Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
File:                     kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json)
Hash identifier:          W2lsbr6ZauLBPhOFxeQ/1nRIuWane6wB5i31kqValII=
Subject key identifier:   06:67:F4:13:2F:8A:C0:0F:D6:40:F8:1C:37:EA:B2:39:2D:18:82:05
Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
Certificate issuer:       /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Certificate serial:       01FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
Manifest number:          01ED
Signing time:             Thu 23 Jul 2026 04:48:47 +0000
Manifest this update:     Thu 23 Jul 2026 04:48:47 +0000
Manifest next update:     Thu 30 Jul 2026 04:48:47 +0000
Files and hashes:         1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: kJbWtxc2yE5xljUy5ncWbmFi/UY2GmILx25nFFuqMEg=)
                          2: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: X+dqp+Ah396uKCPwR9bMS10gj/YjMNXUMTYy7soM8Zc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
                          rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
        Validity
            Not Before: Jul 23 04:48:47 2026 GMT
            Not After : Jul 30 04:48:47 2026 GMT
        Subject: CN=6a619d2f-929f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:f9:e7:e3:0d:57:c3:02:6f:a3:1b:9d:1c:
                    1c:a2:96:fa:b2:93:10:08:e7:92:b7:68:15:b1:3f:
                    be:1b:3a:3f:2e:4d:60:d9:0d:6f:43:7c:67:0b:7e:
                    aa:f7:cf:64:a4:57:32:e7:b7:d9:d3:f5:82:83:60:
                    0c:a7:bb:ca:87:fc:37:17:f9:85:ad:a3:6c:f9:d8:
                    5d:0c:a1:37:42:7c:8a:65:7a:6a:0e:36:76:99:e4:
                    39:58:c2:29:7e:24:3b:61:96:e5:77:09:0a:3c:b4:
                    e1:08:bd:12:6f:49:04:a2:8a:8b:5b:70:5f:1b:7d:
                    79:93:2d:43:37:34:d3:4a:f6:00:80:b5:ad:b4:29:
                    3e:05:c5:b0:2b:97:40:85:f0:53:de:9f:07:c1:47:
                    c8:45:ef:3c:f6:7d:81:5e:87:56:f4:23:a9:b3:d0:
                    e9:2d:1d:6d:2b:42:8e:2f:66:a3:d5:96:36:fb:08:
                    6d:61:cd:c7:be:8f:53:d8:da:01:56:a1:ed:54:71:
                    16:14:a5:68:9f:c5:c3:08:26:42:e2:7d:23:33:ad:
                    86:7b:af:6e:71:71:94:99:18:d8:7e:3e:89:c0:9a:
                    d4:6d:e9:76:33:28:cc:57:f4:f0:02:0d:4a:36:75:
                    82:f8:c4:5a:5f:81:95:f6:b0:8b:8d:b7:f4:c6:d7:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:67:F4:13:2F:8A:C0:0F:D6:40:F8:1C:37:EA:B2:39:2D:18:82:05
            X509v3 Authority Key Identifier:
                keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:90:5f:9f:2d:14:d4:41:12:54:a8:29:98:26:47:75:d5:9d:
         be:df:34:70:08:b9:9b:5e:14:b9:31:e9:e9:74:99:ca:e2:08:
         3d:50:28:ff:b0:a5:27:c5:65:70:83:af:f3:71:44:c1:6d:9a:
         06:6e:1f:75:6b:98:bf:81:67:ce:2b:b6:90:98:54:f3:cd:2b:
         c3:e5:f5:59:d9:9c:bd:10:fd:ff:a9:57:77:e7:2c:b0:34:86:
         57:64:19:fd:b5:0f:88:b5:ee:1c:b1:8c:a1:93:50:ef:8e:08:
         25:73:71:2f:e7:05:ac:ae:5a:f0:78:3b:e3:79:09:c2:75:7e:
         81:83:65:05:ee:af:30:c6:16:d4:ad:f7:fe:21:60:1b:a3:cb:
         31:e4:89:fe:af:b0:d5:25:0d:1f:a4:97:35:c8:da:aa:b1:0e:
         d4:5e:15:fb:f5:07:21:8c:ed:ac:94:44:06:0b:10:02:67:81:
         49:68:3a:e2:d4:97:7f:c0:2f:94:58:26:73:64:dc:e2:27:25:
         19:bf:de:5a:ee:25:10:d6:32:8e:78:55:de:1d:3d:79:99:5a:
         49:50:7c:64:11:96:ee:c5:34:30:14:38:04:fe:2a:ca:df:fe:
         3b:8c:b2:40:af:ad:ec:3b:e1:d1:4a:f3:2b:fa:46:45:b0:20:
         82:26:91:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMwMDIxMTAvBgNVBAUTKDkyNEEyMDE3NTY0QURBRkIyMjM2QTIwRkJGNzNBREEx
Qjk2QkZGMzMwHhcNMjYwNzIzMDQ0ODQ3WhcNMjYwNzMwMDQ0ODQ3WjAYMRYwFAYD
VQQDEw02YTYxOWQyZi05MjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvaf55+MNV8MCb6MbnRwcopb6spMQCOeSt2gVsT++Gzo/Lk1g2Q1vQ3xnC36q
989kpFcy57fZ0/WCg2AMp7vKh/w3F/mFraNs+dhdDKE3QnyKZXpqDjZ2meQ5WMIp
fiQ7YZbldwkKPLThCL0Sb0kEooqLW3BfG315ky1DNzTTSvYAgLWttCk+BcWwK5dA
hfBT3p8HwUfIRe889n2BXodW9COps9DpLR1tK0KOL2aj1ZY2+whtYc3Hvo9T2NoB
VqHtVHEWFKVon8XDCCZC4n0jM62Ge69ucXGUmRjYfj6JwJrUbel2MyjMV/TwAg1K
NnWC+MRaX4GV9rCLjbf0xteGwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZn9BMv
isAP1kD4HDfqsjktGIIFMB8GA1UdIwQYMBaAFJJKIBdWStr7IjaiD79zraG5a/8z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DMDFEMEMwQ0E5
MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2c2lOcUlQdjNPdG9ibHJf
ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2trb2dGMVpLMnZzaU5xSVB2M090b2Jscl96TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzAwMi9DMDFEMEMwQ0E5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2
c2lOcUlQdjNPdG9ibHJfek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG5Bfny0U1EESVKgpmCZHddWdvt80cAi5m14UuTHp6XSZyuIIPVAo/7ClJ8Vl
cIOv83FEwW2aBm4fdWuYv4Fnziu2kJhU880rw+X1WdmcvRD9/6lXd+cssDSGV2QZ
/bUPiLXuHLGMoZNQ744IJXNxL+cFrK5a8Hg743kJwnV+gYNlBe6vMMYW1K33/iFg
G6PLMeSJ/q+w1SUNH6SXNcjaqrEO1F4V+/UHIYztrJREBgsQAmeBSWg64tSXf8Av
lFgmc2Tc4iclGb/eWu4lENYyjnhV3h09eZlaSVB8ZBGW7sU0MBQ4BP4qyt/+O4yy
QK+t7Dvh0UrzK/pGRbAggiaRNw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:51 2026 by rpki-client