Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
File:                     KUr5pNDtlrY5KVxYc9z-KJ8no20.mft (raw, json)
Hash identifier:          k9ylWT7kDE8kIpJHD2guxigRczlQ/a/3WJ/tm8saXuo=
Subject key identifier:   82:C5:6E:13:30:97:F7:7E:9D:E4:AF:98:F4:5E:90:74:A6:0C:1B:2E
Authority key identifier: 29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D
Certificate issuer:       /CN=A9199095/serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
Manifest number:          31
Signing time:             Thu 23 Jul 2026 10:44:04 +0000
Manifest this update:     Thu 23 Jul 2026 10:44:03 +0000
Manifest next update:     Thu 30 Jul 2026 10:44:03 +0000
Files and hashes:         1: KUr5pNDtlrY5KVxYc9z-KJ8no20.crl (hash: cfuvjbfn/9/poyUgTCGvC57Q13nCsqN7eGitWgCHRHE=)
                          2: 80748E243E2C11F19772AA47B7833773.roa (hash: dDD9Ne2VF73KrNd/l166hkPzmv6wE6K5s6s/cWNJHfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl
                          rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199095, serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D
        Validity
            Not Before: Jul 23 10:44:03 2026 GMT
            Not After : Jul 30 10:44:03 2026 GMT
        Subject: CN=6a61f074-757d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:97:83:c7:51:2c:3e:22:64:73:6c:b7:0c:
                    c4:22:a6:87:e1:a2:6d:fc:36:c1:ff:f3:58:ae:b1:
                    32:7e:42:75:ba:a7:0a:16:e9:fb:2d:9f:72:e4:c3:
                    1f:25:1f:88:d2:2b:2c:23:4c:e7:d2:5d:90:ba:ba:
                    23:39:f1:a5:44:b8:b1:c4:db:65:17:5e:01:3d:01:
                    13:42:34:87:37:b9:e7:8f:64:55:9c:84:83:77:47:
                    0b:22:31:3b:99:7b:0e:29:67:46:e1:5f:2a:ec:9f:
                    ab:26:f1:b0:98:50:38:f4:72:81:1e:2e:08:bb:6a:
                    78:87:f1:d9:52:74:17:b7:03:31:53:66:ad:14:cc:
                    a2:02:8c:a9:22:3b:5b:27:30:63:6f:6d:ac:c3:28:
                    22:d3:b8:1d:3a:35:f6:78:73:45:56:6f:f9:5a:b1:
                    6a:0c:8e:e4:b0:d9:32:57:f7:6d:13:5c:d5:b4:0e:
                    f3:17:ce:9e:d8:b1:7f:2f:c7:cf:74:d0:f7:fd:13:
                    69:0e:00:f4:b6:1f:6d:20:7c:24:8a:3d:e2:c8:9a:
                    99:55:21:77:cf:38:4e:16:58:9d:46:3a:e1:e4:0e:
                    05:75:a4:fd:f0:ac:30:32:2d:80:fe:b5:98:69:5f:
                    38:07:cb:a3:6c:df:ba:7d:46:c3:13:5c:c3:8b:47:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C5:6E:13:30:97:F7:7E:9D:E4:AF:98:F4:5E:90:74:A6:0C:1B:2E
            X509v3 Authority Key Identifier:
                keyid:29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4d:43:99:45:fc:d5:aa:0b:9e:ac:22:09:42:4b:d6:9e:30:
         d2:06:de:be:03:59:db:1a:ad:da:38:3b:47:7c:97:94:03:64:
         37:e9:54:2b:9f:41:d9:ac:33:f9:3f:17:3b:3f:05:7f:e7:23:
         a1:06:0e:23:d2:4b:f2:d9:09:1a:a4:ee:8b:63:91:60:7d:73:
         fb:2b:cc:ae:a7:19:e5:02:44:09:50:09:fa:0f:71:e3:fb:b7:
         5f:e5:c8:cd:07:c9:5c:f1:1f:15:43:54:e0:ca:20:76:60:b2:
         b4:96:29:00:17:98:e2:42:1a:d7:38:2f:fa:a8:55:1a:79:c0:
         7f:69:45:38:b2:7f:d8:45:fd:ee:20:98:3d:d0:23:72:87:3f:
         ab:20:2c:42:9a:fc:52:9a:d8:32:d4:5f:93:f8:7a:11:37:90:
         bf:ba:f9:ea:1e:db:fe:87:d5:01:a4:e8:8b:5e:14:3d:4e:c6:
         69:8b:bf:2c:01:99:4f:ff:20:db:9f:d1:56:47:85:21:e5:14:
         71:ca:25:8d:e0:b7:d5:e1:1b:db:47:1f:ee:5b:d4:cd:94:70:
         2e:41:8f:75:ff:b7:f5:c0:ec:fd:2c:37:13:2f:9b:79:af:26:
         8c:03:1d:07:e9:71:05:a0:0f:de:81:6c:59:ac:b8:b4:e0:c5:
         50:0b:b9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:21:24 2026 by rpki-client