Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
File:                     KJYksuALd009OQ9aCtELW8NfVtg.mft (raw, json)
Hash identifier:          JilXltP6vak/k11i8EgngbnviF3cssMDWmBCeEtZL6I=
Subject key identifier:   80:8A:23:1B:84:66:B8:7B:61:58:C6:C5:80:EB:44:F2:BC:03:02:EA
Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8
Certificate issuer:       /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
Certificate serial:       0B68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
Manifest number:          0B43
Signing time:             Wed 22 Jul 2026 19:36:58 +0000
Manifest this update:     Wed 22 Jul 2026 19:36:57 +0000
Manifest next update:     Wed 29 Jul 2026 19:36:57 +0000
Files and hashes:         1: KJYksuALd009OQ9aCtELW8NfVtg.crl (hash: xVw0v6pP0QxSrrPJ1Sy53J0uwoS0e/QIGpzeJcAEGa4=)
                          2: DCE066622C7811EC97C8D979C4F9AE02.roa (hash: vHCnER0HBPmI45K/3yOU34zHXm+KOmRlpynpCbK+T3A=)
                          3: 53C1347EB60D11F0AD4B0751C4F9AE02.roa (hash: cYz3Bt/NzG3jsypwU8wZb70N3q4qzO53RXOkiUxW3vQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl
                          rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2920 (0xb68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
        Validity
            Not Before: Jul 22 19:36:57 2026 GMT
            Not After : Jul 29 19:36:57 2026 GMT
        Subject: CN=6a611bda-8b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:95:38:39:b7:cf:bb:99:af:52:ad:ad:f1:
                    19:70:17:2e:b5:2f:61:db:d5:d0:74:17:48:27:9f:
                    aa:44:14:4f:3c:d1:82:11:5e:4a:4d:0a:e3:b6:b4:
                    c0:60:f6:67:80:6e:27:d9:52:26:e2:d1:bd:dc:41:
                    0e:1f:d1:e9:27:06:14:26:33:e1:89:c2:f4:31:45:
                    ff:d4:c5:2f:29:fc:46:d6:83:3f:b7:56:a2:d6:cb:
                    7d:92:ff:59:09:4d:d5:09:c9:9d:f3:37:f3:2c:22:
                    c5:a1:29:9c:b5:c4:a9:b8:39:f6:a3:a5:ce:b2:14:
                    e0:a1:c0:19:89:86:d4:fb:5e:26:75:59:5f:22:55:
                    0b:52:39:30:9e:a5:3e:3b:60:f4:72:54:e4:01:ea:
                    3e:7e:54:3f:07:a9:22:7e:77:05:e5:26:94:3d:7a:
                    1c:85:57:b9:10:15:4d:75:cd:78:6c:1d:b7:e3:cd:
                    2d:03:c0:22:b4:8f:e1:02:1f:2e:20:ff:1c:58:7a:
                    bd:59:41:2e:dc:c1:04:77:2a:ca:97:67:e7:5a:31:
                    c7:03:1a:a4:62:82:68:e4:84:83:fd:f5:cc:05:8b:
                    33:21:a0:c4:de:64:5a:e8:8d:1d:17:dd:0d:88:50:
                    c7:f8:86:db:38:ad:dd:ab:95:65:7e:4b:03:75:cc:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8A:23:1B:84:66:B8:7B:61:58:C6:C5:80:EB:44:F2:BC:03:02:EA
            X509v3 Authority Key Identifier:
                keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ec:92:6c:9b:79:01:b4:bd:af:46:51:ea:25:67:19:bb:0f:
         b4:5d:db:84:8e:e8:a3:88:28:03:32:f1:2d:e4:db:94:31:f8:
         6b:bb:af:11:bf:ed:e7:b6:7f:0e:12:4d:be:bb:c5:93:64:3f:
         2c:b3:ac:53:7b:52:43:c8:22:94:46:5e:af:a7:65:a5:99:e3:
         1c:f1:ee:64:b7:b4:e9:72:e1:b0:24:df:54:39:e4:54:b0:4d:
         7d:c4:c2:1a:85:b2:87:c0:d1:97:f8:f7:15:48:cf:47:87:18:
         3b:8d:32:44:45:68:6e:41:17:8f:6b:6c:62:39:2b:f9:1e:39:
         30:69:b7:d8:7e:c7:1c:15:b0:a8:73:48:81:4b:29:05:4f:62:
         ce:1e:d6:87:4c:9f:da:3a:8d:98:56:06:dd:71:2d:6a:f4:55:
         6e:2e:a6:73:f0:d2:e7:2b:a9:2a:ee:e1:b9:d8:16:f8:76:78:
         6f:08:52:36:82:e9:e7:04:a4:f1:db:59:e0:77:4a:1c:32:94:
         e1:24:ec:57:20:f6:cf:0f:ab:32:2d:f7:25:ca:9e:06:53:45:
         b4:e7:74:84:e0:e9:07:1b:1b:50:a5:0c:47:7a:f7:a8:8a:d3:
         05:d1:9d:23:51:34:c3:71:21:03:d7:9a:3d:93:40:7f:c8:3e:
         25:ee:7c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:11 2026 by rpki-client