Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
File:                     kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json)
Hash identifier:          8Fw1OLXIANtyzdtUTIbzkIJW9Ciw/Z52Hpq3mQZzabk=
Subject key identifier:   E3:DD:F6:19:99:41:47:3F:F3:59:27:94:54:01:EA:E5:BC:88:A1:60
Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E
Certificate issuer:       /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E
Certificate serial:       0DB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
Manifest number:          0DA4
Signing time:             Wed 22 Jul 2026 18:08:29 +0000
Manifest this update:     Wed 22 Jul 2026 18:08:28 +0000
Manifest next update:     Wed 29 Jul 2026 18:08:28 +0000
Files and hashes:         1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: U0IAKyklRJ/xqOM1MGTsk4jmgFpqWkyuJbCw2Hh6oAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl
                          rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3511 (0xdb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E
        Validity
            Not Before: Jul 22 18:08:28 2026 GMT
            Not After : Jul 29 18:08:28 2026 GMT
        Subject: CN=6a61071d-02b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:46:25:d3:1d:af:cf:bd:e6:c7:a5:f0:b2:
                    d9:c8:86:cd:5a:d8:04:63:66:a4:2b:b0:ea:e3:cb:
                    f5:e8:5e:0b:ab:aa:05:af:e1:0e:a0:2e:bc:a8:73:
                    29:02:86:5d:52:d9:e7:8c:41:81:ea:24:f4:88:e7:
                    69:3e:5c:37:93:65:68:90:5d:4f:ee:cf:10:2a:56:
                    7b:2c:e0:d7:1f:e2:77:56:54:73:e5:9f:4c:30:fc:
                    89:57:09:a2:c2:e0:1a:90:9a:23:f7:1d:63:df:96:
                    32:7a:d5:be:3e:e8:30:61:de:4d:53:3b:ad:76:77:
                    b9:22:c0:dd:59:c8:f9:50:48:bf:8e:13:f1:a9:da:
                    b7:e1:bb:32:82:44:c5:61:2e:56:54:3f:0d:8b:6a:
                    7d:8b:b5:a8:d1:97:a6:da:33:1c:6a:7c:da:4d:0d:
                    b5:0f:b0:db:c8:c9:a7:24:92:73:1e:68:dc:ec:21:
                    59:9e:42:51:91:dc:9f:61:7b:da:20:8d:b5:62:ec:
                    e5:a5:03:e8:02:6c:ee:61:58:0f:ce:fc:64:27:10:
                    5f:5b:79:79:36:e4:90:90:b6:ca:b6:02:4e:ab:04:
                    7e:7e:53:94:a2:08:be:d5:d2:c8:44:6c:a3:69:a1:
                    e7:1a:77:ce:d1:db:1f:13:d5:09:b9:f5:5f:78:f1:
                    ce:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DD:F6:19:99:41:47:3F:F3:59:27:94:54:01:EA:E5:BC:88:A1:60
            X509v3 Authority Key Identifier:
                keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:aa:f1:aa:6c:5a:95:d1:28:e4:77:69:b6:6d:7e:80:ea:42:
         f3:c0:50:e9:33:0a:9b:4d:9f:c7:0d:f5:ba:db:51:79:e8:53:
         50:9e:73:5a:ff:94:ba:fa:dd:21:a8:1c:d1:80:3d:dd:eb:6f:
         ef:64:bf:52:20:d9:90:76:a3:1f:e1:1d:32:54:f5:d5:aa:52:
         ab:d8:33:05:e4:3c:2a:b5:43:ad:eb:5b:47:6e:b0:b7:05:78:
         53:b2:78:25:96:da:6f:6c:6f:e7:a2:f7:64:bf:77:9a:67:81:
         8d:63:8b:41:f7:86:b7:91:4d:96:ab:df:c0:a8:2d:21:25:e9:
         05:1e:4f:4a:dd:eb:80:a2:e7:6d:6b:92:f4:73:4a:40:47:c5:
         a4:ed:59:86:8e:5f:64:cb:4e:82:50:a7:d5:c3:ab:1a:11:6e:
         d8:48:d9:f1:14:ef:bc:2c:d2:6c:7a:c1:9d:30:7f:38:72:18:
         2f:3e:c9:f5:4b:b0:3e:3b:e8:51:af:05:cf:a8:17:49:f1:b6:
         75:c8:60:7d:1b:14:82:7f:83:30:a7:04:60:23:8b:c5:22:af:
         d6:7c:ce:e5:49:b9:28:ce:d9:65:2c:1e:f9:4a:cc:7c:5a:ac:
         b9:43:d0:38:7b:52:b4:8f:67:56:da:95:a5:63:59:91:77:ac:
         a2:c7:f1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:21 2026 by rpki-client