Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
File:                     Kz24XvlSI40ZLc8XDua-scjbA6k.mft (raw, json)
Hash identifier:          ghpkdZ9oy6eVk6yD2pnu6t4om661h2tp2x9uQQiPc2I=
Subject key identifier:   4D:D5:B7:AF:03:AC:66:03:55:71:D0:E0:20:8D:BE:7F:23:91:E3:E9
Authority key identifier: 2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9
Certificate issuer:       /CN=A919F525/serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9
Certificate serial:       015F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
Manifest number:          0157
Signing time:             Thu 23 Jul 2026 06:44:24 +0000
Manifest this update:     Thu 23 Jul 2026 06:44:24 +0000
Manifest next update:     Thu 30 Jul 2026 06:44:24 +0000
Files and hashes:         1: Kz24XvlSI40ZLc8XDua-scjbA6k.crl (hash: 8MiRXAjIVVXmeGQWkXdj3UKQOsllXzXpUF5rOX5XDD4=)
                          2: 4AFF817484EF11EFBDCD721DC4F9AE02.roa (hash: MRSyunFuZV1S3WfmC+o5wAwU5vJtDQmtS6IHzeBNXmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl
                          rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F525, serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9
        Validity
            Not Before: Jul 23 06:44:24 2026 GMT
            Not After : Jul 30 06:44:24 2026 GMT
        Subject: CN=6a61b848-6df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a1:bb:04:2c:08:43:96:aa:2e:96:72:e5:99:
                    54:f7:3c:75:85:d4:cb:07:fe:44:aa:66:bd:95:0d:
                    d5:30:50:2b:29:5e:27:a9:a3:1e:81:22:b3:be:bf:
                    d6:7b:ca:3a:f4:96:da:15:61:64:f1:1e:41:a6:a0:
                    ed:f1:2b:a7:9d:e0:52:bd:d1:b4:95:93:4c:aa:f8:
                    23:1f:2d:df:a5:82:83:37:f3:ac:bc:d2:df:36:14:
                    35:02:ed:9f:ea:1c:53:ac:3b:be:37:64:05:d8:5f:
                    c3:89:e6:6e:3c:e1:0d:3c:01:cb:82:de:5b:15:fa:
                    f3:5c:74:a7:3c:cc:9a:5f:84:ec:41:bd:1c:6b:8c:
                    7a:3d:d6:0b:d9:c3:80:97:bb:22:77:2a:32:37:a5:
                    a0:89:41:7d:3a:af:fb:ce:f6:1e:26:c8:83:0b:3b:
                    e9:3a:7e:3e:1a:98:4b:e0:8e:3b:fb:f4:f5:46:a1:
                    e7:07:cc:99:a6:44:7b:7d:56:9b:ab:25:ca:e4:d0:
                    9c:18:4e:ba:48:0f:0c:6b:c2:87:3a:46:1e:00:7f:
                    ea:ba:95:15:6f:0c:61:fa:07:a5:9e:50:9c:93:bf:
                    59:07:2c:14:38:6d:0d:22:fd:70:22:9f:3b:ce:49:
                    19:20:f5:f8:54:39:c6:2e:f4:33:0a:c0:c9:ce:87:
                    54:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D5:B7:AF:03:AC:66:03:55:71:D0:E0:20:8D:BE:7F:23:91:E3:E9
            X509v3 Authority Key Identifier:
                keyid:2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a5:74:a4:2a:4f:6c:c8:2f:05:5b:4d:05:cc:8f:32:0f:f7:
         60:4a:2b:96:5d:72:38:69:f1:d9:a9:56:ec:3c:ce:b0:d4:89:
         a9:ef:79:dc:73:78:7e:67:0c:00:c0:40:2c:2d:64:86:15:2e:
         f9:79:02:3c:f2:d6:aa:9f:18:b3:61:2c:b1:a6:b6:6a:46:53:
         94:c5:57:80:e3:c6:da:1f:95:04:85:a8:81:5b:dd:9c:46:60:
         d5:8b:90:cb:1b:20:e7:43:d6:9c:9f:0e:ea:12:21:85:03:91:
         5d:e3:9f:59:08:0b:2c:ef:78:35:e4:45:e2:82:73:09:5f:00:
         a8:b8:63:ec:78:53:6a:d3:f5:89:7f:5d:0f:a6:fb:92:b2:d7:
         d3:9e:ba:e0:21:1f:ec:78:08:31:23:1d:66:a7:dd:79:1e:72:
         9d:9f:c1:c1:f0:41:fb:81:83:f4:5f:fc:0c:6c:74:2c:42:df:
         70:e2:5c:25:dd:9a:15:51:80:4f:21:8e:b7:e2:b0:6f:c3:6d:
         0a:1b:5f:12:0f:b9:ce:d2:cd:ce:80:cb:43:dc:37:8f:23:05:
         8d:3a:81:a1:5f:60:a8:03:87:fc:04:52:80:57:0b:82:b2:2b:
         c1:09:40:7c:dd:b6:5a:63:76:9a:4d:a2:d2:a2:0c:7e:0f:a5:
         e1:9d:43:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:02:38 2026 by rpki-client