Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
File:                     ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json)
Hash identifier:          MZP5TWUge/sqJdsXeOr7YbYF0sVG+/u+EZD+BGMExCY=
Subject key identifier:   EB:0D:47:33:42:02:58:95:15:E1:A4:85:CA:47:A4:D8:83:38:0B:63
Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F
Certificate issuer:       /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
Manifest number:          84
Signing time:             Mon 27 Jul 2026 09:47:23 +0000
Manifest this update:     Mon 27 Jul 2026 09:47:22 +0000
Manifest next update:     Mon 03 Aug 2026 09:47:22 +0000
Files and hashes:         1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: yj6dtJDxN80GYp59xp2QN/tJ6Zw3FMNINrclNBKtcXE=)
                          2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: pAWmrFjHQ+Gya0uL4vpKVzvD0cBGp73l2+EQo/ug/JU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl
                          rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F
        Validity
            Not Before: Jul 27 09:47:22 2026 GMT
            Not After : Aug  3 09:47:22 2026 GMT
        Subject: CN=6a67292b-4755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b3:b7:4d:f2:c3:b0:eb:a7:90:4e:d4:98:93:
                    5f:fa:75:ab:04:6c:f5:e6:a1:ca:1a:af:ac:c8:1d:
                    bb:f2:80:f2:ce:df:43:4d:78:32:39:dc:a9:f3:28:
                    a1:18:70:1c:8f:94:b5:df:d3:f7:e6:f5:f1:fb:9e:
                    05:b9:ff:3d:84:c9:e0:4d:2f:01:97:bc:c6:1d:58:
                    bd:b2:bc:a6:a0:8b:e9:bf:8c:cc:40:ad:02:e5:ce:
                    e3:7d:57:f5:21:8d:34:4f:30:1d:d9:c3:e5:d9:25:
                    e9:0f:fc:7a:98:60:e8:a6:1c:e8:38:e4:7a:34:a4:
                    05:79:31:f0:65:d0:bc:78:86:ad:d9:55:a3:1c:7e:
                    db:33:db:31:32:e9:b1:70:09:31:05:1a:63:7a:c4:
                    80:a0:c5:98:c2:97:fe:af:c8:d8:f1:a3:4e:b3:e7:
                    58:1c:6a:6c:5c:8a:ea:98:5d:d6:fc:b2:fb:4b:ce:
                    6b:38:d9:c5:1e:0f:11:b8:66:58:73:11:fa:ea:cd:
                    59:35:52:30:8f:a3:10:0e:0d:e9:d1:c7:0d:fb:e1:
                    0e:99:0d:2c:a3:ef:d8:bb:08:5d:d6:ad:bd:b4:7b:
                    9a:bf:f2:3d:d3:2c:c8:71:00:e9:bb:e6:a6:ce:ea:
                    2c:e9:e2:40:d5:67:69:8a:b2:0b:f1:c0:30:12:4e:
                    58:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0D:47:33:42:02:58:95:15:E1:A4:85:CA:47:A4:D8:83:38:0B:63
            X509v3 Authority Key Identifier:
                keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:91:45:ae:b0:41:50:b8:a1:71:f7:42:0a:b2:5b:34:2c:92:
         af:32:dd:50:9d:82:2e:4c:df:5e:e5:90:a8:61:20:9e:26:78:
         53:a9:0c:da:83:52:2e:ee:fb:e6:e6:6f:9a:71:c4:83:cf:f9:
         f8:07:f4:31:2c:45:56:62:d5:44:f9:f8:60:9a:2a:45:59:f4:
         dc:39:b9:e2:8d:4c:6b:9e:a5:73:83:89:2d:c2:3b:f5:af:6d:
         77:9c:82:57:61:91:99:0e:9f:a9:c1:c9:bd:3c:a8:9f:ef:ff:
         b6:36:ee:e6:cd:94:ae:35:ce:b3:f5:32:94:cd:43:b0:9b:db:
         b7:b8:2e:49:59:5f:42:17:67:45:b7:6d:8b:3e:46:ad:11:ab:
         f9:d1:95:19:14:2a:d0:66:55:da:98:4f:eb:a6:c4:0e:60:9a:
         0f:ca:a1:53:c5:78:13:7d:87:d5:68:bc:d9:7a:b3:bb:f8:c3:
         a0:45:3b:57:06:4d:b8:b3:a1:98:a4:85:1e:57:b0:f0:e8:c1:
         2e:38:a6:d7:cd:ea:36:67:9c:0c:c3:29:3e:9f:d2:67:dc:ac:
         59:c0:c1:dc:fa:7c:b9:75:35:f3:db:5b:56:a0:50:13:2b:cb:
         d4:80:2e:c3:9b:94:e6:04:59:91:61:d3:fd:68:2d:c4:ca:f8:
         e6:6c:5e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:48:32 2026 by rpki-client