Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft
File:                     kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft (raw, json)
Hash identifier:          amgjHJIPuYA3rxxReHb82LOB3v4jB++N/JyJnt6WPfE=
Subject key identifier:   DC:A8:DF:6E:79:26:DC:99:75:7B:B1:3F:2D:3C:44:1E:7E:92:06:31
Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36
Certificate issuer:       /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft
Manifest number:          0131
Signing time:             Thu 23 Jul 2026 07:17:20 +0000
Manifest this update:     Thu 23 Jul 2026 07:17:20 +0000
Manifest next update:     Thu 30 Jul 2026 07:17:20 +0000
Files and hashes:         1: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl (hash: e87YPaqisibNWxvPSCcKI3+zoU2a/q4kd/qeuh4DuSA=)
                          2: 9CEF2622B76E11EF8FCC9767C4F9AE02.roa (hash: BT5lGoepooMPklXWzsmxnmANaCteYyqvqzOaxtbVyhM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl
                          rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836
        Validity
            Not Before: Jul 23 07:17:20 2026 GMT
            Not After : Jul 30 07:17:20 2026 GMT
        Subject: CN=6a61c000-8b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ed:4c:e0:fc:e0:e9:8e:fc:94:04:2a:18:6a:
                    0e:e2:92:be:80:ae:eb:ad:bc:96:4e:8c:46:81:67:
                    85:a2:7e:08:4f:3c:cf:38:4e:71:82:d1:90:5f:62:
                    c1:04:8a:db:ed:11:82:5c:c0:f6:80:26:69:13:8b:
                    2a:d4:b2:7d:53:de:9a:27:6b:b7:7a:77:94:44:94:
                    e7:ef:1e:ca:d1:e4:46:97:9e:40:fc:5e:a1:d6:3b:
                    dc:a1:fd:de:0c:de:72:7c:56:3b:4b:e0:62:ca:e2:
                    76:de:83:f1:55:53:32:8b:28:a4:ea:b4:5e:56:72:
                    08:03:3b:05:da:d1:43:60:92:64:24:66:00:b3:c9:
                    29:9a:f5:e1:14:65:78:a7:d2:84:af:4e:10:0c:ba:
                    41:9d:73:aa:c2:1d:bf:f3:61:cc:bb:7b:a7:89:7e:
                    38:f8:dd:6f:b0:84:87:d6:9a:cb:f8:db:16:d7:92:
                    07:bb:4b:b7:7f:b3:d8:49:ca:fb:fd:00:7a:ce:0e:
                    c3:e0:08:7f:2b:78:f6:29:d2:7f:cf:36:68:ad:d7:
                    9e:85:ac:39:16:6b:70:3d:0c:55:36:b5:88:dd:63:
                    8e:03:4b:8b:d5:c6:ee:18:fe:b1:62:3f:87:b5:13:
                    00:d5:ef:c7:07:8b:64:9b:f8:e9:37:b6:aa:bc:ea:
                    bb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A8:DF:6E:79:26:DC:99:75:7B:B1:3F:2D:3C:44:1E:7E:92:06:31
            X509v3 Authority Key Identifier:
                keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:23:c2:19:aa:f0:bd:62:ad:3b:91:09:7a:38:6b:65:12:f1:
         f3:67:d3:e6:4f:41:67:6d:77:cb:d1:53:93:22:2c:fd:9f:00:
         cf:c1:62:08:2f:54:a1:69:02:a6:df:ee:d7:7e:13:db:64:cf:
         23:8a:b7:d8:31:5e:fc:e6:c9:3e:c4:62:b3:fc:b1:0f:55:c1:
         86:81:07:3b:15:fd:5c:9c:a3:f4:e2:8c:67:42:c7:20:df:a0:
         e8:ce:d4:11:2b:c9:b8:9e:d6:ab:91:f5:fb:a4:ef:16:80:39:
         b3:61:23:1e:dd:35:99:92:fe:be:be:7b:d2:ad:eb:85:db:5d:
         69:3f:b9:21:d7:2d:f0:f3:1b:4f:5b:1c:93:7b:af:76:7c:ff:
         96:1d:94:33:4f:15:f5:bc:2b:eb:67:8e:d4:ec:58:59:f1:70:
         8a:1a:6e:fa:25:7c:a0:2c:2f:07:f9:6c:eb:b7:99:ad:f3:f2:
         21:40:a2:b4:9d:c1:c7:f1:7c:41:1a:c2:82:e3:62:a8:cb:05:
         36:53:4b:ff:18:5b:fa:59:d2:95:81:1b:aa:27:16:f3:24:06:
         1c:54:2c:b4:f1:5f:1a:1e:be:b2:a9:96:63:24:ca:23:2f:2b:
         82:22:a0:2a:23:2c:4c:8a:87:d0:fd:e6:c3:37:90:78:17:5b:
         21:62:e5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:28 2026 by rpki-client