Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft
File:                     CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json)
Hash identifier:          EZI/D7Igtg6/1QW35E3PUUMO3guqLFgX5FJJq5lZBOE=
Subject key identifier:   0A:D5:D4:03:FE:08:68:FA:D4:3E:4F:99:86:5C:88:02:73:3A:33:33
Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69
Certificate issuer:       /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft
Manifest number:          A7
Signing time:             Thu 23 Jul 2026 09:03:33 +0000
Manifest this update:     Thu 23 Jul 2026 09:03:32 +0000
Manifest next update:     Thu 30 Jul 2026 09:03:32 +0000
Files and hashes:         1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: 4po4KEe458jZme7wWh1U3MVh2k9P+jDfvyPj9HH6vKs=)
                          2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: LJuHTr9dIvZYkAmMksiQJJP2qElg6VwwLMqlMwzQK3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl
                          rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369
        Validity
            Not Before: Jul 23 09:03:32 2026 GMT
            Not After : Jul 30 09:03:32 2026 GMT
        Subject: CN=6a61d8e5-da9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fd:6b:4d:4b:b6:48:f4:86:97:5f:59:31:c0:
                    da:ba:0d:7b:1d:e1:70:fe:0e:6e:eb:d6:15:89:d1:
                    99:72:39:1f:de:9b:4e:e7:62:7a:fc:fb:9f:6d:46:
                    a1:37:eb:65:0c:a8:09:46:f1:2a:e6:ad:87:50:3c:
                    6e:e0:01:01:ad:76:01:38:59:ed:b2:b9:d1:13:1a:
                    a8:da:6b:99:57:ba:57:28:d9:d4:cd:bb:a7:22:b3:
                    3b:1b:f1:15:14:4e:94:05:02:c3:08:d3:ee:e2:ae:
                    c2:dc:98:1b:20:e1:8a:be:77:24:41:25:58:5c:8a:
                    1e:14:a9:eb:ce:76:f6:0b:c0:fb:be:a3:05:b3:ec:
                    a5:50:43:e4:8e:37:8c:77:eb:0f:6a:e7:46:ef:d6:
                    25:44:62:6a:a1:4a:43:4b:fe:9e:f4:89:ec:df:9c:
                    86:e9:fb:64:ac:45:76:cd:35:ec:1c:a0:4c:f1:26:
                    c0:fc:0c:e0:d6:29:3c:12:37:2d:95:84:b4:ab:52:
                    b1:02:e2:91:9e:24:5a:c7:b8:f2:c2:18:de:6b:7e:
                    6d:f5:da:ff:91:c9:8e:4f:76:dd:4d:72:47:13:50:
                    93:49:f7:72:8f:38:94:62:a9:7a:2e:08:79:8e:a4:
                    27:51:fb:57:57:23:d9:35:7a:00:cb:25:d1:66:8a:
                    0a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D5:D4:03:FE:08:68:FA:D4:3E:4F:99:86:5C:88:02:73:3A:33:33
            X509v3 Authority Key Identifier:
                keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ef:c3:e6:47:52:4f:7c:06:92:ae:a2:e4:1b:da:5c:17:67:
         b7:0d:17:7d:c1:d5:22:a3:58:62:a1:39:da:90:08:6c:e2:b7:
         61:12:66:19:4c:e6:4f:47:79:d3:bb:67:03:76:42:b7:cd:b4:
         f0:f7:1b:71:d0:5d:c6:cc:c7:64:23:94:1b:7d:bf:35:7f:fe:
         89:94:b4:eb:12:65:b2:9b:9e:a6:d8:3b:67:8c:ce:fa:a1:80:
         35:89:51:4a:a5:55:99:89:7c:4e:35:a2:d1:41:82:ae:99:a8:
         2b:d3:95:63:a7:6f:de:9b:1b:0f:51:12:4b:dc:09:76:83:d3:
         88:f3:1c:fb:dd:ae:c2:42:9d:7e:ce:dd:1a:74:c2:84:01:56:
         51:3b:cf:e6:ff:71:de:f3:83:c7:88:71:04:46:af:79:4e:07:
         cd:c5:d1:35:6a:ac:fd:8c:c9:bc:b6:a9:09:08:6a:5a:0d:71:
         72:29:5b:18:6b:85:3c:f2:dc:16:58:f4:ba:51:7c:9a:b0:6c:
         e6:58:aa:ee:fb:21:5f:6a:af:d0:ad:85:f1:c5:86:21:06:56:
         8c:4f:fb:fa:c0:0e:c9:61:9e:e1:6f:d3:d6:8b:34:74:b1:53:
         ef:60:dd:90:9b:bc:42:74:29:0a:95:88:0c:8f:44:0a:7b:53:
         04:37:72:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:57 2026 by rpki-client