Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
File:                     _KtbpyYSYFeOSNmqwBIRqzpaIwk.mft (raw, json)
Hash identifier:          Gng9Fsdt88gPFfQo00KXmlsY9XqLEJIEIlGef3+E1wg=
Subject key identifier:   5F:19:AF:0F:86:66:2C:57:5B:66:C7:29:25:00:A4:88:B0:B2:8D:D4
Authority key identifier: FC:AB:5B:A7:26:12:60:57:8E:48:D9:AA:C0:12:11:AB:3A:5A:23:09
Certificate issuer:       /CN=A9186214/serialNumber=FCAB5BA7261260578E48D9AAC01211AB3A5A2309
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
Manifest number:          34
Signing time:             Wed 22 Jul 2026 15:38:11 +0000
Manifest this update:     Wed 22 Jul 2026 15:38:10 +0000
Manifest next update:     Wed 29 Jul 2026 15:38:10 +0000
Files and hashes:         1: _KtbpyYSYFeOSNmqwBIRqzpaIwk.crl (hash: 82UFaiueVXt38qlUbyiP3rVTjUvRD1GY/0RLF74vzcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=FCAB5BA7261260578E48D9AAC01211AB3A5A2309
        Validity
            Not Before: Jul 22 15:38:10 2026 GMT
            Not After : Jul 29 15:38:10 2026 GMT
        Subject: CN=6a60e3e3-5f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:de:22:11:7b:65:ff:b0:50:b5:69:fe:ae:
                    1d:45:45:de:5d:af:48:74:92:52:c0:09:db:50:37:
                    c8:3d:1a:61:c9:20:11:6a:6c:15:83:ba:d1:58:e2:
                    ce:f4:a7:e2:fa:4a:5d:01:0d:9b:7f:38:0c:f0:b4:
                    b7:8b:1f:d0:a6:ad:11:9c:90:69:24:6f:79:e1:04:
                    10:2e:ec:78:ab:ae:42:66:7b:c2:bf:cc:6a:66:d3:
                    d8:25:fd:bf:1e:8d:76:fd:92:05:fc:3a:ea:f3:ab:
                    56:02:92:01:92:b8:ea:21:96:15:99:0c:36:73:cd:
                    fe:5e:ce:27:18:f6:1e:e4:a2:c1:37:b2:98:39:cd:
                    ff:fd:a0:96:e8:d5:c8:64:0e:89:57:96:b5:d0:90:
                    e4:9e:41:a0:19:87:e7:4f:2b:71:97:79:52:fe:ee:
                    ea:28:eb:aa:35:05:fa:0a:1b:d4:be:d4:48:49:46:
                    13:f3:bf:86:9f:dd:84:50:44:53:23:49:e6:ef:b5:
                    51:c1:f1:88:a2:da:05:e4:10:6a:59:6c:a1:ab:30:
                    f9:73:f3:73:12:24:6f:6d:5e:d6:0c:57:1f:9d:1d:
                    38:3d:4f:dd:f0:34:44:65:b7:52:99:01:e3:2d:43:
                    ad:27:4c:fa:84:09:b6:42:58:23:a9:13:18:cb:de:
                    a9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:19:AF:0F:86:66:2C:57:5B:66:C7:29:25:00:A4:88:B0:B2:8D:D4
            X509v3 Authority Key Identifier:
                keyid:FC:AB:5B:A7:26:12:60:57:8E:48:D9:AA:C0:12:11:AB:3A:5A:23:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:53:81:25:0c:74:f8:ba:cd:d3:55:42:d9:3a:ef:a4:26:7a:
         5c:74:dc:5c:32:85:23:ae:f5:60:6a:dd:71:a3:15:1d:95:e7:
         40:ac:cf:d4:95:4b:6a:e7:9b:22:4e:2a:7d:57:ce:60:a8:6f:
         3d:e5:8f:5e:20:a6:42:00:e7:5c:5e:ee:6e:e6:79:0f:76:11:
         be:c5:5e:41:97:2c:8a:df:a8:dc:83:9c:85:8d:29:bb:15:60:
         cb:74:2d:8e:30:f1:8b:eb:ef:76:be:00:6c:2e:d1:0c:dd:91:
         c0:e7:24:98:cc:f6:a8:ec:b0:c8:48:9b:43:4c:43:ad:54:e9:
         6a:34:18:5d:60:c4:fa:de:d0:24:28:61:cd:2d:1b:f0:26:d0:
         93:f5:84:bf:5f:41:b2:6b:83:77:98:60:6d:a4:49:96:3f:cb:
         e3:cb:bf:86:4c:2b:5f:42:11:19:8a:2b:9f:dc:ec:b6:22:3c:
         d2:8a:37:4c:47:40:3a:38:eb:cf:43:51:1b:e7:f6:a5:8e:13:
         4a:5a:8c:95:9a:e9:fc:61:8d:71:97:f4:03:24:71:00:27:62:
         31:45:63:50:e3:3c:c5:79:c8:31:d5:4c:d9:13:69:30:a2:8b:
         60:db:ee:23:b3:b3:ea:07:cc:bf:0e:54:97:d2:35:4d:25:d7:
         14:00:6e:9e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NjIxNDExMC8GA1UEBRMoRkNBQjVCQTcyNjEyNjA1NzhFNDhEOUFBQzAxMjExQUIz
QTVBMjMwOTAeFw0yNjA3MjIxNTM4MTBaFw0yNjA3MjkxNTM4MTBaMBgxFjAUBgNV
BAMTDTZhNjBlM2UzLTVmMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1l94iEXtl/7BQtWn+rh1FRd5dr0h0klLACdtQN8g9GmHJIBFqbBWDutFY4s70
p+L6Sl0BDZt/OAzwtLeLH9CmrRGckGkkb3nhBBAu7HirrkJme8K/zGpm09gl/b8e
jXb9kgX8Ourzq1YCkgGSuOohlhWZDDZzzf5ezicY9h7kosE3spg5zf/9oJbo1chk
DolXlrXQkOSeQaAZh+dPK3GXeVL+7uoo66o1BfoKG9S+1EhJRhPzv4af3YRQRFMj
SebvtVHB8Yii2gXkEGpZbKGrMPlz83MSJG9tXtYMVx+dHTg9T93wNERlt1KZAeMt
Q60nTPqECbZCWCOpExjL3qlRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXxmvD4Zm
LFdbZscpJQCkiLCyjdQwHwYDVR0jBBgwFoAU/KtbpyYSYFeOSNmqwBIRqzpaIwkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MjE0LzBEOUNFNUYyNDRB
QTExRjFBQTREMDEyRTk5RUU1MjhFL19LdGJweVlTWUZlT1NObXF3QklScXpwYUl3
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG
RDFGRjIvX0t0YnB5WVNZRmVPU05tcXdCSVJxenBhSXdrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2
MjE0LzBEOUNFNUYyNDRBQTExRjFBQTREMDEyRTk5RUU1MjhFL19LdGJweVlTWUZl
T1NObXF3QklScXpwYUl3ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBNU4ElDHT4us3TVULZOu+kJnpcdNxcMoUjrvVgat1xoxUdledArM/UlUtq55si
Tip9V85gqG895Y9eIKZCAOdcXu5u5nkPdhG+xV5BlyyK36jcg5yFjSm7FWDLdC2O
MPGL6+92vgBsLtEM3ZHA5ySYzPao7LDISJtDTEOtVOlqNBhdYMT63tAkKGHNLRvw
JtCT9YS/X0Gya4N3mGBtpEmWP8vjy7+GTCtfQhEZiiuf3Oy2IjzSijdMR0A6OOvP
Q1Eb5/aljhNKWoyVmun8YY1xl/QDJHEAJ2IxRWNQ4zzFecgx1UzZE2kwootg2+4j
s7PqB8y/DlSX0jVNJdcUAG6e
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:08:06 2026 by rpki-client