Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
File:                     KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json)
Hash identifier:          P7K4e2kXriJBtopX8IXCsQLCBcHTdfR7mUz257diVc0=
Subject key identifier:   26:07:8F:A5:EE:CB:DD:68:3D:BD:13:B1:EA:4D:DD:58:4C:B0:B9:CB
Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B
Certificate issuer:       /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
Certificate serial:       0B34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
Manifest number:          0B1E
Signing time:             Wed 22 Jul 2026 19:41:08 +0000
Manifest this update:     Wed 22 Jul 2026 19:41:07 +0000
Manifest next update:     Wed 29 Jul 2026 19:41:07 +0000
Files and hashes:         1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: JEG3KIkPk7OSLrz7gKHXhsIT4fUwLBdkaHPMYMBlfTc=)
                          2: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: N/vJ3gYa2yZt4lT/pvPMJti4tbnPowjmmGAT5w4Jh4Y=)
                          3: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: obRBQ6LEWosfS1i2NAWPUNb1MMXwUPUFHNc2IZBZzak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl
                          rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2868 (0xb34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
        Validity
            Not Before: Jul 22 19:41:07 2026 GMT
            Not After : Jul 29 19:41:07 2026 GMT
        Subject: CN=6a611cd4-fb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8b:2f:a7:28:d2:64:fe:24:ac:79:a2:4d:d4:
                    10:10:fd:d0:e6:b5:e0:b1:b9:27:82:b8:6c:dd:b6:
                    c6:51:1c:6f:24:0a:9f:4b:c8:e1:02:96:1e:90:50:
                    eb:4e:48:a9:16:9a:f7:c2:5b:91:b7:48:57:5f:b3:
                    60:8e:57:85:57:9a:69:aa:fa:6e:3c:29:7e:fe:c2:
                    fb:78:b4:8c:66:3f:1e:d4:e4:03:98:5b:a4:d0:b6:
                    86:71:66:fe:0a:2e:49:2f:ff:0f:a6:0b:c5:78:5c:
                    ee:e3:f8:88:5d:c5:05:c2:e8:24:b3:55:e5:76:b7:
                    e7:d3:f1:bf:90:9d:a1:24:c8:21:b6:80:71:83:ac:
                    43:d0:e7:2f:c9:6d:fd:c0:3d:80:1a:18:56:72:56:
                    dc:15:5d:9c:ce:10:ad:ef:92:8e:0f:36:dc:7b:b3:
                    44:28:2f:1d:70:13:29:f5:28:94:be:11:ee:d5:49:
                    7b:6d:cf:ca:41:a4:4b:4a:a0:3f:79:3b:d4:5e:a8:
                    c6:cf:7f:e1:2f:2f:a5:4f:99:bf:3b:88:75:c9:0c:
                    8a:89:93:c3:7d:9d:30:29:3d:4e:81:fd:c7:18:a5:
                    83:e4:6c:05:e5:8b:82:93:1a:00:ed:74:be:e4:18:
                    9b:9e:fa:a4:07:3d:5f:83:4d:bc:6a:5b:9b:d5:9f:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:07:8F:A5:EE:CB:DD:68:3D:BD:13:B1:EA:4D:DD:58:4C:B0:B9:CB
            X509v3 Authority Key Identifier:
                keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:20:6c:86:3e:df:94:eb:c8:35:11:63:61:26:3d:04:06:ad:
         f2:c3:34:43:17:13:03:f4:47:ab:5d:73:62:11:67:39:33:2a:
         ba:e5:2a:57:56:b8:17:79:a3:46:86:1b:17:c7:e2:63:9e:1a:
         23:b9:d3:42:68:b2:92:2d:d5:fa:8e:7f:73:84:aa:ef:2a:d7:
         66:4f:40:fb:55:fe:d0:b4:e2:da:32:de:ce:59:c8:7f:2a:6a:
         df:ee:27:48:24:1b:e4:99:66:81:39:0b:f5:7b:62:03:31:b5:
         cc:39:53:e5:39:1d:3d:2d:dd:5c:14:57:f5:52:43:e1:c2:15:
         ac:d7:78:f0:e7:9e:26:d5:89:92:c3:8b:4e:93:d0:df:df:4f:
         a1:45:3e:0b:61:f4:ee:b1:82:ef:c7:5c:7d:9a:a5:18:06:10:
         95:a2:b3:0e:2d:35:a9:25:17:06:97:7c:5c:38:4c:4d:f4:8f:
         74:44:3e:71:4e:58:64:2d:4c:d7:7c:76:a0:4b:3f:11:20:a8:
         13:ff:b7:d4:be:ed:a9:d0:7e:c6:d4:e8:31:4c:b5:5d:7b:96:
         ca:06:dd:bf:28:a6:76:23:93:4d:4f:04:b1:cb:9c:2a:91:50:
         78:17:50:71:06:f6:5a:3f:01:38:3e:01:c1:59:cf:70:94:7b:
         4b:b4:97:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:25 2026 by rpki-client