Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
File:                     _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json)
Hash identifier:          seDV+m0GO0i5RoIzw0W8gdd8PkprnapxWNJwF+a/StQ=
Subject key identifier:   8E:7C:79:76:1F:E4:D5:AA:D8:71:43:EE:B1:BD:E4:4F:0E:F6:B3:9F
Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B
Certificate issuer:       /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
Certificate serial:       01AF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
Manifest number:          01A4
Signing time:             Thu 23 Jul 2026 05:40:46 +0000
Manifest this update:     Thu 23 Jul 2026 05:40:46 +0000
Manifest next update:     Thu 30 Jul 2026 05:40:46 +0000
Files and hashes:         1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: Ub1LpaWpgxHY/py0X7pHPWTwp0K3+QmuQ2p1R5c+HCA=)
                          2: F5F28CC6739E11F1B96BB9EF75A30FBC.roa (hash: /KxNlXfeXQcDBu4my/p7c/P1DQJwjmP4hrFW2B3nPNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl
                          rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
        Validity
            Not Before: Jul 23 05:40:46 2026 GMT
            Not After : Jul 30 05:40:46 2026 GMT
        Subject: CN=6a61a95e-0461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f9:48:af:76:0d:b4:54:fa:e4:28:54:c0:9e:
                    05:f0:75:2e:55:9d:b4:b5:54:cf:04:ad:05:e4:39:
                    24:98:f4:b5:99:e2:ea:12:86:a5:c3:e3:9f:7d:98:
                    b7:af:51:fa:a1:49:7b:75:4d:77:97:ae:1d:e4:49:
                    24:98:6f:20:41:df:93:8f:33:a2:fb:22:95:2b:0e:
                    31:c8:f4:82:51:bf:fa:3e:35:72:85:74:ff:da:8c:
                    ad:1b:c7:df:7b:7a:fa:eb:07:9e:c5:02:46:05:d3:
                    96:d1:48:32:37:8a:85:64:95:a1:ad:e3:50:79:d3:
                    9f:bd:23:ce:b2:0e:cc:9c:9f:12:a9:eb:2a:56:b6:
                    77:c9:6c:f8:43:c8:34:75:79:3d:7d:9c:bf:57:b6:
                    18:06:f0:41:1c:a5:f7:66:51:af:0f:9a:e8:d3:ce:
                    3e:94:f2:33:65:08:89:28:12:c8:58:7c:48:35:f5:
                    de:0d:d4:4b:b2:a2:57:85:22:8f:8d:63:a6:e7:3a:
                    6c:7f:66:d5:1e:28:23:c5:c9:41:05:31:8b:45:2d:
                    c8:32:c5:59:36:6a:4c:91:e9:bf:e6:13:0e:12:2c:
                    39:42:37:2d:a9:03:e4:bc:20:55:76:0e:51:da:11:
                    a0:22:d0:e2:d8:60:b5:e9:3a:0b:06:34:ca:28:f9:
                    05:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7C:79:76:1F:E4:D5:AA:D8:71:43:EE:B1:BD:E4:4F:0E:F6:B3:9F
            X509v3 Authority Key Identifier:
                keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1e:0b:2d:90:42:aa:72:b7:8a:e4:07:22:78:16:53:ed:c3:
         ae:e2:46:81:27:f1:ff:3e:7c:c9:fe:de:51:3b:0a:f4:cd:ca:
         95:6b:a9:e4:f9:78:59:63:e6:99:d8:30:ad:14:dc:3f:85:2f:
         d7:7d:03:3d:21:e6:cf:07:41:8a:07:37:61:01:c6:44:6f:8f:
         85:cc:5f:30:14:92:94:35:19:9d:6b:4a:a9:28:4e:da:c6:6d:
         91:4f:b9:4d:c2:60:92:0a:1c:cf:e5:cc:85:84:d8:34:d3:10:
         0c:d4:35:3d:b3:92:88:40:51:f4:e9:7c:ee:03:62:5b:74:e5:
         b0:5d:13:d4:cf:02:b7:5f:d7:59:37:43:9a:4f:e8:17:6f:53:
         14:12:c3:73:88:a2:35:5c:c2:a3:d5:0d:5b:ad:3a:87:f0:8d:
         02:0d:ca:95:60:08:49:d5:f7:e8:a1:c2:59:dc:d2:93:a3:fc:
         44:46:82:6f:f5:e8:d4:a1:58:d9:d8:fa:b0:9f:7e:99:01:93:
         08:2c:6e:01:8b:0e:69:66:f0:86:05:33:27:17:17:6c:07:d6:
         80:45:33:0a:68:b4:4e:c2:25:0f:a7:f5:73:80:64:74:49:9b:
         16:06:be:10:ae:c4:bd:5c:19:96:ba:79:3b:70:12:a8:c3:fc:
         e7:5b:1e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:25 2026 by rpki-client