Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
File:                     kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json)
Hash identifier:          iyVBpq2BkM2f5/T/3Wsd8iuJNShINF6NiqAjl00wQmU=
Subject key identifier:   B7:C8:5B:9C:EC:06:00:BE:B6:63:2A:0C:C8:4D:96:30:35:3A:B5:9A
Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29
Certificate issuer:       /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29
Certificate serial:       0526
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
Manifest number:          0526
Signing time:             Thu 23 Jul 2026 00:21:00 +0000
Manifest this update:     Thu 23 Jul 2026 00:21:00 +0000
Manifest next update:     Thu 30 Jul 2026 00:21:00 +0000
Files and hashes:         1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: 6YJB+t4TyPHx6cz4iIlqAjJe6PAAK4NCUayFn3nUU24=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl
                          rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149106, serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29
        Validity
            Not Before: Jul 23 00:21:00 2026 GMT
            Not After : Jul 30 00:21:00 2026 GMT
        Subject: CN=6a615e6c-9bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b1:ca:b3:ec:fb:49:b3:71:01:7b:f0:36:4a:
                    70:c0:60:06:43:10:40:7c:fb:d3:38:4c:1b:a0:43:
                    b9:51:fa:40:9f:6d:a7:42:44:ca:a4:ff:f2:10:7d:
                    18:de:3c:12:91:77:62:bf:3b:82:1b:03:5d:dc:8b:
                    70:12:c1:48:23:25:be:01:08:1c:1a:ea:fa:9d:58:
                    16:8e:46:f3:4b:77:e7:fe:39:19:b8:ed:fd:23:0d:
                    17:f6:f9:3f:de:1f:32:b3:28:65:e2:55:c4:20:fe:
                    65:36:28:3d:bc:86:32:10:dd:83:ab:8e:d7:c6:29:
                    14:12:20:35:b2:c0:24:38:f1:69:50:42:87:c2:04:
                    01:db:45:8d:18:c3:0d:a0:9b:c6:c0:58:ba:ee:ce:
                    80:f8:28:3e:82:55:1a:e0:3b:b2:07:89:97:d4:8b:
                    d5:e7:fb:82:5c:75:1c:94:7c:af:9b:09:bf:f8:cd:
                    03:47:f5:e4:73:64:23:b6:1a:69:60:24:9d:20:5c:
                    a1:9b:64:61:fa:07:1e:98:83:df:65:79:48:5e:43:
                    12:b2:f6:48:98:07:b5:be:d4:2f:56:b7:85:46:b0:
                    bc:f5:33:2c:b5:19:70:32:a8:c4:9d:2d:49:81:63:
                    10:97:b0:d3:af:b1:71:13:cb:e9:d4:5e:0e:00:69:
                    12:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C8:5B:9C:EC:06:00:BE:B6:63:2A:0C:C8:4D:96:30:35:3A:B5:9A
            X509v3 Authority Key Identifier:
                keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ea:49:ff:b9:ef:95:d4:3c:8b:4f:92:a4:c1:41:fe:de:8c:
         5b:9e:ab:dd:f6:96:f9:93:4d:8d:cb:b2:c3:93:cb:b5:43:a8:
         ce:4e:0f:2a:2c:20:04:9b:22:6f:76:31:22:ff:7c:da:27:6b:
         fc:d8:b9:6f:dd:00:8b:45:69:90:c5:c7:0a:f7:b7:5d:7e:5b:
         4c:47:18:12:30:6d:27:74:de:cf:6f:e8:47:07:61:cf:e1:52:
         d0:9a:02:d3:d4:86:b7:72:0b:48:ad:4a:14:19:6c:4e:d8:67:
         e4:06:97:27:3d:4d:5c:0f:3d:36:35:fd:fb:8b:3e:bb:4e:ec:
         ca:fb:3f:28:ee:79:e7:df:07:36:2b:b8:62:70:23:b1:7b:dd:
         e2:f9:77:1c:a9:2f:e6:b1:0f:5f:df:2e:87:4e:36:c0:a5:9a:
         c3:f0:bb:05:90:56:a4:b4:23:7e:09:81:29:6f:36:7e:38:62:
         44:13:af:94:30:93:b9:ee:ee:7e:98:c2:3e:48:a8:99:a7:b2:
         24:27:eb:90:db:1f:15:77:f1:41:4f:6c:8b:26:75:c8:cb:30:
         cd:08:3b:05:89:b2:f4:22:02:5f:33:a1:2e:0e:bf:cd:15:5b:
         5c:be:33:fe:ed:07:ad:69:4d:dd:52:6e:75:66:33:5b:b7:52:
         9b:bf:30:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:50 2026 by rpki-client