Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
File:                     bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft (raw, json)
Hash identifier:          RTgGtzo+QqcPtbPd7KBFmhm48eHJGllz3/V7ecnrtpc=
Subject key identifier:   2B:99:E2:1E:61:19:F9:BA:F4:CF:2D:66:36:C6:11:51:63:64:40:03
Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Certificate issuer:       /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Certificate serial:       0761
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
Manifest number:          0758
Signing time:             Wed 22 Jul 2026 22:23:13 +0000
Manifest this update:     Wed 22 Jul 2026 22:23:13 +0000
Manifest next update:     Wed 29 Jul 2026 22:23:13 +0000
Files and hashes:         1: bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl (hash: xlD99FnkjGwCoXUYKq8lOaMBRGv2vehfUjUHX/WtCyY=)
                          2: 1C93BF747CD011EB9F876E78C4F9AE02.roa (hash: Pjx2fk1ERBs14VqIaD9LJOxFbqs8w+2aRHPGV9fMHnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
                          rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1889 (0x761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
        Validity
            Not Before: Jul 22 22:23:13 2026 GMT
            Not After : Jul 29 22:23:13 2026 GMT
        Subject: CN=6a6142d1-649d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:60:f5:d7:16:ca:04:19:16:ad:ec:d4:63:
                    e0:00:ab:41:ee:ef:ce:84:78:78:06:97:f9:9d:22:
                    22:b6:ae:c2:dc:86:d3:a2:85:f6:98:58:8f:a4:8a:
                    b4:70:18:d8:af:29:7f:d0:8e:ba:4d:85:8e:8d:e7:
                    af:7e:92:bc:aa:24:e7:fb:ab:67:e3:15:6c:29:ff:
                    3c:00:5f:4a:ed:63:22:5c:61:0c:5b:91:fe:8e:96:
                    7c:f9:3a:05:d8:af:18:b9:99:ef:5b:58:e6:9c:96:
                    32:b9:19:04:6c:61:3c:82:98:a3:33:b9:54:34:67:
                    11:02:3e:ad:ea:a0:a5:d5:cb:84:8c:8a:cd:e5:ed:
                    8f:42:2b:d0:60:88:93:40:2d:db:6e:5e:3e:23:b4:
                    9a:be:68:11:05:a4:23:88:a2:82:06:33:44:28:7a:
                    ac:95:77:01:ef:91:28:4b:8e:54:70:ff:41:8c:24:
                    bb:de:8f:0b:f5:8d:fc:11:36:05:d5:dc:94:11:40:
                    85:6b:8a:bb:d5:de:6c:a7:fa:6f:08:97:fb:20:59:
                    45:0e:10:9b:be:0c:c0:b7:7e:be:b1:aa:59:1c:b7:
                    14:11:38:58:f5:26:62:e6:50:ba:c2:0e:40:16:0d:
                    4f:b1:db:ef:f7:b8:d4:c8:a2:9e:61:6e:e0:33:0f:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:99:E2:1E:61:19:F9:BA:F4:CF:2D:66:36:C6:11:51:63:64:40:03
            X509v3 Authority Key Identifier:
                keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:91:28:76:89:59:26:86:42:a8:97:45:4d:64:8c:c8:b1:ef:
         75:7d:7c:3e:d1:51:d4:00:19:64:9e:d7:69:f1:d9:64:17:b7:
         e3:43:92:63:53:39:f8:1c:6a:aa:8a:f4:e5:b4:58:4a:8f:79:
         0e:19:39:fc:f9:a6:34:2e:13:4d:ea:7e:a8:b2:c0:8d:d1:7c:
         f5:c3:44:da:eb:a1:c3:91:35:03:60:72:0c:8c:63:a9:f4:1e:
         94:17:d0:30:e0:92:a2:d9:47:c0:2a:bf:07:27:58:ba:f9:e0:
         4a:24:ec:ee:44:1c:0e:cf:be:b7:e6:0a:45:47:4b:35:80:f2:
         f6:cf:68:54:44:5b:e3:4d:88:77:f0:ff:22:7d:ea:ee:1a:96:
         c0:fc:2a:f7:f2:a1:b7:22:18:62:11:7b:ec:5c:af:9f:49:33:
         80:11:7c:13:72:b5:98:d0:4a:bc:dd:25:fc:32:34:04:f2:d6:
         fc:03:6a:c3:79:1c:45:bd:09:02:22:04:f3:7b:58:1c:9f:7c:
         6e:10:2b:14:9d:0e:3a:7b:f3:41:4f:c2:2d:78:1a:f7:5d:1e:
         3d:00:6a:f3:d7:50:1b:6f:88:95:80:33:78:ff:9c:e8:58:65:
         10:1c:fc:8b:02:ab:92:c2:a3:ae:fa:1e:37:28:bc:05:f5:01:
         46:19:f2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:08:58 2026 by rpki-client