Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
File:                     kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json)
Hash identifier:          sa+t+wbhou67daAC++Jqa/RMID8C3z5RMXkJbAc/0ME=
Subject key identifier:   70:32:FB:EC:9E:1E:39:BE:39:19:14:7C:E2:C1:D1:24:1E:F0:62:DB
Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5
Certificate issuer:       /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
Certificate serial:       0539
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
Manifest number:          0531
Signing time:             Thu 23 Jul 2026 00:19:41 +0000
Manifest this update:     Thu 23 Jul 2026 00:19:40 +0000
Manifest next update:     Thu 30 Jul 2026 00:19:40 +0000
Files and hashes:         1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: ++7HYMTcLts/mS11DtvrFmXBNf2DqlzSPINP9wEm14o=)
                          2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: wtcSk6Y7w0YC/tgX92PUFuNkS6TBVa+Kp56LZMlD0kQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl
                          rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1337 (0x539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
        Validity
            Not Before: Jul 23 00:19:40 2026 GMT
            Not After : Jul 30 00:19:40 2026 GMT
        Subject: CN=6a615e1d-b056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:26:ee:06:a3:ff:8c:da:04:50:cf:b6:df:
                    d8:a0:6b:d9:ed:20:c3:de:62:9e:8d:d6:f5:32:83:
                    b4:d8:89:6c:8e:3b:1b:9d:a8:4a:4d:42:dd:a8:10:
                    c2:eb:c5:14:ba:f2:98:96:4b:10:72:8f:c1:df:68:
                    2a:8f:07:03:87:5d:cd:83:6d:b1:49:47:45:bf:94:
                    1e:89:22:03:2e:3a:ed:41:e9:89:ab:88:04:b2:d0:
                    f4:86:82:68:10:73:d1:65:74:9b:ef:11:e3:f3:2a:
                    0e:57:e8:74:fa:1b:c9:03:96:83:82:59:e6:74:51:
                    53:fc:82:61:42:af:c1:f2:ed:bb:9b:f7:7f:09:d0:
                    12:bc:b0:ee:0f:cf:b8:51:fe:df:f1:2f:b7:1b:ac:
                    43:de:4f:85:62:74:be:c7:ee:13:f7:4e:63:eb:66:
                    2e:f0:84:2c:e5:3d:11:50:7d:b6:c4:a9:0a:83:63:
                    5d:a1:7d:a2:3b:f6:07:57:44:71:af:70:d1:01:30:
                    92:5c:0d:c0:e2:a9:dc:47:0e:8a:72:d2:69:b3:0a:
                    37:50:35:68:4d:f8:1f:6d:9a:a9:d7:05:1f:36:09:
                    03:51:b8:69:b2:7f:10:eb:43:56:fa:b1:df:61:de:
                    8e:6f:dd:cd:99:5a:43:86:74:ae:9e:96:39:d3:e2:
                    6f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:32:FB:EC:9E:1E:39:BE:39:19:14:7C:E2:C1:D1:24:1E:F0:62:DB
            X509v3 Authority Key Identifier:
                keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:40:44:a4:8f:24:d9:77:b8:b2:2a:51:c8:d7:83:18:5d:ac:
         2a:51:97:df:23:ea:68:a3:2a:cb:28:d7:7a:33:2f:15:fa:87:
         b1:53:8e:2a:aa:6a:5d:b2:fb:8c:a8:f4:7f:57:c3:2f:2f:59:
         79:44:cd:a1:16:48:a5:c2:61:ba:13:4a:3e:d8:d2:14:d9:1c:
         5f:22:d4:33:1c:37:35:d5:26:04:f3:f6:10:bb:62:31:a8:83:
         19:60:0a:5b:bf:6a:31:14:fe:2d:09:df:4e:38:5c:fb:dc:ec:
         78:26:d3:cc:e7:50:4d:f4:4a:d0:b2:cf:e3:b3:0d:06:95:bb:
         e2:3e:b4:00:4f:6f:ce:fb:12:9e:ee:fa:c6:a2:45:88:82:3f:
         ad:e6:00:ee:08:b4:e6:19:aa:2f:fc:11:8c:99:a4:91:67:e6:
         6e:b9:c7:1a:0d:8f:f8:80:8b:66:7a:30:88:70:c9:62:9d:a2:
         33:1c:b4:f1:be:4a:76:e2:d2:f7:b5:21:52:62:15:c9:48:c3:
         bf:6a:21:6c:73:f7:5e:93:21:82:9d:7f:5b:e7:07:11:d0:93:
         d6:15:18:8a:b1:59:be:9a:e5:c4:f7:d7:90:06:ee:00:ad:9c:
         41:cf:15:b5:1c:d3:fb:8e:d8:c8:72:7c:32:e8:05:4b:e3:d7:
         53:57:00:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0
MTdCMzU5RjUwHhcNMjYwNzIzMDAxOTQwWhcNMjYwNzMwMDAxOTQwWjAYMRYwFAYD
VQQDEw02YTYxNWUxZC1iMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnVMm7gaj/4zaBFDPtt/YoGvZ7SDD3mKejdb1MoO02IlsjjsbnahKTULdqBDC
68UUuvKYlksQco/B32gqjwcDh13Ng22xSUdFv5QeiSIDLjrtQemJq4gEstD0hoJo
EHPRZXSb7xHj8yoOV+h0+hvJA5aDglnmdFFT/IJhQq/B8u27m/d/CdASvLDuD8+4
Uf7f8S+3G6xD3k+FYnS+x+4T905j62Yu8IQs5T0RUH22xKkKg2NdoX2iO/YHV0Rx
r3DRATCSXA3A4qncRw6KctJpswo3UDVoTfgfbZqp1wUfNgkDUbhpsn8Q60NW+rHf
Yd6Ob93NmVpDhnSunpY50+JvvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAy++ye
Hjm+ORkUfOLB0SQe8GLbMB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy
MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX
ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTI2NS8wNTcwOUFFQTUyMUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2
UFp5SkRqbDRBZzFCZXpXZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAakBEpI8k2Xe4sipRyNeDGF2sKlGX3yPqaKMqyyjXejMvFfqHsVOOKqpqXbL7
jKj0f1fDLy9ZeUTNoRZIpcJhuhNKPtjSFNkcXyLUMxw3NdUmBPP2ELtiMaiDGWAK
W79qMRT+LQnfTjhc+9zseCbTzOdQTfRK0LLP47MNBpW74j60AE9vzvsSnu76xqJF
iII/reYA7gi05hmqL/wRjJmkkWfmbrnHGg2P+ICLZnowiHDJYp2iMxy08b5KduLS
97UhUmIVyUjDv2ohbHP3XpMhgp1/W+cHEdCT1hUYirFZvprlxPfXkAbuAK2cQc8V
tRzT+47YyHJ8MugFS+PXU1cASQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:32 2026 by rpki-client