Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
File:                     khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json)
Hash identifier:          TpTNhI1u4fZjtxwB61nNc+wZqLgpH0+3vY2M2S/qs/Q=
Subject key identifier:   77:B3:43:C7:CC:A3:97:0D:60:5A:5A:08:69:CB:04:66:30:2C:1C:99
Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
Certificate issuer:       /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Certificate serial:       047E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
Manifest number:          0472
Signing time:             Thu 23 Jul 2026 00:59:54 +0000
Manifest this update:     Thu 23 Jul 2026 00:59:53 +0000
Manifest next update:     Thu 30 Jul 2026 00:59:53 +0000
Files and hashes:         1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: +WMXXSppvs4l3Rzes70hVUoNbAS6tMVjwEGhxSTpaUE=)
                          2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: 2dklAfTnHhtRgzsOUzlnr7mFdnQGrY5LhPyI2dkyTlU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl
                          rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150 (0x47e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
        Validity
            Not Before: Jul 23 00:59:53 2026 GMT
            Not After : Jul 30 00:59:53 2026 GMT
        Subject: CN=6a61678a-e3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:01:b0:3e:07:94:7f:e8:67:38:ec:70:75:
                    17:8a:61:b8:b2:86:65:35:18:e9:f7:55:e4:0d:88:
                    fc:1a:9d:d9:91:b5:dc:6b:d9:e5:04:87:b7:27:27:
                    b6:c2:6f:66:41:ec:2d:e0:5f:74:04:0a:1d:6c:32:
                    8b:3a:0a:ba:04:f5:29:1e:64:f6:db:21:17:6b:2a:
                    d2:ef:7f:e2:a6:02:79:1d:82:29:11:c0:dc:06:3a:
                    26:d8:39:59:4b:b4:0b:da:e5:97:d3:ba:9a:eb:3b:
                    3c:58:7d:fc:1d:39:3c:90:01:9d:8a:05:23:51:13:
                    af:08:b1:87:b9:b6:a0:b9:5c:3e:d2:ae:68:bb:11:
                    0b:df:ee:1c:6c:e4:f3:40:cb:f5:51:60:7c:42:dd:
                    fa:cf:84:13:0f:a9:fd:ca:79:b9:01:30:69:47:1e:
                    80:19:df:25:a4:11:91:2c:34:4e:18:10:3d:75:19:
                    f1:e4:11:50:9c:9d:3a:2c:0c:9e:3a:66:96:3b:07:
                    9b:36:88:7f:0e:f3:12:aa:f0:32:63:61:c1:d2:1b:
                    05:fe:46:2d:b1:7b:59:89:39:7f:c2:bd:b4:31:83:
                    c4:3e:52:9f:b0:d2:c8:03:6a:ff:41:df:74:9c:a0:
                    48:2d:45:cb:d1:87:91:13:5a:bd:7f:5b:55:6a:8b:
                    2e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B3:43:C7:CC:A3:97:0D:60:5A:5A:08:69:CB:04:66:30:2C:1C:99
            X509v3 Authority Key Identifier:
                keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:5a:66:1a:d7:7c:2a:3c:95:ea:f5:db:4a:53:f2:bd:10:97:
         25:4b:fd:12:ec:10:eb:2f:ab:d3:e7:9c:ad:c0:83:77:11:8f:
         1e:fc:62:b4:a1:f2:a5:c5:ae:f8:4f:b2:f1:fd:75:a0:0f:36:
         8d:be:74:98:3a:50:4f:2e:38:56:58:da:44:51:8d:a3:47:54:
         a6:65:23:d8:b1:72:cc:c0:c9:8d:47:87:0e:31:5a:d7:4d:0e:
         f1:82:2a:29:91:64:6b:02:79:f2:ec:9e:73:43:08:49:c9:2d:
         af:57:5a:43:0b:b7:e4:38:16:3e:3e:d7:09:e8:75:80:d4:58:
         66:0f:ad:c8:c2:d6:1b:c5:59:f5:5b:9f:4b:ed:c0:06:68:f5:
         13:68:2d:7d:bd:19:b9:85:76:67:5c:f1:d5:2e:6b:f1:49:ee:
         d8:39:25:bf:68:bd:8c:46:d9:ff:fc:e3:d7:2c:ae:93:4d:d9:
         00:4f:2c:ea:48:6f:f7:0e:e8:c4:54:47:aa:93:0b:5c:ea:0d:
         d2:ec:ea:30:66:81:b7:9e:fa:69:e9:97:3a:94:ef:87:09:57:
         78:be:e7:bc:b0:f1:b6:9b:0d:f4:f5:db:2f:20:79:d9:71:7b:
         d2:0f:3f:49:bb:0e:ca:b6:4d:07:6d:d7:e4:b1:f9:0c:1a:28:
         67:1d:cb:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk5RjUxMTAvBgNVBAUTKDkyMTJFRUEyQjkxQTMyNjYwRjc1MjcxRkVDODU4OUIz
MDlDMzg5RjAwHhcNMjYwNzIzMDA1OTUzWhcNMjYwNzMwMDA1OTUzWjAYMRYwFAYD
VQQDEw02YTYxNjc4YS1lM2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtDQBsD4HlH/oZzjscHUXimG4soZlNRjp91XkDYj8Gp3ZkbXca9nlBIe3Jye2
wm9mQewt4F90BAodbDKLOgq6BPUpHmT22yEXayrS73/ipgJ5HYIpEcDcBjom2DlZ
S7QL2uWX07qa6zs8WH38HTk8kAGdigUjUROvCLGHubaguVw+0q5ouxEL3+4cbOTz
QMv1UWB8Qt36z4QTD6n9ynm5ATBpRx6AGd8lpBGRLDROGBA9dRnx5BFQnJ06LAye
OmaWOwebNoh/DvMSqvAyY2HB0hsF/kYtsXtZiTl/wr20MYPEPlKfsNLIA2r/Qd90
nKBILUXL0YeRE1q9f1tVaosuhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHezQ8fM
o5cNYFpaCGnLBGYwLByZMB8GA1UdIwQYMBaAFJIS7qK5GjJmD3UnH+yFibMJw4nw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTlGNS82QTNEQjU3ODlG
NzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1tWVBkU2NmN0lXSnN3bkRp
ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2toTHVvcmthTW1ZUGRTY2Y3SVdKc3duRGlmQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTlGNS82QTNEQjU3ODlGNzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1t
WVBkU2NmN0lXSnN3bkRpZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwlpmGtd8KjyV6vXbSlPyvRCXJUv9EuwQ6y+r0+ecrcCDdxGPHvxitKHypcWu
+E+y8f11oA82jb50mDpQTy44VljaRFGNo0dUpmUj2LFyzMDJjUeHDjFa100O8YIq
KZFkawJ58uyec0MIScktr1daQwu35DgWPj7XCeh1gNRYZg+tyMLWG8VZ9VufS+3A
Bmj1E2gtfb0ZuYV2Z1zx1S5r8Unu2Dklv2i9jEbZ//zj1yyuk03ZAE8s6khv9w7o
xFRHqpMLXOoN0uzqMGaBt576aemXOpTvhwlXeL7nvLDxtpsN9PXbLyB52XF70g8/
SbsOyrZNB23X5LH5DBooZx3LXA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:56 2026 by rpki-client