Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
File:                     rs-kglLctVxfHrOBKIztw-b4YnQ.mft (raw, json)
Hash identifier:          9sHSm8ahK/j71cAga8Ns57fEdnrMmOnWp8QxSMRFsiI=
Subject key identifier:   BA:41:EA:45:E4:FB:71:AD:B3:08:06:55:84:9B:EC:AD:3C:0F:84:B6
Authority key identifier: AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74
Certificate issuer:       /CN=A91356BA/serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
Manifest number:          016F
Signing time:             Thu 23 Jul 2026 06:29:30 +0000
Manifest this update:     Thu 23 Jul 2026 06:29:29 +0000
Manifest next update:     Thu 30 Jul 2026 06:29:29 +0000
Files and hashes:         1: rs-kglLctVxfHrOBKIztw-b4YnQ.crl (hash: IjjoDCe52vkv1SCrFQGc3uE7dKH0GnfbUpa4hd7hQ3o=)
                          2: 9ECB1908653F11F1B667060D8D47A888.roa (hash: DbvXdABic1KJzkxyhPlZ4fRbKrDPMh8Orj+aI7Km8vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl
                          rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91356BA, serialNumber=AECFA48252DCB55C5F1EB381288CEDC3E6F86274
        Validity
            Not Before: Jul 23 06:29:29 2026 GMT
            Not After : Jul 30 06:29:29 2026 GMT
        Subject: CN=6a61b4ca-3382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8e:04:33:91:57:b8:c2:58:b7:a2:95:57:da:
                    d7:9b:80:5f:5b:6a:a6:ee:db:02:d2:1b:d0:f8:fb:
                    22:4d:91:d5:9d:bb:b8:54:46:75:ac:9d:95:87:fd:
                    1d:53:e2:86:31:c3:22:81:26:fd:cc:cb:aa:91:c2:
                    0f:72:6e:31:19:89:e2:96:b0:af:30:ce:97:92:19:
                    9a:89:4b:fa:3f:91:33:e9:63:8f:7c:95:ec:71:06:
                    16:9a:60:91:7d:cf:6d:f1:5a:f1:f4:e0:74:11:5a:
                    00:8c:f4:97:29:6d:1b:11:7a:5e:ce:e5:61:3d:9f:
                    2d:28:79:d9:67:62:e8:1d:3a:63:c4:ce:01:20:6e:
                    54:e1:a0:e8:ec:96:e0:c7:b9:7c:f5:91:fd:f8:15:
                    78:48:d7:60:9b:b8:e6:a7:ff:22:99:c4:59:44:c6:
                    b7:96:2a:df:4b:33:36:66:0c:30:87:82:25:32:14:
                    b3:ed:2b:5d:f3:7f:6e:2b:d6:9c:c5:94:8f:0c:99:
                    2f:63:ad:9d:bb:27:e6:f9:fa:be:6e:e6:d0:3d:56:
                    58:0d:e9:e1:fa:52:ee:b9:21:04:ae:48:8c:54:2c:
                    a3:5c:79:92:d7:7b:15:90:9c:a3:22:ed:30:b1:1f:
                    19:a9:df:62:b1:62:0d:23:4d:82:68:f7:55:ea:0e:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:41:EA:45:E4:FB:71:AD:B3:08:06:55:84:9B:EC:AD:3C:0F:84:B6
            X509v3 Authority Key Identifier:
                keyid:AE:CF:A4:82:52:DC:B5:5C:5F:1E:B3:81:28:8C:ED:C3:E6:F8:62:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rs-kglLctVxfHrOBKIztw-b4YnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BA/264521D2690511EFAD230464C4F9AE02/rs-kglLctVxfHrOBKIztw-b4YnQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:73:9b:bd:ac:4e:9a:9b:e5:1b:a6:90:e9:c9:7d:64:de:3d:
         ad:93:fa:a7:04:31:16:71:c0:f1:93:5f:31:c4:ef:2b:49:0c:
         e8:c0:06:88:cf:86:3b:35:fc:75:c0:c9:0f:d2:28:16:06:a6:
         4c:c5:34:b5:ff:6f:79:a6:35:33:98:8f:58:07:ca:f9:23:c8:
         89:6f:24:87:8a:61:39:eb:bf:e6:1b:36:3d:67:92:08:a7:7c:
         6c:3f:16:2b:9a:fb:ad:00:e8:40:29:21:fb:5e:97:e3:16:ae:
         fb:9a:1e:9a:5d:0c:f5:b0:bb:58:6f:05:f8:54:6e:da:9f:cc:
         12:39:70:74:38:10:2e:f2:9b:62:97:66:fc:17:92:a4:68:8c:
         22:93:5b:c8:a3:d1:c4:bc:a9:0e:80:64:99:8c:eb:25:86:c1:
         78:9c:74:94:ec:6f:0b:81:f1:17:83:ff:ba:db:40:9c:7e:58:
         41:77:20:c6:8f:1f:40:38:aa:70:72:7c:86:b8:6e:aa:1d:c0:
         ce:ae:43:1a:e0:0b:0b:35:4b:6a:d9:7c:95:69:39:4f:d0:2f:
         e4:e0:73:ef:54:1d:e0:e2:83:ce:6c:f7:10:a8:d2:ca:8e:51:
         cd:0d:40:d0:a4:2c:f9:e1:cd:ab:2f:e0:15:ab:77:3d:94:f5:
         06:4d:96:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU2QkExMTAvBgNVBAUTKEFFQ0ZBNDgyNTJEQ0I1NUM1RjFFQjM4MTI4OENFREMz
RTZGODYyNzQwHhcNMjYwNzIzMDYyOTI5WhcNMjYwNzMwMDYyOTI5WjAYMRYwFAYD
VQQDEw02YTYxYjRjYS0zMzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8Y4EM5FXuMJYt6KVV9rXm4BfW2qm7tsC0hvQ+PsiTZHVnbu4VEZ1rJ2Vh/0d
U+KGMcMigSb9zMuqkcIPcm4xGYnilrCvMM6XkhmaiUv6P5Ez6WOPfJXscQYWmmCR
fc9t8Vrx9OB0EVoAjPSXKW0bEXpezuVhPZ8tKHnZZ2LoHTpjxM4BIG5U4aDo7Jbg
x7l89ZH9+BV4SNdgm7jmp/8imcRZRMa3lirfSzM2Zgwwh4IlMhSz7Std839uK9ac
xZSPDJkvY62duyfm+fq+bubQPVZYDenh+lLuuSEErkiMVCyjXHmS13sVkJyjIu0w
sR8Zqd9isWINI02CaPdV6g4goQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpB6kXk
+3GtswgGVYSb7K08D4S2MB8GA1UdIwQYMBaAFK7PpIJS3LVcXx6zgSiM7cPm+GJ0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQS8yNjQ1MjFEMjY5
MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RWeGZIck9CS0l6dHctYjRZ
blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JzLWtnbExjdFZ4ZkhyT0JLSXp0dy1iNFluUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTZCQS8yNjQ1MjFEMjY5MDUxMUVGQUQyMzA0NjRDNEY5QUUwMi9ycy1rZ2xMY3RW
eGZIck9CS0l6dHctYjRZblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfHObvaxOmpvlG6aQ6cl9ZN49rZP6pwQxFnHA8ZNfMcTvK0kM6MAGiM+GOzX8
dcDJD9IoFgamTMU0tf9veaY1M5iPWAfK+SPIiW8kh4phOeu/5hs2PWeSCKd8bD8W
K5r7rQDoQCkh+16X4xau+5oeml0M9bC7WG8F+FRu2p/MEjlwdDgQLvKbYpdm/BeS
pGiMIpNbyKPRxLypDoBkmYzrJYbBeJx0lOxvC4HxF4P/uttAnH5YQXcgxo8fQDiq
cHJ8hrhuqh3Azq5DGuALCzVLatl8lWk5T9Av5OBz71Qd4OKDzmz3EKjSyo5RzQ1A
0KQs+eHNqy/gFat3PZT1Bk2WcQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:35 2026 by rpki-client