Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
File:                     klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json)
Hash identifier:          n+7ijHO6Ak1RevbiQpC/iUtWJsewL5nduUXZn4LOz/Y=
Subject key identifier:   47:11:17:2C:81:6A:B3:6F:56:B5:DD:87:06:5A:01:DF:08:5B:1D:06
Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D
Certificate issuer:       /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
Certificate serial:       0AB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
Manifest number:          0AAF
Signing time:             Wed 22 Jul 2026 19:52:01 +0000
Manifest this update:     Wed 22 Jul 2026 19:52:01 +0000
Manifest next update:     Wed 29 Jul 2026 19:52:01 +0000
Files and hashes:         1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: nyiI21Ay0sEj6a3qdSZvabf/zBLcp9cgUX1qnC3fLeI=)
                          2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: 7R0MGfZkuYK0q4GvlRzHgvPqThNHFfUTlqLnpkAuyi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl
                          rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2744 (0xab8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
        Validity
            Not Before: Jul 22 19:52:01 2026 GMT
            Not After : Jul 29 19:52:01 2026 GMT
        Subject: CN=6a611f61-825c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:6d:e6:48:fd:83:cb:7d:ed:bc:c5:8d:87:
                    ba:11:83:81:fc:ea:66:2c:4a:37:9e:6e:e5:35:6a:
                    6c:ad:72:40:17:15:0b:0f:8f:df:22:69:6b:cf:fd:
                    08:1f:48:a5:0d:45:de:c7:0a:36:95:da:c0:f4:90:
                    8b:a2:b7:80:17:ac:e0:98:45:8c:f8:1e:9d:b7:7e:
                    25:85:14:c3:e4:45:60:a7:0f:92:0e:72:1c:67:15:
                    d5:7e:f0:6a:25:61:02:99:11:ba:13:14:2e:0a:22:
                    57:91:72:5b:17:a8:2d:23:02:42:76:57:ab:70:7f:
                    14:b9:13:4b:e1:96:4c:fe:3f:07:88:d2:07:7b:54:
                    ec:b2:1f:9d:52:d5:ac:e6:d7:95:76:79:ed:14:d2:
                    45:88:e8:27:c4:8e:f0:a6:40:de:cf:26:e7:22:d4:
                    9e:25:99:96:1d:dc:93:75:31:d0:21:05:b8:94:64:
                    4d:fe:da:d4:f0:cb:d0:f5:7f:ba:57:f9:9d:c2:00:
                    86:d3:51:f3:64:00:07:7d:fd:70:89:6d:37:9c:60:
                    21:9b:27:0b:98:0e:50:2e:bb:19:c9:80:6e:e7:6b:
                    8e:35:c8:4f:2f:d2:43:6d:ad:04:99:a4:55:65:e4:
                    f3:df:e2:f0:8c:fd:72:ee:62:5f:47:28:cd:68:fc:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:11:17:2C:81:6A:B3:6F:56:B5:DD:87:06:5A:01:DF:08:5B:1D:06
            X509v3 Authority Key Identifier:
                keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:20:99:b1:90:e5:47:73:d4:99:37:d2:ed:b2:b3:2a:ab:0b:
         04:cf:d4:96:5f:39:db:d2:be:fa:1a:be:c7:bc:c9:2f:39:cf:
         14:b9:f7:ee:96:94:2d:8c:62:05:68:cc:76:d7:b1:81:ea:a2:
         ff:b0:b0:28:35:d5:5c:6a:1f:99:62:85:c2:8d:c2:4f:21:2f:
         1b:28:fa:a0:2f:5b:71:e7:91:af:4b:9b:f3:48:c2:51:fe:8b:
         37:7e:e1:56:61:b8:ec:64:e5:4f:75:74:26:aa:8e:85:40:3b:
         5d:2e:f7:27:b0:b8:27:43:72:fb:59:74:de:4d:8e:71:ec:8c:
         50:d1:1c:e6:2e:89:8b:e5:b4:6c:54:c1:20:df:33:77:df:ad:
         af:a0:b1:cf:03:51:e6:3e:b3:b7:ac:d4:05:ee:3b:93:60:b5:
         51:da:3e:f7:13:b0:a7:53:42:c8:b2:89:c4:2a:05:48:3c:87:
         d1:a6:f0:31:af:d3:bb:0f:92:95:40:4f:74:f4:b0:e4:64:1a:
         c5:45:56:40:fe:58:08:6f:f4:a5:86:5b:96:cd:4d:ac:43:00:
         0d:e1:ea:31:f7:fc:47:fa:5c:5c:f0:cf:2b:c1:a4:2d:de:c1:
         93:16:d0:ac:3d:2e:0b:b3:ab:cd:15:40:95:5b:af:21:f0:e3:
         a8:34:4e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:57:58 2026 by rpki-client