Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
File:                     kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft (raw, json)
Hash identifier:          5M/ZnK9UYeLNniGmc2dC/5Z+TVg3BKZygI/qIZ0h2QU=
Subject key identifier:   17:17:18:60:0B:4F:3C:E6:CB:A3:F7:6F:4D:6E:02:4E:61:1C:65:09
Authority key identifier: 91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57
Certificate issuer:       /CN=A91BC1CE/serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
Certificate serial:       1136
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
Manifest number:          112C
Signing time:             Wed 22 Jul 2026 17:22:47 +0000
Manifest this update:     Wed 22 Jul 2026 17:22:46 +0000
Manifest next update:     Wed 29 Jul 2026 17:22:46 +0000
Files and hashes:         1: kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl (hash: fur5PFZFmdeFb3n1alPKE06pMxAGrF+18pFs3w9adSM=)
                          2: 4178B83237ED11E99B3C9C4AC4F9AE02.roa (hash: 4agi+QhWWtUPKmH1/dW+seJgI+qk+4RdSuU9ar5oRKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl
                          rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4406 (0x1136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC1CE, serialNumber=91F2DE67C8E65BB533ED8F3C64F32DF9C695C057
        Validity
            Not Before: Jul 22 17:22:46 2026 GMT
            Not After : Jul 29 17:22:46 2026 GMT
        Subject: CN=6a60fc66-46ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:7d:2d:ed:c2:57:f4:3c:b7:ff:49:c3:e3:
                    a5:f6:58:e0:4d:d1:03:d3:ad:f6:ec:76:6e:7c:56:
                    76:90:0a:08:0d:b7:ca:3c:64:d3:bc:42:16:9a:1b:
                    a6:6d:d8:0b:1a:f1:e2:d1:e8:53:d0:bf:e9:d1:04:
                    d8:33:d7:59:b6:20:d7:ff:76:3b:26:e5:88:7b:90:
                    d2:de:ad:35:6a:61:c5:7c:56:74:e5:09:cb:50:45:
                    b0:3e:1f:b6:69:ec:8a:f7:8f:31:cd:94:8a:96:94:
                    47:7c:18:06:9c:ae:ad:37:93:48:ea:08:00:da:8d:
                    9c:97:50:ce:21:6f:ca:d3:13:82:77:34:cf:cd:ed:
                    b4:a7:52:94:18:d3:89:33:04:5c:b6:84:99:58:c3:
                    2e:ac:0b:b8:17:18:f9:81:dc:66:f2:80:c6:13:36:
                    1d:a3:a8:95:39:de:28:9a:cd:5a:8f:4c:30:07:e4:
                    3e:74:3a:c9:45:35:13:32:01:2f:0f:51:60:21:30:
                    34:7c:bd:2a:06:e8:f0:75:c6:95:a4:19:1c:9d:1a:
                    2e:fd:59:47:24:ac:38:1b:35:9b:3d:9f:b0:66:8c:
                    9d:24:e3:d9:37:67:38:aa:44:4e:40:18:11:2d:ec:
                    2a:02:f0:95:cd:a0:41:a0:62:85:4d:ba:cf:5e:1e:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:17:18:60:0B:4F:3C:E6:CB:A3:F7:6F:4D:6E:02:4E:61:1C:65:09
            X509v3 Authority Key Identifier:
                keyid:91:F2:DE:67:C8:E6:5B:B5:33:ED:8F:3C:64:F3:2D:F9:C6:95:C0:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC1CE/24FA60E437EC11E9A875E848C4F9AE02/kfLeZ8jmW7Uz7Y88ZPMt-caVwFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a0:3f:4a:2e:0b:e9:55:ad:7a:99:01:df:79:b8:69:2f:75:
         e2:f0:f2:c2:6b:94:ea:1e:63:65:87:5d:55:26:7d:8d:5f:c2:
         03:c6:dc:ae:38:52:8f:34:dc:f8:5b:2d:47:15:c5:d4:95:55:
         a2:7c:73:2d:f0:e9:7b:0f:65:59:6c:c5:7b:d0:20:2c:c4:e9:
         a2:82:5c:56:af:89:ce:d8:b7:2b:cb:09:9a:88:dc:ce:ca:bc:
         1f:16:7a:e8:cf:2a:14:d8:3c:15:23:f3:36:4d:a6:c0:fc:0e:
         37:1d:1e:14:ca:a0:72:5d:8a:dd:68:00:4a:df:c3:d6:7b:52:
         16:f6:51:63:e5:c8:4a:14:e6:b1:de:fe:0b:69:3f:d2:58:3a:
         e0:15:2f:b9:fb:9c:48:09:64:fc:13:4f:8c:61:a1:99:f8:69:
         d7:c2:38:c3:44:b7:f9:98:7d:f1:13:67:94:87:20:8f:1b:3f:
         c2:cf:d1:35:fb:37:70:27:27:67:1e:61:14:eb:26:a8:74:e5:
         f5:93:c3:f3:37:1e:de:29:3a:34:29:a8:d2:33:9d:96:53:b4:
         68:8e:4b:9f:03:ea:8d:26:13:58:ed:ba:f7:3a:be:8e:c2:15:
         14:36:13:14:54:af:4b:c5:01:aa:83:7c:10:a5:86:27:d0:78:
         35:63:4e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:38:29 2026 by rpki-client