:54:21:ab:
                    c6:5e:28:ee:e2:0a:d2:5c:cb:3b:a7:bd:e5:da:44:
                    5b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:14:E8:2E:56:6F:17:88:73:31:2E:2D:55:BA:51:A1:63:C5:29:F4
            X509v3 Authority Key Identifier:
                keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:ca:53:87:18:8c:2e:e6:05:dd:fe:18:73:38:d9:4d:96:
         44:81:2e:e2:dc:05:1a:33:8d:14:47:a9:c0:dc:e7:c1:88:ff:
         86:fa:fc:0f:62:b6:3f:59:0e:d7:79:62:60:c3:d1:29:c2:46:
         f3:22:fe:a1:03:0c:50:d4:6e:a1:75:60:2a:ec:80:9d:f2:d6:
         9e:24:f8:94:66:95:b9:d7:8e:19:7e:e5:80:f8:6b:3a:c7:c2:
         c9:26:a0:a2:ab:73:eb:f0:7d:5e:44:23:cd:88:99:df:90:ec:
         7b:96:3d:78:71:ce:24:5a:58:17:ee:7c:8b:a8:38:1d:27:53:
         ca:cd:13:19:66:29:36:a1:96:6f:03:8e:f3:f8:1d:c7:d9:c8:
         e5:52:50:59:7b:2b:ee:1d:e9:e9:ce:47:1d:d4:ab:24:a8:b4:
         fa:4b:e8:a6:6d:61:3a:47:ee:25:85:76:c4:ac:47:66:0c:1d:
         29:5c:75:8b:3d:67:98:70:8e:5a:70:31:88:a3:69:fc:a6:95:
         03:78:63:68:32:f6:29:18:9f:ab:1f:41:19:25:a2:cc:18:2a:
         a8:a4:d9:83:14:ad:b2:62:c3:c5:07:73:9b:f9:3e:3c:fa:18:
         58:1c:27:17:15:6b:d7:23:36:9c:d6:f1:e3:31:b5:46:4d:33:
         e7:10:31:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:00 2026 by rpki-client