Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
File:                     kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json)
Hash identifier:          45KddVOFPtEOETFqilJBSU2FALW127/1qKCeNwJxARs=
Subject key identifier:   95:2A:34:05:95:74:37:C2:C6:EA:B6:B7:DC:D0:B8:FE:81:D3:F1:90
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Certificate issuer:       /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial:       10D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
Manifest number:          10B4
Signing time:             Wed 22 Jul 2026 17:29:41 +0000
Manifest this update:     Wed 22 Jul 2026 17:29:41 +0000
Manifest next update:     Wed 29 Jul 2026 17:29:41 +0000
Files and hashes:         1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: 7lAZRGwCDK9wI2OIU0xmiIwqOw27qKE3d0smDI/igGk=)
                          2: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: TLISGWppoBnnfbHZFjULlfKEwbQDopU4rmYPr0nU0OE=)
                          3: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: qwQKPoIUFxOPN3MeCcCPfp5jviDrGHMY5L0x8rUXkG0=)
                          4: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: 9oD7ePq9FUpAKk3w/IsQePKTLx2iOd3tFZxiCRUR3No=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
                          rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4313 (0x10d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
        Validity
            Not Before: Jul 22 17:29:41 2026 GMT
            Not After : Jul 29 17:29:41 2026 GMT
        Subject: CN=6a60fe05-7969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:03:28:a3:d9:6d:f2:c4:39:88:2d:bd:3f:a9:
                    16:58:ba:c3:2c:1b:d7:38:15:8a:7e:d6:c4:8f:00:
                    43:78:a0:dd:0f:10:b4:83:72:08:d8:aa:48:58:4e:
                    2e:9f:9c:d0:59:70:12:26:34:e4:55:0e:99:44:6c:
                    a0:61:0f:f2:10:f0:00:cb:7e:e9:59:f1:8b:5e:25:
                    86:b6:0c:fe:88:8a:fa:78:ae:f7:24:f7:5c:c8:37:
                    17:b4:cc:e4:f2:82:13:4c:c4:83:cb:47:4d:75:f0:
                    b6:e9:56:78:24:4f:a8:a0:17:35:2f:15:b0:7e:6b:
                    47:86:fe:66:39:72:fa:26:b0:6f:6f:57:7b:d9:2d:
                    07:32:5d:2a:55:6f:4e:c4:62:a9:8b:8e:87:8b:21:
                    bb:64:9e:aa:b2:dd:c0:07:c5:e0:f9:0c:18:ba:d9:
                    e1:ac:3f:37:71:6d:2e:8f:6f:e6:01:cd:3f:8c:9e:
                    e9:b7:5e:de:22:7a:29:9f:2c:53:ea:e3:36:c7:01:
                    ca:3b:02:a1:80:78:8e:70:f9:c3:72:c5:39:31:91:
                    5f:4d:97:c1:3c:42:7c:42:46:f7:ba:ca:79:aa:3c:
                    4a:96:15:57:90:6c:a0:e5:8b:88:47:b3:bf:a6:33:
                    62:19:0f:94:47:60:35:1f:3e:25:c0:a9:2e:a4:75:
                    a2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2A:34:05:95:74:37:C2:C6:EA:B6:B7:DC:D0:B8:FE:81:D3:F1:90
            X509v3 Authority Key Identifier:
                keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:27:e0:3e:89:00:48:37:24:3f:34:5e:20:7d:b7:d7:3d:7c:
         71:ae:c7:e5:dd:c2:1f:87:b0:4d:12:a1:e8:9a:b7:eb:c2:ea:
         54:1d:02:20:74:ea:1a:af:d5:ce:14:7a:1d:f7:3e:fc:da:ce:
         57:78:36:12:52:18:0b:6e:69:d9:08:0f:98:74:83:c4:99:23:
         6d:b7:bd:75:f3:ff:ff:c9:66:08:8e:1d:28:b7:73:9b:68:f6:
         27:ce:65:c9:39:0d:a7:bc:80:f7:64:d9:7f:ce:8d:85:b6:8f:
         cc:55:0c:7e:a0:0c:8e:a7:81:c9:cf:94:da:59:4f:a8:23:d2:
         2a:3e:c0:12:d8:02:ff:fa:0c:00:a9:82:47:ad:be:f4:56:dd:
         7c:c8:d3:eb:7d:81:d0:57:8e:a5:15:58:34:93:08:54:ff:46:
         8b:77:65:c9:4a:a4:fd:5c:17:14:2a:f1:d7:0c:4b:14:41:75:
         ca:17:06:cc:ff:2b:6e:19:eb:80:d8:06:51:be:2e:d0:88:f9:
         56:61:23:73:c4:2c:c9:48:8b:e3:cd:0c:24:c4:b4:70:ca:77:
         bd:5e:6e:86:b8:75:cd:b0:98:00:03:4a:75:c4:50:96:0a:1c:
         94:ff:d3:3e:87:40:4c:47:27:0e:89:2a:59:22:58:a5:3e:87:
         96:27:2c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:44 2026 by rpki-client