Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft
File:                     rt-KIRgobseQH6KolLlMoQCj_Xg.mft (raw, json)
Hash identifier:          U1Tikfaq22EWY6w7DBpYp00jyhNYp3va+3xBVc1HJ6g=
Subject key identifier:   7A:11:6A:BD:A9:82:D8:0E:CB:39:AE:F8:33:27:C5:52:07:F0:53:CF
Authority key identifier: AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78
Certificate issuer:       /CN=A91B13FE/serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft
Manifest number:          C9
Signing time:             Thu 23 Jul 2026 09:35:38 +0000
Manifest this update:     Thu 23 Jul 2026 09:35:37 +0000
Manifest next update:     Thu 30 Jul 2026 09:35:37 +0000
Files and hashes:         1: rt-KIRgobseQH6KolLlMoQCj_Xg.crl (hash: L6vMt7gI/IF7aL3Ebs1QmJw2v6tmARheAsK5XAUmFCE=)
                          2: 077331D0564511F09ED8993AC4F9AE02.roa (hash: xgGDqEfVF0cc4GOHOg37rgh1uqyxP6z93iQVdeBssXU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl
                          rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13FE, serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78
        Validity
            Not Before: Jul 23 09:35:37 2026 GMT
            Not After : Jul 30 09:35:37 2026 GMT
        Subject: CN=6a61e06a-cc45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:28:14:cd:cb:8a:41:24:2d:e0:98:a6:55:79:
                    63:dd:d3:c2:db:1b:37:00:4f:53:36:06:1e:2d:0e:
                    34:09:9a:c9:7e:e8:41:48:41:86:ec:35:86:80:0e:
                    9e:06:95:7b:10:8d:fa:72:3f:38:f2:80:d1:27:68:
                    2b:95:9c:ba:76:cc:d2:70:65:fa:a4:81:06:6b:d3:
                    99:ff:ae:d3:ae:6b:6a:46:41:95:ca:7f:36:9f:3a:
                    43:d4:f2:98:67:e1:e1:19:94:2b:1a:95:fc:17:5d:
                    0a:dc:aa:f1:94:1d:2d:50:63:83:91:ca:7b:33:cb:
                    71:e1:34:99:c3:1d:ae:c7:a4:37:cc:ee:ef:29:7e:
                    da:e5:c9:c2:2b:14:3d:7b:4d:d8:df:ec:ce:d3:c5:
                    a9:ed:f2:fe:f3:30:95:65:46:0a:70:06:8f:47:f4:
                    56:46:b9:ae:c2:44:6e:f0:0a:c6:67:88:6d:fa:6d:
                    fa:cd:88:d1:07:6a:8c:81:40:58:46:18:38:b7:2c:
                    14:8c:61:5d:ea:01:3c:f5:31:41:43:13:70:07:9e:
                    1c:0a:02:e9:83:d5:b8:c4:51:ac:e4:fe:bb:a3:04:
                    5d:34:54:e7:45:99:d4:81:8b:02:f0:2b:3d:4e:5d:
                    56:4c:a2:c2:ce:6c:5f:b5:0f:15:c3:c5:14:97:52:
                    c7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:11:6A:BD:A9:82:D8:0E:CB:39:AE:F8:33:27:C5:52:07:F0:53:CF
            X509v3 Authority Key Identifier:
                keyid:AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:61:ba:7b:4f:d8:0c:e8:71:50:3e:a9:92:8c:73:d9:2d:6d:
         71:94:0f:47:5f:36:b5:a2:56:d4:4f:07:23:10:9f:cb:b1:97:
         38:5b:cb:77:fb:6a:d5:73:fc:84:92:b1:ff:27:81:a0:8e:ab:
         98:0a:25:b9:16:56:48:a3:f7:d5:ec:60:fb:0f:a7:3c:2e:55:
         a1:83:54:76:9e:1b:20:98:a1:6f:13:a8:25:96:41:71:d4:24:
         5f:8a:01:64:82:22:c6:b2:05:5b:0e:8b:1f:5a:5d:10:78:49:
         b3:d9:9d:22:ae:78:3c:b4:e0:2e:7b:5b:ae:2a:59:31:7f:f2:
         8b:83:68:5d:c2:53:e6:63:23:29:88:3a:d5:5b:a7:bd:56:0c:
         14:37:53:c7:cd:05:11:1a:1c:2f:48:0f:b4:fd:dd:0d:e8:25:
         e0:88:b1:0f:47:82:49:aa:3b:ba:32:6a:fe:e1:3a:68:21:08:
         22:52:e4:7f:97:b3:2b:93:ea:c1:9c:59:0a:62:01:3f:91:16:
         eb:18:d3:a1:7f:d5:eb:e1:03:57:56:98:2a:06:93:cd:c6:a2:
         f1:e0:0f:7c:93:83:41:4b:eb:bb:6c:a4:94:3f:06:90:75:37:
         ea:36:78:4b:68:fb:65:1c:ad:b8:67:cb:5b:0c:e4:96:2d:8a:
         13:3b:f5:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjEzRkUxMTAvBgNVBAUTKEFFREY4QTIxMTgyODZFQzc5MDFGQTJBODk0Qjk0Q0Ex
MDBBM0ZENzgwHhcNMjYwNzIzMDkzNTM3WhcNMjYwNzMwMDkzNTM3WjAYMRYwFAYD
VQQDEw02YTYxZTA2YS1jYzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxygUzcuKQSQt4JimVXlj3dPC2xs3AE9TNgYeLQ40CZrJfuhBSEGG7DWGgA6e
BpV7EI36cj848oDRJ2grlZy6dszScGX6pIEGa9OZ/67TrmtqRkGVyn82nzpD1PKY
Z+HhGZQrGpX8F10K3KrxlB0tUGODkcp7M8tx4TSZwx2ux6Q3zO7vKX7a5cnCKxQ9
e03Y3+zO08Wp7fL+8zCVZUYKcAaPR/RWRrmuwkRu8ArGZ4ht+m36zYjRB2qMgUBY
Rhg4tywUjGFd6gE89TFBQxNwB54cCgLpg9W4xFGs5P67owRdNFTnRZnUgYsC8Cs9
Tl1WTKLCzmxftQ8Vw8UUl1LHWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHoRar2p
gtgOyzmu+DMnxVIH8FPPMB8GA1UdIwQYMBaAFK7fiiEYKG7HkB+iqJS5TKEAo/14
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTNGRS85NjZENzFFQTU2
NDMxMUYwQjE2MjdBMTVDNEY5QUUwMi9ydC1LSVJnb2JzZVFINktvbExsTW9RQ2pf
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J0LUtJUmdvYnNlUUg2S29sTGxNb1FDal9YZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTNGRS85NjZENzFFQTU2NDMxMUYwQjE2MjdBMTVDNEY5QUUwMi9ydC1LSVJnb2Jz
ZVFINktvbExsTW9RQ2pfWGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEWG6e0/YDOhxUD6pkoxz2S1tcZQPR182taJW1E8HIxCfy7GXOFvLd/tq1XP8
hJKx/yeBoI6rmAoluRZWSKP31exg+w+nPC5VoYNUdp4bIJihbxOoJZZBcdQkX4oB
ZIIixrIFWw6LH1pdEHhJs9mdIq54PLTgLntbripZMX/yi4NoXcJT5mMjKYg61Vun
vVYMFDdTx80FERocL0gPtP3dDegl4IixD0eCSao7ujJq/uE6aCEIIlLkf5ezK5Pq
wZxZCmIBP5EW6xjToX/V6+EDV1aYKgaTzcai8eAPfJODQUvru2yklD8GkHU36jZ4
S2j7ZRytuGfLWwzkli2KEzv1Rw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:17:25 2026 by rpki-client