Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft
File:                     K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json)
Hash identifier:          frcSa4d5CqvsLVfhmBeTjBcbX52W+z+zmkZe2ad1S/c=
Subject key identifier:   05:66:A2:10:AF:0E:3C:0D:C5:76:36:2F:44:AD:BF:B8:40:C0:99:81
Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD
Certificate issuer:       /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD
Certificate serial:       0C4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft
Manifest number:          0C41
Signing time:             Wed 22 Jul 2026 19:02:07 +0000
Manifest this update:     Wed 22 Jul 2026 19:02:06 +0000
Manifest next update:     Wed 29 Jul 2026 19:02:06 +0000
Files and hashes:         1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: rZ0MZuYBX00ZrTKR2bwQ8Sj9FuHVBF8o1quba9Kk7KM=)
                          2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: bPIRgHEZY9rLQvrwabu6nPsfSsBA8Z8Wnu5AlQzU9KI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl
                          rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3148 (0xc4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD
        Validity
            Not Before: Jul 22 19:02:06 2026 GMT
            Not After : Jul 29 19:02:06 2026 GMT
        Subject: CN=6a6113af-387f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c4:83:7f:89:a2:ec:02:6a:23:63:d4:a1:53:
                    b3:d5:a5:b6:c6:6a:4a:3b:0a:b1:7b:66:ef:77:aa:
                    fc:18:eb:48:75:63:70:df:50:13:14:3f:72:fd:14:
                    79:34:67:5a:06:2f:b1:3f:83:9d:24:d7:41:00:ec:
                    dd:d7:75:c0:e6:a0:40:18:6e:f8:32:5e:08:6f:a4:
                    d0:14:ae:78:84:06:ce:d3:ed:00:37:8c:9a:cc:9a:
                    2f:4c:1e:11:ff:7c:06:cf:f8:c6:af:7e:5d:82:27:
                    4d:59:7b:d5:fb:68:74:69:f9:98:f7:b6:65:f3:22:
                    37:9a:20:13:2a:54:04:5d:38:f9:2e:ed:44:8b:5e:
                    98:f2:3f:23:c2:67:64:94:28:62:1c:c9:17:2b:9b:
                    a7:fa:ee:12:6e:09:27:a0:b3:19:b6:de:98:e4:aa:
                    70:f9:0e:5d:93:24:bb:ae:49:ea:23:1b:2a:12:b1:
                    62:f1:c4:e3:da:4b:e5:5f:ec:89:8b:b4:03:f4:da:
                    96:eb:d9:70:51:03:47:96:af:3f:97:19:a8:bf:78:
                    38:dd:cb:60:a3:9a:81:53:c1:d6:61:38:1a:53:a3:
                    98:43:d2:68:8b:6c:4b:f5:b5:fa:59:48:de:4e:5a:
                    fd:b3:9f:59:5c:5e:5b:98:79:f6:84:03:a5:ac:fe:
                    01:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:66:A2:10:AF:0E:3C:0D:C5:76:36:2F:44:AD:BF:B8:40:C0:99:81
            X509v3 Authority Key Identifier:
                keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:cc:bd:4e:a8:fe:f0:ba:2b:5b:1b:3c:4d:8c:5f:b0:9c:81:
         56:43:4c:50:9c:90:5e:d2:66:b5:9f:32:6d:22:a9:91:30:e3:
         10:60:2a:10:25:3b:f6:a0:fd:d3:ca:ec:a7:f1:3a:9a:a5:bf:
         ee:fa:ab:6f:df:07:e0:ce:a8:22:71:b3:ca:17:1d:43:3e:5a:
         a0:ef:95:56:73:6a:10:1f:04:d8:12:4a:ee:ef:e4:83:30:d1:
         67:09:81:c7:c2:55:1d:cb:53:e7:0b:29:9f:15:03:b7:9e:5c:
         40:a1:cb:4b:52:07:3d:0a:bc:15:21:8c:6c:af:37:88:f5:71:
         33:8f:c2:6a:b8:61:5f:79:78:fa:06:89:af:23:f0:65:6d:4c:
         2d:8e:fd:a6:71:9c:a3:33:84:f8:06:7f:c4:4a:85:41:6d:df:
         67:27:78:b6:4f:11:a8:62:a4:c1:14:28:4e:bf:b3:b9:d3:3d:
         11:65:03:db:35:d0:cf:e9:c4:00:24:7f:15:82:21:39:7b:3e:
         e8:67:19:e1:35:c4:a1:00:c4:6e:a3:56:7e:94:59:27:33:ff:
         97:49:a3:27:97:cc:95:51:07:ae:9a:81:23:55:b9:51:a2:8e:
         b6:f1:25:c3:3c:b1:03:9e:99:aa:6a:a4:cf:a5:2a:6e:76:43:
         67:af:61:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:35 2026 by rpki-client