Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
File:                     kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json)
Hash identifier:          1hRtVAakwahh2O0L37PRJADGMxXhrqY5NVnA4j28I4Y=
Subject key identifier:   01:B2:A1:5E:D0:52:7D:F1:00:D0:30:5B:4B:7E:8E:9E:23:37:0C:E5
Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
Certificate issuer:       /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
Manifest number:          01BD
Signing time:             Thu 23 Jul 2026 05:18:52 +0000
Manifest this update:     Thu 23 Jul 2026 05:18:51 +0000
Manifest next update:     Thu 30 Jul 2026 05:18:51 +0000
Files and hashes:         1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: lE72o87sil2QnZ10C9iXeYkboh/IezliTQLDoxvC548=)
                          2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: DnFLfRNolDS9uaJNFyfTk6IoS5wsIvFbDILScGzhK3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
                          rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
        Validity
            Not Before: Jul 23 05:18:51 2026 GMT
            Not After : Jul 30 05:18:51 2026 GMT
        Subject: CN=6a61a43c-511d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:65:81:19:86:cf:94:f2:ba:0f:bf:cc:87:e8:
                    dd:a6:7d:93:13:73:7b:ec:cf:cb:89:75:3e:0f:66:
                    bb:84:82:46:b6:8b:0a:d9:b4:00:9c:0f:90:86:07:
                    1d:30:85:9e:11:09:55:c5:09:d2:27:3f:d1:74:b8:
                    62:70:f7:ab:a6:a7:c8:05:36:d1:b0:17:98:3e:f5:
                    f4:3d:0b:8f:01:0e:f5:fe:f4:8a:bb:e1:30:29:37:
                    b7:50:40:11:0d:ee:5e:5b:7b:b4:4a:b6:69:11:e9:
                    31:ce:31:55:93:f0:5a:2b:d5:7d:63:81:16:fd:7f:
                    d3:dd:16:98:a3:30:f6:d1:74:3c:a6:23:ac:3b:95:
                    ca:cd:f3:1d:de:e7:74:82:ab:62:12:cb:3d:77:7d:
                    9a:a2:4a:5f:14:c3:d3:c8:0a:8a:86:4c:f1:92:8e:
                    a3:14:09:23:a4:1d:37:72:5a:2e:77:61:40:3c:0c:
                    32:c8:98:bc:f1:bb:19:de:1d:da:f9:90:5f:d7:f8:
                    0f:07:4e:bf:3d:f9:6f:5c:ab:71:f5:78:b7:38:4b:
                    19:7a:db:dc:c8:f7:ea:ce:f4:25:42:e4:83:86:92:
                    c2:d5:bd:10:76:2d:c2:ec:73:71:ec:25:ac:c0:1a:
                    e5:eb:ea:40:1e:f2:7f:e9:32:7e:85:e8:d4:bd:62:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B2:A1:5E:D0:52:7D:F1:00:D0:30:5B:4B:7E:8E:9E:23:37:0C:E5
            X509v3 Authority Key Identifier:
                keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:63:2a:66:87:5f:19:d6:e3:db:2b:c7:65:a2:f6:4e:66:8d:
         1b:50:54:f4:68:47:57:8d:04:59:d6:32:c2:4d:ab:20:f2:14:
         16:4f:5b:bd:69:8e:2c:d5:ab:05:43:e0:4e:c7:5c:38:5f:ef:
         76:fc:f0:a9:27:33:e6:a6:27:6e:e6:2e:65:2e:79:b0:4e:b1:
         92:d8:0d:a5:94:c6:d0:eb:ee:85:e4:2c:4c:2f:98:19:96:3c:
         80:dd:a0:8f:6b:47:ed:48:9b:92:d2:4d:fe:bc:78:6b:7c:bf:
         66:7a:8f:92:54:3e:5d:8c:f2:a0:46:01:d4:67:43:f9:aa:56:
         63:2f:95:45:69:27:b4:03:77:4f:ad:56:6c:10:f3:cf:c2:e4:
         b9:28:e3:98:77:6a:04:ef:21:ef:d4:5c:c7:65:c4:4c:f9:c1:
         7c:d5:71:a9:6d:42:17:30:f0:f4:1f:4b:f9:46:cc:d4:13:08:
         0d:36:e3:d8:95:3d:84:91:8a:16:cb:59:28:64:3b:b5:92:72:
         72:bc:84:69:06:32:01:ba:e2:12:fb:f1:81:68:a3:a0:f0:fb:
         92:8c:a8:ab:1b:ba:c7:07:86:aa:ed:59:12:b8:ba:40:e3:cb:
         df:52:02:11:d9:80:fb:a2:2a:53:ea:de:65:9b:72:d8:18:ca:
         5e:9b:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:43:41 2026 by rpki-client