Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
File:                     KTvwacT02DHu52nVsTnjAh2zSwA.mft (raw, json)
Hash identifier:          MtFZenWvhQ49tUsOIiilVBoTkQqv2sF8GY8Spfs8/mg=
Subject key identifier:   A9:AE:6C:46:D7:9D:97:D6:E7:71:FD:77:E8:79:47:AE:8F:CC:B4:3C
Authority key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
Certificate issuer:       /CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
Manifest number:          017D
Signing time:             Thu 23 Jul 2026 06:13:10 +0000
Manifest this update:     Thu 23 Jul 2026 06:13:10 +0000
Manifest next update:     Thu 30 Jul 2026 06:13:10 +0000
Files and hashes:         1: KTvwacT02DHu52nVsTnjAh2zSwA.crl (hash: Og5HeETutJc9YbeLx2kWjEWkZr2IRgEXwbRjvmhmgeU=)
                          2: AB61CD86D51811F09422126CC4F9AE02.roa (hash: TLLdIsk74f1u3haWZpgZc348xyx6vBubsic7GeU/I8Y=)
                          3: 62959E66682B11F09ECB0C24C4F9AE02.roa (hash: TDlLh34Bo1Qa+MNIEkMopEk/3BJaO3P1cNy38YBcx/A=)
                          4: AAF88862D51811F0B469126CC4F9AE02.roa (hash: TL/EtRu22ONIBQU9AjMsDMVh2O5yUU42eXjpY7kgULg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl
                          rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:13:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
        Validity
            Not Before: Jul 23 06:13:10 2026 GMT
            Not After : Jul 30 06:13:10 2026 GMT
        Subject: CN=6a61b0f6-d7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f4:e2:fe:3e:45:e7:dc:5f:18:46:64:ba:b1:
                    48:83:f1:31:d5:b6:cd:a3:d2:ce:ff:eb:69:b1:8a:
                    d5:57:a5:d4:f5:99:be:5e:35:fc:49:d8:4f:24:50:
                    49:de:d0:eb:a0:2e:fc:3f:22:3f:4f:18:b6:cc:53:
                    10:cc:f4:71:95:32:06:1d:0b:9f:17:79:27:78:19:
                    b1:f1:71:b7:a9:5d:7d:ce:04:2d:67:e8:7b:34:63:
                    fa:c3:23:18:be:26:a4:8e:5c:45:18:bd:40:7b:2f:
                    bf:db:bd:86:0c:b4:e7:d8:68:c8:9c:19:d2:7b:13:
                    2a:89:10:11:d7:b4:1b:ed:15:5f:a4:5a:60:06:6d:
                    02:f3:65:44:c6:ce:b4:b1:28:44:10:1b:18:ed:12:
                    a1:52:13:55:6b:97:b7:aa:29:5f:27:bb:b8:ce:61:
                    5b:3e:a4:52:62:ec:a8:6c:85:65:af:8e:c1:fa:b9:
                    8c:0a:b8:6e:23:44:ce:e3:6c:30:cc:00:29:fc:32:
                    d5:7b:b6:e4:88:63:66:65:9d:65:d1:f8:f0:f4:4a:
                    a6:3d:d2:68:6e:4a:2e:e6:f7:01:83:bf:3e:1f:3b:
                    1b:ae:b1:ad:16:17:de:42:04:e1:1a:8a:6c:0d:06:
                    3f:4d:38:13:c9:93:eb:1f:06:69:d0:df:a9:1f:ff:
                    8c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AE:6C:46:D7:9D:97:D6:E7:71:FD:77:E8:79:47:AE:8F:CC:B4:3C
            X509v3 Authority Key Identifier:
                keyid:29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b8:5f:d0:5c:7f:19:30:6a:26:b4:6d:30:e3:6f:2e:6d:af:
         08:39:a1:e7:27:6b:b8:fb:59:18:c9:48:59:69:ac:cb:04:9d:
         aa:03:5b:5f:5d:24:9c:f7:31:ad:3d:45:62:7c:e4:09:87:d2:
         37:eb:58:f3:b5:25:d9:79:35:3d:4c:70:cd:f8:27:34:d0:9e:
         f8:81:6d:24:89:63:07:ca:bd:8b:a9:5a:a4:e5:9e:91:8d:bc:
         b9:22:21:93:ba:ae:0f:6a:7b:05:c6:50:41:a7:fd:a4:5c:c2:
         6f:a7:03:91:cf:68:a1:26:75:e4:32:51:ff:06:f6:d4:32:f8:
         66:14:c6:56:05:51:f2:07:fd:65:30:47:51:4b:2e:53:b7:94:
         53:83:46:cc:a6:59:c9:c7:dd:72:85:83:cd:c2:78:97:69:54:
         f0:2b:b3:4c:49:38:06:ba:50:e1:44:2b:a8:6d:49:6c:02:a0:
         07:22:08:05:79:6e:58:e5:87:a7:cb:dc:59:cc:ab:d7:22:e8:
         be:4f:f2:d6:ea:73:52:47:54:49:9a:32:7d:ea:bc:46:b7:7b:
         28:7c:21:ff:4c:69:b0:cb:bb:a5:82:70:6f:20:d7:2c:32:0e:
         d8:10:58:5a:55:65:d8:b9:9f:5f:03:27:ed:62:14:4e:b5:f6:
         9e:52:69:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:33:35 2026 by rpki-client