Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
File:                     kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json)
Hash identifier:          2T/c8GERh8R4e3hzat2rhXkN1T5Irf3VerG3CV5FTUY=
Subject key identifier:   5F:5D:E8:91:72:E2:E4:94:C8:7A:08:4D:A7:BF:C6:C8:D7:78:CE:3C
Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE
Certificate issuer:       /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
Manifest number:          0124
Signing time:             Thu 23 Jul 2026 07:31:16 +0000
Manifest this update:     Thu 23 Jul 2026 07:31:16 +0000
Manifest next update:     Thu 30 Jul 2026 07:31:16 +0000
Files and hashes:         1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: ngbXPCByrMG7+I2voUvwVd2z3456vMVpnn06Z14/z/M=)
                          2: 854C34B410A611F1B36A7FF1393D8C67.roa (hash: T+es4R7Kz78aarIocXiX4PtIykpBJj/m83J7r+F3puc=)
                          3: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: gMKROOsdZBai7uwNPJMhA7wmGBXyz5SGNbYDb5CcdnA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl
                          rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
        Validity
            Not Before: Jul 23 07:31:16 2026 GMT
            Not After : Jul 30 07:31:16 2026 GMT
        Subject: CN=6a61c344-3992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:f7:3f:cf:37:e2:1a:3c:f9:5f:89:a3:f3:
                    45:53:55:09:17:2f:b5:1f:a9:06:37:2e:31:0a:99:
                    cc:ae:9d:8c:6c:1e:86:d9:e0:ce:08:57:21:dc:26:
                    5e:76:ec:84:75:60:48:fd:a6:3a:fc:6f:87:30:0c:
                    c5:ba:2b:a2:aa:ca:9a:64:03:12:18:8a:a7:0a:4d:
                    dc:d1:4c:de:3b:bf:00:43:8f:d9:20:ae:a2:53:5a:
                    3b:22:0b:b2:5e:85:d8:7e:84:95:f3:a7:f7:df:22:
                    06:9e:bb:b5:22:76:02:9c:06:d2:0d:16:95:8d:53:
                    b0:f4:93:24:dc:5f:77:43:eb:5b:f2:0f:90:f3:41:
                    af:72:10:9d:44:33:f6:cd:27:95:40:7f:11:1c:e2:
                    98:a6:8d:b0:6d:8c:3b:be:41:cd:5f:71:d7:12:cc:
                    65:e5:bd:12:c2:c2:99:04:41:d2:32:1f:ad:8c:dc:
                    01:0b:5e:92:a1:db:86:95:89:c5:9a:85:8d:43:2c:
                    a9:fc:51:80:9b:4f:b9:5d:63:3a:a9:f1:bb:11:95:
                    0d:77:34:a8:65:e4:87:52:36:20:30:2d:65:70:e1:
                    e0:c4:68:09:05:27:1b:08:f7:0e:31:89:e6:7a:0b:
                    74:94:0f:ef:c9:5f:23:03:64:a8:24:f8:4a:06:63:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5D:E8:91:72:E2:E4:94:C8:7A:08:4D:A7:BF:C6:C8:D7:78:CE:3C
            X509v3 Authority Key Identifier:
                keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:dd:1c:11:f2:4f:76:b2:36:de:0b:0c:02:a4:2d:3a:31:22:
         24:65:24:90:87:41:a6:65:32:69:37:13:94:8b:63:34:63:e6:
         53:59:bd:49:bb:e6:d3:72:ab:41:7c:e3:02:c1:ae:8c:72:3b:
         e1:fe:65:c3:b1:7e:fe:2c:69:17:04:69:2f:30:1b:fd:8e:c6:
         0d:43:83:15:ae:a8:7a:98:e1:86:22:99:d2:4b:e2:ab:df:9f:
         e2:8f:d0:88:b2:07:ed:4e:0a:18:6d:42:d3:11:d5:44:8b:be:
         c1:5a:9a:24:da:db:69:a5:c6:60:a6:80:cc:82:57:a6:da:9c:
         79:fc:89:19:d1:a1:14:a9:b9:d9:2b:22:e7:41:42:65:4d:45:
         ee:52:19:be:03:cc:ec:46:2d:0e:19:62:25:e3:e5:1f:f6:b2:
         6a:df:e0:54:c1:52:36:7f:d8:44:dd:f1:9e:fd:0d:d8:ee:8d:
         a9:df:5e:b2:e9:34:fe:14:42:8d:71:30:bd:01:c1:5b:4c:1a:
         56:46:69:32:63:7b:cd:b3:7a:c3:83:01:6f:0c:25:7e:6a:06:
         c1:3d:c7:fe:4e:74:c4:51:93:b0:1a:bf:82:09:a8:3c:34:39:
         be:bb:0e:9c:ba:e7:96:44:22:85:93:bb:e9:ab:76:c5:8b:82:
         85:91:03:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:35:42 2026 by rpki-client