Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft
File:                     KrJDLDrVEo7XPpnEYNBhH69NIg4.mft (raw, json)
Hash identifier:          44iDpp78+qTzhr8rZQkYIUPXCcoaLnr91ibN+6IE8qQ=
Subject key identifier:   78:7D:31:96:FB:96:62:EF:43:D4:AF:29:90:64:B6:6B:AF:27:17:25
Authority key identifier: 2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
Certificate issuer:       /CN=A9153850/serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft
Manifest number:          010C
Signing time:             Thu 23 Jul 2026 07:56:15 +0000
Manifest this update:     Thu 23 Jul 2026 07:56:14 +0000
Manifest next update:     Thu 30 Jul 2026 07:56:14 +0000
Files and hashes:         1: KrJDLDrVEo7XPpnEYNBhH69NIg4.crl (hash: 7veCFKdPe0aInC5XntchuG2ueWd+Hfx9R41rUIp1Dc4=)
                          2: D6246110AA6F11F0AD515C63C4F9AE02.roa (hash: kgI9j69ZuRKnS83zYB2SCGnkfw+45wKRpdDjx0NhraU=)
                          3: FC7F121AAA6F11F0BCFEBD63C4F9AE02.roa (hash: MV4I569w9zPiHP/yIqubx9xyWgXjsBIdhw/uq6cgQpU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl
                          rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153850, serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
        Validity
            Not Before: Jul 23 07:56:14 2026 GMT
            Not After : Jul 30 07:56:14 2026 GMT
        Subject: CN=6a61c91f-4f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:c8:c5:f4:85:9a:c9:3a:f0:94:4e:a8:a9:
                    ed:11:ac:b0:b5:d3:ea:34:11:77:c3:e9:cf:bd:0b:
                    d4:2a:b6:0e:fa:70:4b:2a:c8:23:56:b7:01:17:c8:
                    cc:0b:6c:b6:67:27:19:4e:13:2f:d3:c4:18:f8:7a:
                    b0:56:5c:9c:39:c9:dd:bd:47:5f:90:04:fe:04:a0:
                    e8:77:52:bb:29:f5:c6:c5:0e:0a:b7:e5:24:85:76:
                    9b:44:89:e0:51:c6:b8:66:60:18:13:76:0b:58:51:
                    22:4d:80:6e:c3:be:d7:89:c3:cb:d2:63:3c:dd:e9:
                    27:44:fd:e0:ea:1a:95:b0:58:93:05:ad:a6:e3:41:
                    89:6a:d0:1c:1b:19:8b:4b:82:3d:bb:8f:03:97:ce:
                    9e:cf:fb:30:5e:60:5c:7b:1e:a4:d1:c8:9f:27:04:
                    aa:55:30:b6:26:ae:c3:03:40:e9:5f:a0:b2:67:b6:
                    6c:a3:d9:f8:a7:e9:d9:56:0c:80:13:03:2c:43:85:
                    28:0c:c7:74:4d:6e:91:8f:b4:7e:db:a1:84:9f:0a:
                    68:80:90:55:52:9a:75:64:43:30:be:1d:b5:f4:25:
                    e3:98:65:d2:fb:c9:b3:93:68:e8:0e:f0:75:f3:fe:
                    d8:d4:f9:b5:b1:a9:dc:0c:16:3c:c5:67:e9:58:02:
                    8c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7D:31:96:FB:96:62:EF:43:D4:AF:29:90:64:B6:6B:AF:27:17:25
            X509v3 Authority Key Identifier:
                keyid:2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a2:2c:ed:16:24:4d:8e:c8:83:f4:22:17:25:e3:22:0d:88:
         52:80:03:7e:ad:0f:32:b1:0f:5a:4e:35:66:5f:98:b6:7d:78:
         51:cc:a7:eb:1c:9f:52:43:2a:15:40:37:fa:6b:b2:f8:1b:40:
         f2:36:4a:42:4d:6f:dd:49:a5:01:e5:4a:35:f4:e1:e7:9a:8e:
         5d:86:e6:f2:46:38:ec:b9:53:d8:b1:9a:00:43:48:36:de:a1:
         c8:cc:7d:d7:ba:08:1c:97:ce:6f:b4:b9:cd:cd:6a:fe:c6:a2:
         b7:1c:a0:fb:10:d5:56:c5:4e:f1:f8:dd:57:74:f2:5e:a9:cd:
         fe:d5:6d:49:e5:6d:39:54:26:f1:74:fc:96:3b:47:04:77:b7:
         4d:f5:ba:d0:87:4d:a7:56:ee:a9:cd:3b:04:2e:e5:57:33:09:
         20:30:4b:b2:43:a9:07:a4:c2:e1:f9:1d:e7:36:3b:8d:88:2a:
         99:68:ed:ad:47:83:2c:a5:5c:51:62:41:90:93:eb:88:a3:25:
         89:80:d2:5e:35:1c:42:2d:39:f6:e6:82:18:44:63:a1:63:af:
         1e:32:1e:d1:63:19:8d:cc:6b:dc:f9:dc:99:79:57:bb:8f:17:
         86:56:e7:0a:5c:cd:d8:88:c0:06:f5:69:d5:a4:80:23:c5:af:
         89:ca:a9:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM4NTAxMTAvBgNVBAUTKDJBQjI0MzJDM0FENTEyOEVENzNFOTlDNDYwRDA2MTFG
QUY0RDIyMEUwHhcNMjYwNzIzMDc1NjE0WhcNMjYwNzMwMDc1NjE0WjAYMRYwFAYD
VQQDEw02YTYxYzkxZi00ZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm6bIxfSFmsk68JROqKntEaywtdPqNBF3w+nPvQvUKrYO+nBLKsgjVrcBF8jM
C2y2ZycZThMv08QY+HqwVlycOcndvUdfkAT+BKDod1K7KfXGxQ4Kt+UkhXabRIng
Uca4ZmAYE3YLWFEiTYBuw77XicPL0mM83eknRP3g6hqVsFiTBa2m40GJatAcGxmL
S4I9u48Dl86ez/swXmBcex6k0cifJwSqVTC2Jq7DA0DpX6CyZ7Zso9n4p+nZVgyA
EwMsQ4UoDMd0TW6Rj7R+26GEnwpogJBVUpp1ZEMwvh219CXjmGXS+8mzk2joDvB1
8/7Y1Pm1sancDBY8xWfpWAKM3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHh9MZb7
lmLvQ9SvKZBktmuvJxclMB8GA1UdIwQYMBaAFCqyQyw61RKO1z6ZxGDQYR+vTSIO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mzg1MC83QjNCMzdENDAx
ODYxMUYwQjA1QjRDNTlDNEY5QUUwMi9LckpETERyVkVvN1hQcG5FWU5CaEg2OU5J
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tySkRMRHJWRW83WFBwbkVZTkJoSDY5TklnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Mzg1MC83QjNCMzdENDAxODYxMUYwQjA1QjRDNTlDNEY5QUUwMi9LckpETERyVkVv
N1hQcG5FWU5CaEg2OU5JZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABqIs7RYkTY7Ig/QiFyXjIg2IUoADfq0PMrEPWk41Zl+Ytn14Ucyn6xyfUkMq
FUA3+muy+BtA8jZKQk1v3UmlAeVKNfTh55qOXYbm8kY47LlT2LGaAENINt6hyMx9
17oIHJfOb7S5zc1q/saitxyg+xDVVsVO8fjdV3TyXqnN/tVtSeVtOVQm8XT8ljtH
BHe3TfW60IdNp1buqc07BC7lVzMJIDBLskOpB6TC4fkd5zY7jYgqmWjtrUeDLKVc
UWJBkJPriKMliYDSXjUcQi059uaCGERjoWOvHjIe0WMZjcxr3PncmXlXu48Xhlbn
ClzN2IjABvVp1aSAI8WvicqpbA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:27 2026 by rpki-client