Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
File:                     kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft (raw, json)
Hash identifier:          WF8xq9DqcbNjOIW9cho3m0Fk/iRE+b1Wubyojognd9I=
Subject key identifier:   F1:BB:67:60:23:75:06:F0:3F:1F:6A:49:1B:2A:9F:32:DC:39:B9:A4
Authority key identifier: 91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
Certificate issuer:       /CN=A91D8157/serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
Manifest number:          60
Signing time:             Thu 23 Jul 2026 10:18:44 +0000
Manifest this update:     Thu 23 Jul 2026 10:18:43 +0000
Manifest next update:     Thu 30 Jul 2026 10:18:43 +0000
Files and hashes:         1: kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl (hash: +4y6v+69ejp41qr2uzXnph5KMMFr7Uzh02jXX1cbcio=)
                          2: D386B66251D411F185203A1790833773.roa (hash: x9YNhs52Js+F/nkP6R0eX91Umj1eirlfbF7q2WvjGA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
                          rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8157, serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
        Validity
            Not Before: Jul 23 10:18:43 2026 GMT
            Not After : Jul 30 10:18:43 2026 GMT
        Subject: CN=6a61ea84-bfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:45:d4:49:11:bd:ec:4e:18:4f:a3:f0:cb:
                    c7:d6:96:53:78:49:52:d0:21:ae:a0:1d:b7:49:f6:
                    89:5f:df:46:e5:a8:0b:8f:78:29:80:d6:b2:7c:00:
                    26:2c:6f:fc:6e:d3:a9:5d:14:c5:94:f2:ab:53:0b:
                    a1:e6:8f:a1:d4:c7:86:1e:1c:1e:ee:a4:4e:d4:6a:
                    2a:10:fa:e5:e7:9f:6d:16:8f:63:b1:73:54:20:2b:
                    d2:65:0b:93:63:15:ad:ac:45:8d:c7:86:8a:d0:2d:
                    6e:e2:25:51:f5:67:f3:e8:d4:de:1f:39:d6:fa:79:
                    3b:83:6d:01:a6:d2:fb:28:92:51:02:ab:cc:33:99:
                    ee:e4:b3:43:60:77:5d:df:ef:af:4b:c9:b2:88:19:
                    c0:ba:93:36:f6:0b:ba:6d:ce:a8:02:25:4c:13:97:
                    18:94:ff:5a:60:e3:e0:9c:df:74:91:0a:9d:b0:3d:
                    f2:2c:bb:29:c6:23:77:09:4d:17:7e:11:32:b1:0f:
                    05:d1:c1:d2:80:cf:78:20:1d:b3:e8:e8:eb:90:67:
                    5f:f7:a5:1c:9b:ac:e0:99:13:37:9c:a8:b7:65:c6:
                    bd:05:d6:de:f0:dc:00:c9:0b:10:15:37:c9:46:1d:
                    82:60:d5:1d:f3:16:00:ea:2f:13:0b:99:7e:84:11:
                    71:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BB:67:60:23:75:06:F0:3F:1F:6A:49:1B:2A:9F:32:DC:39:B9:A4
            X509v3 Authority Key Identifier:
                keyid:91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f5:85:01:5d:b8:d7:39:8b:a6:4d:e6:19:7a:50:5f:7c:12:
         7a:c9:27:f7:2b:f2:43:a3:a1:44:d3:61:fd:bd:a1:e5:0b:9c:
         06:be:bd:52:00:62:eb:c7:ac:ab:25:6d:a4:00:b5:c4:80:30:
         f1:d3:b3:0d:09:ef:56:4b:db:bd:3a:b4:e8:b4:9a:b0:87:36:
         fa:f8:3c:b1:5b:6c:9a:78:a1:2f:eb:f9:35:ef:6a:fa:8f:3a:
         6d:3c:4d:5a:6a:d7:b4:43:6a:c6:f2:09:9d:ff:ba:12:19:c1:
         10:45:ed:01:73:ff:ea:c1:7a:7e:39:db:cb:88:57:c2:5b:e6:
         bc:00:c4:d3:00:07:5c:b6:d8:c1:ef:c6:33:2a:86:a6:9b:9a:
         ae:80:32:de:1e:67:a9:54:12:f7:81:8b:35:57:7a:de:6c:58:
         e3:8f:71:8a:60:fe:22:dc:d3:f7:d2:93:4a:4e:0e:3a:fb:49:
         3a:80:7f:a2:44:e5:84:c6:f8:79:c1:c6:a0:07:e8:ba:68:f5:
         21:df:25:fe:b3:fb:6b:e2:60:44:4f:53:47:63:b6:bb:f2:33:
         c0:c3:11:3b:75:74:37:80:3b:a0:32:f1:57:2c:35:39:23:08:
         a4:48:51:e2:40:17:36:c6:33:08:bf:61:31:3c:77:23:58:fd:
         2f:e9:a3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:47 2026 by rpki-client