Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
File:                     KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json)
Hash identifier:          cQi8l3naPYF/jD4ok55+XQ/oo8sJIWredhacUZaCMGA=
Subject key identifier:   FD:62:EB:07:A1:F2:CD:A7:CB:7C:15:B3:18:E3:D6:6A:38:C8:E0:AB
Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
Certificate issuer:       /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Certificate serial:       033F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
Manifest number:          0330
Signing time:             Thu 23 Jul 2026 02:03:00 +0000
Manifest this update:     Thu 23 Jul 2026 02:03:00 +0000
Manifest next update:     Thu 30 Jul 2026 02:03:00 +0000
Files and hashes:         1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: FRBEdCcSWcupkK3S7ksaqK5wU2hKr9f8yFMl5N7UE2M=)
                          2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: WyMfvYsLQHMgLVM8XPqCRpkFzoUhxbdKs79AF+461J0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
                          rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7897, serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
        Validity
            Not Before: Jul 23 02:03:00 2026 GMT
            Not After : Jul 30 02:03:00 2026 GMT
        Subject: CN=6a617654-667f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1a:50:fa:60:2d:1f:a6:68:ac:86:b0:eb:e5:
                    e3:53:72:f8:89:74:55:2d:9c:db:ba:a4:4a:fc:04:
                    68:e3:23:1b:b1:38:22:33:16:e4:36:9c:bb:84:eb:
                    4c:66:40:d8:5b:b8:2c:b5:db:97:ec:7e:0a:9a:36:
                    a5:ad:95:79:e1:ba:8e:55:5c:92:70:b9:e0:1a:07:
                    49:0a:b5:d6:2b:9f:41:97:33:f8:dd:a0:5d:69:5a:
                    bd:5a:5d:17:55:96:a3:df:c0:12:85:44:6e:8e:07:
                    04:76:17:fe:e3:a5:bc:cc:11:dc:0e:2f:fe:6b:8e:
                    c2:e7:e6:8d:5e:70:a6:af:b2:99:0f:d8:84:24:bf:
                    47:84:ef:65:cd:b0:ad:80:b2:9e:7b:1d:a1:4a:63:
                    36:a7:50:9e:de:ab:74:14:1e:69:19:95:9b:4b:57:
                    f1:ab:af:e0:36:8a:07:fe:16:f9:33:3b:86:91:72:
                    ad:06:db:a2:d2:ae:f1:72:c8:6a:94:bc:9e:79:57:
                    b2:19:ad:19:5a:86:84:0c:cd:60:e7:80:eb:51:eb:
                    a9:4f:ad:af:ef:93:32:49:db:4f:c9:b4:5b:40:1b:
                    36:0d:40:fb:06:d4:2d:85:a6:96:b9:51:ca:43:a5:
                    ed:1a:88:eb:92:68:a7:85:7a:c2:9b:8b:ce:1b:0a:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:62:EB:07:A1:F2:CD:A7:CB:7C:15:B3:18:E3:D6:6A:38:C8:E0:AB
            X509v3 Authority Key Identifier:
                keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ad:8f:1b:a8:df:79:fb:c4:8d:b9:96:50:f4:f6:11:e9:67:
         60:95:26:9b:78:79:25:ff:78:8d:eb:af:18:08:a3:79:45:16:
         d2:06:ee:c8:4d:aa:d9:f0:94:7c:7d:f9:5f:be:ce:fd:22:4b:
         57:35:94:be:6c:63:1d:da:f4:bc:e7:4a:d3:28:1d:8f:81:c1:
         80:52:0c:dd:55:41:eb:b4:4b:ae:3e:1d:7b:b0:be:15:65:99:
         88:ab:09:9c:90:f6:79:03:77:99:39:e0:aa:df:f6:f7:f7:46:
         54:57:96:b7:3d:ca:84:fa:97:cf:a3:0e:4d:ed:e2:2c:2f:87:
         6c:8d:de:cd:e5:71:75:a8:3d:28:1f:d3:91:d0:b2:97:66:23:
         ad:aa:1a:a1:23:21:02:d9:07:96:46:a6:a5:d8:db:e0:90:08:
         45:6c:7d:59:ee:ef:1b:10:79:91:69:8f:dc:87:82:51:39:27:
         9f:52:5e:4d:cf:7f:12:48:b5:37:2a:31:33:34:59:84:5d:bf:
         66:dc:a5:80:88:fb:1d:d6:57:9c:4c:31:5f:a6:a2:70:0b:f2:
         6e:f8:20:e8:38:db:ad:eb:59:b2:69:d4:28:10:90:07:43:9f:
         bc:94:61:31:78:30:ba:89:08:0b:dd:44:f1:cf:3a:5b:ee:b7:
         43:d3:5f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:00:11 2026 by rpki-client