Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
File:                     kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft (raw, json)
Hash identifier:          /x2X2I5aXp0ygMWs43V6WP4uK5UOBTf4NIUHwBMDUBc=
Subject key identifier:   69:D9:2B:8C:01:FE:CA:D5:A9:20:17:6B:7A:B9:3D:D3:36:33:C3:51
Authority key identifier: 90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25
Certificate issuer:       /CN=A9157378/serialNumber=90B9BABD742B275743FB715E135975638E9C2F25
Certificate serial:       01F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
Manifest number:          01F0
Signing time:             Thu 23 Jul 2026 04:41:45 +0000
Manifest this update:     Thu 23 Jul 2026 04:41:45 +0000
Manifest next update:     Thu 30 Jul 2026 04:41:45 +0000
Files and hashes:         1: kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl (hash: d84p9gX7wezgj8lf/RcRn5q7FHJx0k8HgmuG9MUh+lA=)
                          2: 38F9C792948F11EEAE636E0FC4F9AE02.roa (hash: IsR02EcFYSAXSpQzNxCA79lgP4S8FydbSljAspj7zII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl
                          rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157378, serialNumber=90B9BABD742B275743FB715E135975638E9C2F25
        Validity
            Not Before: Jul 23 04:41:45 2026 GMT
            Not After : Jul 30 04:41:45 2026 GMT
        Subject: CN=6a619b89-ed21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c2:74:c0:83:54:74:f2:1c:a5:98:f2:9e:a9:
                    ee:2a:88:1d:a7:67:8e:45:bd:71:98:42:f1:3f:32:
                    00:c9:04:01:9b:51:a4:39:17:1c:75:7a:8c:f6:c0:
                    7c:d6:89:37:ef:0b:83:ac:2b:39:83:e5:a8:21:8e:
                    61:38:34:7c:f3:25:47:f5:86:ea:74:24:14:41:5f:
                    55:85:f8:35:9a:89:47:d4:41:7e:1f:94:2b:fa:7a:
                    87:73:65:a0:03:97:36:b3:61:43:1e:ef:f7:a8:8f:
                    ee:30:eb:00:d5:d4:12:98:55:09:b3:a3:e1:43:e8:
                    bf:26:d1:a0:98:77:06:c0:a3:54:28:8b:58:49:d0:
                    39:b7:97:0f:5a:8f:d0:0d:49:1f:1a:6b:ef:96:f5:
                    40:7f:d6:46:19:63:73:1e:e4:98:4a:26:f0:16:68:
                    f6:db:0d:db:57:da:85:d5:09:b4:1c:c9:2d:3e:f6:
                    8a:46:60:df:4d:93:65:5d:18:f4:c4:6c:b9:da:98:
                    5d:4a:95:22:d0:5c:74:aa:59:ad:86:6e:b3:e9:64:
                    73:03:b5:94:83:5a:61:23:bb:a5:4e:9b:d8:b7:88:
                    3d:f6:9c:63:3a:ae:7c:79:ab:d5:56:1e:54:11:c0:
                    c3:fd:36:fa:9f:4e:c6:2c:4d:d7:eb:22:13:81:bb:
                    d5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D9:2B:8C:01:FE:CA:D5:A9:20:17:6B:7A:B9:3D:D3:36:33:C3:51
            X509v3 Authority Key Identifier:
                keyid:90:B9:BA:BD:74:2B:27:57:43:FB:71:5E:13:59:75:63:8E:9C:2F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157378/0A88C7F293E311EE93C8E582C4F9AE02/kLm6vXQrJ1dD-3FeE1l1Y46cLyU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:bf:8e:da:e0:03:a0:94:2d:8e:90:dd:8d:4a:c8:76:19:00:
         49:35:18:1d:a4:9b:68:fa:fc:fb:8d:0f:ec:01:97:29:d6:88:
         c1:4b:e5:cb:de:db:d0:2a:e8:6b:29:bb:06:cc:50:81:95:2b:
         f6:8c:7c:d0:35:76:a8:b7:b6:ce:4a:b6:cb:7f:66:98:3e:a4:
         bb:35:18:57:45:3b:5d:c5:54:91:b8:69:4c:6f:e0:42:7c:39:
         79:63:7e:38:90:6c:dc:7f:50:cf:56:45:04:06:b3:b4:1b:c5:
         55:23:f2:89:4c:2a:b2:4f:39:99:9f:f8:82:3e:b0:d0:eb:de:
         70:a7:d5:29:28:d1:39:40:1b:3c:ee:45:b9:a4:fd:6b:01:b2:
         5f:f3:3c:cc:74:1c:0d:46:12:49:4c:c1:be:bb:dc:4c:dc:e3:
         ed:f6:59:13:18:1b:cb:01:3d:30:30:c1:64:ad:3e:a1:3c:c0:
         ff:58:59:99:b2:5d:b0:ae:5c:af:2d:ad:b9:73:dd:ca:53:b0:
         c0:65:08:2d:b2:3d:b1:83:0c:b1:f3:c2:fd:d6:5a:8e:ea:b7:
         0c:a8:cf:2c:5b:23:03:71:e9:06:0e:4f:6e:89:ba:db:37:77:
         6b:b7:24:67:5a:e7:2d:04:6d:fe:b6:42:3f:d9:43:e8:5a:50:
         78:61:49:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:17:08 2026 by rpki-client