Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
File:                     kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft (raw, json)
Hash identifier:          jycN6LTGfRfc76PoWEHdbtY8cBRrIXM0QiaU1jhz4Gg=
Subject key identifier:   7A:01:AB:21:3D:CB:A9:9F:49:65:5A:50:6E:48:5E:BF:65:FF:90:CC
Authority key identifier: 91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
Certificate issuer:       /CN=A91C4FB5/serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
Manifest number:          124C
Signing time:             Wed 22 Jul 2026 17:15:25 +0000
Manifest this update:     Wed 22 Jul 2026 17:15:25 +0000
Manifest next update:     Wed 29 Jul 2026 17:15:25 +0000
Files and hashes:         1: kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl (hash: 3tfrnFjwK2W+iYQ+SQrwt5nURyM1ZCjtafSP0yP/7aY=)
                          2: 59ACBA1E5B5011F1A484689580EE528E.roa (hash: zSFiu1yhrWQYfzXu7XQ3kTYOr9VS9WdRx3KYSDFhSHI=)
                          3: 5ACD46A25B5011F1A484689580EE528E.roa (hash: /3nrgcWXZ56O1J79Bt7Rp4QcJq7XbMY/jy1oMPLgjcM=)
                          4: 59142EC05B5011F1A484689580EE528E.roa (hash: /QO8wNozJq4m8L+0sf+XY52fc/jZly2rqPjfRvQ5K9w=)
                          5: 5A3D22165B5011F1A484689580EE528E.roa (hash: e03XnEPO3o2zr+89RCtKmVF1UA9g/w/QMsdb9CferY4=)
                          6: 58722CCE5B5011F1A484689580EE528E.roa (hash: ZlS+zcT5r0ms9dmqfLobs/BgiHTHyfZo/3BVynBGZjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4FB5, serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
        Validity
            Not Before: Jul 22 17:15:25 2026 GMT
            Not After : Jul 29 17:15:25 2026 GMT
        Subject: CN=6a60faad-0968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:67:0e:2a:c4:eb:5c:8d:de:d0:f8:06:5d:
                    b1:66:93:43:53:12:f0:c2:68:c2:85:cf:b1:14:df:
                    5f:15:c7:c9:7f:29:45:bf:95:bd:fc:66:a3:87:c8:
                    38:dd:b2:28:58:11:30:ab:26:88:ac:c1:46:b5:82:
                    1a:98:bd:69:e8:63:b6:ac:ac:98:e6:2c:ee:03:42:
                    41:83:2f:dd:b6:6c:d2:40:a2:6c:e7:86:be:c1:1c:
                    ea:8a:80:23:27:27:02:6f:21:c8:24:6e:ea:72:77:
                    a2:88:85:3c:84:5d:3f:2e:67:0b:80:10:68:9c:c7:
                    bc:aa:85:12:2d:a1:f2:e9:46:ec:9a:67:b7:2d:2b:
                    0a:21:38:31:b1:0c:15:70:c6:35:60:67:7c:a7:dd:
                    39:41:e8:68:25:f4:c8:18:7f:42:e7:72:3c:21:24:
                    cc:da:c4:fe:8f:d5:72:51:e9:f0:52:90:f0:5f:fa:
                    5c:52:b9:ab:ba:80:c8:c4:6e:ff:74:90:84:02:61:
                    bb:8f:1a:f4:07:ac:c5:f4:a0:7c:1d:62:3f:db:56:
                    46:78:60:a7:4a:40:9d:cd:4f:30:c6:4e:e1:74:1e:
                    c5:dc:76:cc:b4:0a:ad:83:eb:d9:1c:f8:41:b9:c2:
                    e2:0d:39:0f:0f:e5:67:df:4e:cf:90:bd:19:17:80:
                    50:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:01:AB:21:3D:CB:A9:9F:49:65:5A:50:6E:48:5E:BF:65:FF:90:CC
            X509v3 Authority Key Identifier:
                keyid:91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:a8:72:e9:ff:71:c8:3c:55:82:72:01:d8:fd:55:c1:e3:e5:
         4b:b4:02:14:57:72:a8:56:f0:2a:ff:15:74:7c:ba:11:b8:c3:
         9b:f0:3a:60:7c:7d:e7:79:91:15:13:09:9e:91:76:a7:ca:ca:
         8e:6e:03:2a:19:fd:50:77:14:30:88:3e:91:b4:32:43:9b:7c:
         fd:b2:86:e7:9c:34:50:ef:45:29:f2:53:05:53:98:88:78:f9:
         28:c7:25:c8:1b:e8:27:42:72:05:7f:f5:ad:71:79:4e:41:09:
         e2:0e:da:b6:7e:90:70:f5:15:1d:54:84:15:39:07:52:6a:31:
         40:6f:a1:e6:bf:8a:fa:06:ac:69:5f:a0:4c:ca:66:02:89:c2:
         7b:95:dc:14:0a:ce:92:83:b4:aa:51:fd:a9:c7:a3:46:eb:6a:
         e2:9a:bc:3e:a5:e4:02:ef:3b:1c:ce:50:b4:4d:95:95:49:43:
         fc:60:49:13:e9:79:fb:f0:3c:95:5b:ee:4c:91:c2:c0:c2:23:
         5d:b6:28:57:76:50:84:79:58:91:00:a0:90:be:ca:ae:c3:16:
         0f:1e:24:51:36:88:ea:89:ea:0c:16:c0:b4:01:cb:cc:aa:f1:
         79:33:ee:8d:dc:30:ae:e6:eb:95:96:48:37:b2:3f:1d:fb:2c:
         51:ae:37:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:48:37 2026 by rpki-client