Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
File:                     -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json)
Hash identifier:          ce5N6dsPcWmyk8mUII2j4/Nrg84npt8DSVPWcWe3h0E=
Subject key identifier:   26:2D:36:2D:F7:C5:9D:A1:DB:2B:F2:4B:DF:5A:E2:A0:DD:C5:82:21
Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
Certificate issuer:       /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
Manifest number:          0130
Signing time:             Thu 23 Jul 2026 07:18:48 +0000
Manifest this update:     Thu 23 Jul 2026 07:18:48 +0000
Manifest next update:     Thu 30 Jul 2026 07:18:48 +0000
Files and hashes:         1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: F51GMaNFiJSRpufSNY4y2zGFwDNivzqdM5lMzKCdwyA=)
                          2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: 0O2Y56VE28BDUyW/y7K+tvSZF089IWlNTSJ1ih9VrPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
                          rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
        Validity
            Not Before: Jul 23 07:18:48 2026 GMT
            Not After : Jul 30 07:18:48 2026 GMT
        Subject: CN=6a61c058-0b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:15:77:3d:70:14:01:be:13:db:2e:88:e6:
                    c5:c2:66:69:bd:cf:45:2a:93:17:9f:c7:aa:c7:60:
                    b6:49:22:b0:17:12:a3:41:ef:6e:33:3f:62:97:d9:
                    56:27:49:2d:b1:58:b2:aa:d4:f2:98:90:2b:34:89:
                    64:ad:eb:ae:5c:36:94:ec:2a:cd:d8:5c:0f:50:67:
                    71:71:c8:60:76:75:f6:50:8d:6c:67:9b:31:c6:6d:
                    49:35:7e:91:3d:83:34:b3:1a:7b:28:43:95:12:6c:
                    28:9d:4c:ea:0a:d6:5d:16:f7:64:4f:82:c8:38:00:
                    54:82:c2:92:8e:02:3d:e0:ea:f5:f3:18:14:40:72:
                    c7:7a:36:32:f9:1b:15:97:40:af:e1:2f:be:b0:05:
                    9c:1d:00:03:63:16:da:9e:81:de:da:4b:6a:00:b4:
                    74:c0:1c:44:7a:34:2e:da:a0:04:64:4b:42:82:5a:
                    2d:5a:30:70:92:97:35:46:46:69:1e:74:2e:8c:a1:
                    8e:ed:df:a6:af:b9:8e:3d:b6:9b:35:3c:95:e3:30:
                    7d:63:4b:5b:1c:c1:53:60:68:95:d6:85:8a:b3:94:
                    99:f0:c1:47:7e:77:6b:d4:47:8d:19:08:ba:2d:03:
                    ce:e8:bb:60:5f:7e:d9:09:bb:64:08:8f:52:ad:08:
                    55:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2D:36:2D:F7:C5:9D:A1:DB:2B:F2:4B:DF:5A:E2:A0:DD:C5:82:21
            X509v3 Authority Key Identifier:
                keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:98:c3:2b:6b:17:00:f5:53:dc:59:be:a4:e4:88:3e:89:20:
         ed:7f:a5:74:45:bd:3b:65:19:ee:27:aa:2b:71:e5:66:1e:f9:
         13:5b:43:f0:ec:0c:38:2b:77:f3:05:00:df:30:fb:ce:96:cb:
         e9:be:a6:04:cf:ea:d4:35:ff:b1:56:56:78:11:dc:4c:37:3d:
         38:1b:a4:4b:ed:5c:96:9c:9f:a3:4d:c4:ab:75:e9:6a:14:6d:
         7a:a7:f4:1a:ef:d6:ab:8a:ff:d9:64:b8:24:77:b0:e0:0b:ca:
         72:16:32:2e:a5:7a:e9:8e:75:1d:8b:9e:c7:f3:c8:62:3a:b5:
         95:18:41:02:c5:ca:1e:b7:1a:61:7a:7b:25:9d:94:68:f7:c1:
         14:1d:03:a8:7f:2f:07:74:41:3b:ad:07:eb:53:59:00:1e:02:
         4b:6d:ae:0b:5c:45:13:e2:e8:71:3c:ea:e8:64:21:35:0e:1c:
         81:71:e2:66:98:c0:de:8b:36:21:2b:1e:87:18:b0:8a:b2:be:
         24:35:a5:fa:2b:60:93:ae:4c:a2:51:d2:77:1b:bb:45:45:7d:
         85:eb:16:27:ed:a3:12:9b:a0:13:3e:2b:a4:8c:87:b6:bc:cb:
         2b:71:dd:1d:11:76:b8:ba:c9:d7:51:24:e7:5a:dc:5a:2b:c8:
         8a:4c:8c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:07 2026 by rpki-client