Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft
File:                     Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json)
Hash identifier:          LsforP7GioJnF8BFYZkcwAuARPUXwMmZ15qpj9kPycc=
Subject key identifier:   78:70:DA:D4:8F:5A:CE:50:05:08:3C:59:EF:84:82:15:F3:D1:1B:18
Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
Certificate issuer:       /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Certificate serial:       01D1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft
Manifest number:          01B9
Signing time:             Thu 23 Jul 2026 05:36:03 +0000
Manifest this update:     Thu 23 Jul 2026 05:36:03 +0000
Manifest next update:     Thu 30 Jul 2026 05:36:03 +0000
Files and hashes:         1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: msgVSRg+4ORENx21kL+sRfT8MBYtNoNjhmWuvuJy9ss=)
                          2: C1E322166EED11F18F31218277A30FBC.roa (hash: GEolcSTbn4J2qEWmr9khuFdb/7XicsOBCVRi8ABL75I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl
                          rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
        Validity
            Not Before: Jul 23 05:36:03 2026 GMT
            Not After : Jul 30 05:36:03 2026 GMT
        Subject: CN=6a61a843-5d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:68:60:1e:75:35:0e:72:31:fc:1c:60:b6:
                    14:43:50:aa:f0:f6:04:f8:41:85:ba:3a:8b:1d:92:
                    e7:0f:49:2e:c5:2e:fc:4e:91:73:16:59:aa:87:77:
                    9b:db:58:18:76:88:72:28:e3:87:87:99:f8:3a:5c:
                    c8:9c:31:29:1a:f7:9a:2a:a1:96:62:af:7f:92:93:
                    51:8f:64:d3:c0:1f:07:f5:55:ba:09:a5:59:19:2e:
                    fb:14:2a:fe:72:dd:76:2d:ae:48:64:4b:4d:c1:f4:
                    ba:30:10:a0:05:8b:b3:7b:e4:3c:be:2c:bb:68:c8:
                    69:8e:50:7b:3c:14:02:55:27:44:55:e7:24:15:ab:
                    e4:81:81:c0:63:0f:f7:fb:ce:a4:8d:c3:34:1b:2e:
                    7f:11:a6:c3:20:1c:6c:c1:96:fa:f8:83:48:0b:37:
                    0e:90:67:48:32:8a:c7:6e:bd:73:25:4d:51:e6:08:
                    8e:5a:f1:01:b6:12:d5:8c:5f:47:27:00:c2:7c:d6:
                    ab:af:aa:5c:6f:63:34:d3:80:92:3d:dc:7e:64:76:
                    8f:58:a2:79:45:22:50:c5:a9:1b:dc:4a:c9:33:d6:
                    11:8f:a6:ca:06:0f:25:cd:d4:21:a5:d4:60:3c:f3:
                    ec:01:b0:4d:af:e7:2f:5e:1a:46:2d:0e:be:60:da:
                    99:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:70:DA:D4:8F:5A:CE:50:05:08:3C:59:EF:84:82:15:F3:D1:1B:18
            X509v3 Authority Key Identifier:
                keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f4:61:e7:f8:9b:86:ff:43:f6:31:1d:f9:e5:e7:30:17:ef:60:
         16:3f:e5:91:fa:86:e1:d6:b4:67:7c:ac:50:aa:62:6e:8f:fc:
         90:61:67:96:db:73:5c:46:b1:1c:b3:dc:33:4a:d5:39:1d:c0:
         b7:a7:53:c9:f4:6a:9a:5b:e3:83:87:aa:ee:0b:4a:a5:e1:91:
         4f:de:a5:f4:a2:30:01:b6:e5:0e:7d:c4:07:32:bc:cc:60:0d:
         bd:0e:cc:9d:7e:68:71:41:3a:c2:3d:d3:22:1c:e8:a1:fa:b5:
         79:dc:c7:31:af:e5:f9:da:94:cd:a5:a4:bc:e5:cf:c7:94:9a:
         a9:50:11:20:ff:12:1c:c7:fc:2e:5f:c3:54:72:a2:42:66:c6:
         4c:fa:24:eb:f7:fb:f9:27:e0:84:dc:0c:88:67:c5:d7:3c:5d:
         90:67:da:19:78:b9:41:08:3b:0c:56:05:9a:74:20:d2:54:37:
         d6:85:f9:14:1e:83:1c:8a:cb:40:a2:d3:a2:e7:78:01:f0:d3:
         86:5d:5a:92:58:ee:bc:cc:6b:ea:b5:ef:21:87:15:51:21:a3:
         7e:7d:f1:e5:da:58:9f:da:1c:09:0e:21:39:29:b1:74:6b:ae:
         5b:c6:db:04:78:ed:5f:8f:bf:fc:ea:d2:f8:eb:f0:62:b3:c8:
         fe:e8:1a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:22:46 2026 by rpki-client