Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
File:                     k-bMnLyUxrTox9mGQYMN5mORud8.mft (raw, json)
Hash identifier:          6pf4OWc2tG6OkbTBkg/3F81dkR+nxz2UKCelDmqeTnE=
Subject key identifier:   22:A8:10:B4:46:EA:34:C8:0B:46:0A:A5:69:EE:DD:86:05:94:C5:16
Authority key identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF
Certificate issuer:       /CN=A91357FC/serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
Manifest number:          83
Signing time:             Thu 23 Jul 2026 09:29:19 +0000
Manifest this update:     Thu 23 Jul 2026 09:29:18 +0000
Manifest next update:     Thu 30 Jul 2026 09:29:18 +0000
Files and hashes:         1: k-bMnLyUxrTox9mGQYMN5mORud8.crl (hash: OQ2MFL2Xrm8zexSJSNVTg46S7+BPOWOfJqClywL6+nI=)
                          2: 115DA80CBDFA11F0AC07856DC4F9AE02.roa (hash: W13G9UJDUOXNhE35H+xQmcCjaFGO3pjeXgy05QF6k+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl
                          rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:29:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91357FC, serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
        Validity
            Not Before: Jul 23 09:29:18 2026 GMT
            Not After : Jul 30 09:29:18 2026 GMT
        Subject: CN=6a61deef-c9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:4c:23:75:27:6a:55:44:5f:2c:90:1f:a1:
                    bd:3c:2f:88:b1:e7:70:19:3e:5a:df:e1:52:63:8b:
                    b2:73:0c:2f:cf:11:c4:7f:ff:fe:c9:4c:03:e8:63:
                    43:c2:6a:d1:d8:d4:80:70:33:98:93:ae:3d:e2:ad:
                    4b:b8:15:69:5d:a6:b4:02:1b:1e:04:95:dd:fd:be:
                    13:24:cb:95:53:15:d4:29:d4:e6:59:f4:48:89:ca:
                    32:14:44:25:49:cf:6c:5c:9f:a1:aa:c3:96:63:49:
                    23:d7:56:62:7b:37:e4:aa:17:7f:6e:c3:0b:cb:53:
                    9a:e6:3f:b9:8b:9c:ee:c8:c8:df:61:40:46:30:78:
                    ee:c4:b2:a7:2e:3e:f6:09:f3:47:8d:5b:fb:7b:5b:
                    18:a4:98:ec:3e:cb:8f:b3:28:46:53:59:c6:cb:ae:
                    34:2a:5c:24:22:0d:41:6b:9c:b5:a0:d5:60:df:57:
                    9b:8a:05:4e:3d:63:d0:50:5d:1c:02:39:8b:a9:fd:
                    a4:b5:94:d7:ff:84:a6:5d:5e:99:e2:ea:17:4a:51:
                    c1:f3:71:f2:ec:34:04:e4:3a:16:c9:f1:9a:11:7e:
                    bb:bd:20:0c:10:36:e7:48:56:48:d1:b8:5e:21:c5:
                    a0:4f:a3:6d:a7:71:4d:a3:eb:45:fb:da:ad:4a:e8:
                    72:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A8:10:B4:46:EA:34:C8:0B:46:0A:A5:69:EE:DD:86:05:94:C5:16
            X509v3 Authority Key Identifier:
                keyid:93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:dc:ce:13:f5:19:9c:a8:9f:26:1c:8a:c2:d8:d4:7d:1e:5e:
         5d:d2:00:71:17:e1:48:18:db:67:c2:a3:4a:73:70:84:de:93:
         e8:5c:06:41:6c:69:a5:df:65:cc:e1:db:61:3b:d0:a7:dd:ac:
         4f:32:cb:ca:0d:54:40:ea:57:b9:8a:32:22:29:75:09:7b:74:
         fc:95:2a:cc:75:3d:ff:8f:e2:b3:77:df:9b:a9:76:07:36:f5:
         a2:29:98:cf:88:ec:5c:fd:7f:61:a0:78:49:80:3b:4a:4d:ff:
         f6:b2:6d:aa:4c:eb:fa:db:2d:eb:71:0c:94:0b:ed:8a:15:80:
         9d:f6:7f:59:96:8e:22:ed:77:ab:0b:5d:6b:c3:06:d5:ae:1b:
         3a:0b:5f:0c:ee:c2:b2:73:f4:52:8e:5c:61:5c:38:df:7c:b0:
         37:20:e1:14:fe:d5:76:96:2f:57:30:62:7e:1e:64:91:77:0f:
         bb:fe:37:eb:1d:bc:9c:ad:d1:f0:4c:1c:3b:df:a6:96:43:b0:
         a8:20:be:ba:7a:18:33:b0:6f:f3:73:56:4f:4c:6a:24:ca:20:
         75:2a:54:a4:05:f2:bf:14:cb:29:76:db:a7:8c:92:75:1c:9f:
         cc:09:79:26:22:e3:82:71:c3:54:32:b1:d3:9f:c5:78:99:f4:
         01:04:e4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:28 2026 by rpki-client