Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
File:                     kfPcWc0PodJBy3h1fR2qksKsn2A.mft (raw, json)
Hash identifier:          T70/o0tbGI1mKfo1VKPOZy2Npl3NwlR3KK8bvO2J9WI=
Subject key identifier:   DE:0B:71:54:93:99:05:4D:2D:1C:5F:CA:04:12:8C:D9:E1:12:84:C9
Authority key identifier: 91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60
Certificate issuer:       /CN=A91A0432/serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60
Certificate serial:       046D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
Manifest number:          0464
Signing time:             Thu 23 Jul 2026 01:02:40 +0000
Manifest this update:     Thu 23 Jul 2026 01:02:40 +0000
Manifest next update:     Thu 30 Jul 2026 01:02:40 +0000
Files and hashes:         1: kfPcWc0PodJBy3h1fR2qksKsn2A.crl (hash: VhJHT9tCrKjAw/2gJxxW2Sm/L6HamNRoVDTutimRrlY=)
                          2: 4114509A597511EFA2B79A84C4F9AE02.roa (hash: xky0bkAGJZiPmJrh1utEauZh7Xc1VAPTEfxwrtpScXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl
                          rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1133 (0x46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0432, serialNumber=91F3DC59CD0FA1D241CB78757D1DAA92C2AC9F60
        Validity
            Not Before: Jul 23 01:02:40 2026 GMT
            Not After : Jul 30 01:02:40 2026 GMT
        Subject: CN=6a616830-d8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:09:ee:b1:73:e6:bb:46:4a:46:20:68:67:32:
                    34:25:27:fe:b6:bd:fd:7a:ce:ea:6c:c8:f8:10:64:
                    b2:90:c0:d7:93:2f:a2:3b:d4:76:ba:b6:1e:f2:15:
                    b2:44:64:2f:1d:1c:d6:8f:47:5f:8f:c4:b3:c6:f3:
                    36:95:1f:97:18:7a:fa:fa:77:e5:91:7c:c6:98:82:
                    10:3d:86:64:9a:6d:3d:41:ef:33:70:e8:76:3c:e8:
                    8f:93:cf:69:52:b9:b7:ca:ac:a6:7d:e6:e4:f4:b1:
                    c7:1f:11:66:eb:b5:15:5b:1c:a9:e2:f7:74:12:9f:
                    71:08:50:4f:1f:4d:29:e3:ee:67:a5:e4:d0:90:17:
                    83:86:5d:57:85:0c:e0:c6:cc:93:4f:80:c3:94:30:
                    41:21:7c:3f:76:0d:44:0d:3a:27:40:70:fd:f6:71:
                    8a:82:13:aa:87:8b:00:21:ce:72:a3:45:28:00:48:
                    b7:33:ec:91:b0:8e:e9:ca:ef:22:b3:08:86:8f:cd:
                    a7:f9:80:1f:23:26:a9:90:9f:81:4a:a3:27:60:a4:
                    ac:fd:21:5b:38:dc:f9:19:83:7c:62:fe:f2:02:7b:
                    bc:05:dd:9f:85:e2:f0:2d:67:b0:8c:27:bd:ac:ec:
                    bb:12:0d:32:dc:fd:a4:b0:62:35:07:8f:2f:42:04:
                    91:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0B:71:54:93:99:05:4D:2D:1C:5F:CA:04:12:8C:D9:E1:12:84:C9
            X509v3 Authority Key Identifier:
                keyid:91:F3:DC:59:CD:0F:A1:D2:41:CB:78:75:7D:1D:AA:92:C2:AC:9F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfPcWc0PodJBy3h1fR2qksKsn2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/F5BF699CA4CA11ECAC4E5744C4F9AE02/kfPcWc0PodJBy3h1fR2qksKsn2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f6:a6:ee:5a:38:0b:2f:98:8f:8b:f0:7e:9a:9a:d6:aa:37:
         52:bb:73:2e:83:db:92:df:b3:a6:7d:74:4f:ae:cf:38:c4:b5:
         a3:7e:92:15:25:bb:45:34:7b:9d:35:6e:b0:b5:b3:1d:6d:a8:
         a3:e4:dd:02:cc:30:1d:0b:b3:a0:56:d6:fe:0c:93:4d:61:54:
         a2:24:b3:f7:c7:0a:4f:32:e9:af:0a:f6:d0:0a:6d:22:65:be:
         20:4f:ae:4f:ee:a4:94:79:7a:51:c8:6f:4d:c3:59:c8:da:9f:
         d2:75:fa:57:50:ba:f4:18:ac:97:57:9c:df:12:08:2b:8a:49:
         0d:77:1c:b0:a0:be:ef:e1:20:a6:47:55:49:7b:fc:71:a2:4f:
         b9:36:61:9b:d3:dd:e8:dc:b0:30:a8:fe:ae:9c:b5:44:2e:d3:
         6e:81:db:f5:d1:10:ea:4f:ba:46:51:d6:ad:62:a6:a8:9a:84:
         66:d2:04:f7:9f:a1:69:c6:1c:b7:17:7a:92:87:5f:7d:d8:fb:
         fb:40:f2:da:78:f1:98:2f:88:b2:cb:68:60:12:b1:83:44:02:
         c7:ab:70:2c:f9:80:6d:d4:9c:b9:90:6a:5c:47:65:db:8e:cc:
         59:8a:00:dd:66:a5:71:c2:6f:49:a1:19:49:7a:61:cb:c1:58:
         80:31:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:40 2026 by rpki-client