Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
File:                     KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft (raw, json)
Hash identifier:          8qwwzqSO5BA1gq6fP3YTHe50DKdnh5oIDsxKg+k5mec=
Subject key identifier:   13:23:1B:FF:5F:EA:10:1D:E5:38:C4:AE:2F:42:F2:7B:AE:4C:76:E3
Authority key identifier: 28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91
Certificate issuer:       /CN=A91DA252/serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691
Certificate serial:       0A8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
Manifest number:          0A80
Signing time:             Wed 22 Jul 2026 19:59:11 +0000
Manifest this update:     Wed 22 Jul 2026 19:59:11 +0000
Manifest next update:     Wed 29 Jul 2026 19:59:11 +0000
Files and hashes:         1: KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl (hash: fU1mCdqB/KcQexGIpewIDuDOnOIMcgE1pW4ip3U3NLU=)
                          2: 81E66AB486DD11EAA5DCD466C4F9AE02.roa (hash: tMZ5eMTtP1d92HOozzJdgHksx9o6zVLKwH65RdaVt8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl
                          rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2698 (0xa8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA252, serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691
        Validity
            Not Before: Jul 22 19:59:11 2026 GMT
            Not After : Jul 29 19:59:11 2026 GMT
        Subject: CN=6a61210f-c3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:1d:31:9d:08:f9:86:a8:a9:3a:da:9b:3f:
                    cb:ae:8c:e2:bf:13:29:54:1d:0d:fa:ef:4e:75:3f:
                    bb:19:45:a9:b5:bc:a9:c6:27:31:9e:8d:10:ea:17:
                    10:cd:c6:46:d1:c7:d9:5a:6c:cc:ff:e0:32:f2:f7:
                    73:05:12:f2:db:33:3c:43:21:ef:28:c3:b4:a3:bb:
                    b8:5e:2a:27:3d:c8:e6:7e:d5:e2:80:a9:c1:25:bf:
                    19:c6:08:89:e8:f5:26:d2:83:78:c7:d9:49:db:22:
                    9d:59:b1:3d:38:f8:21:1f:59:73:6c:07:75:19:d0:
                    a0:dc:b3:a7:a8:8e:87:15:99:bf:3f:d3:4d:43:58:
                    42:b5:55:93:49:00:38:20:d4:1d:a4:a2:63:3a:26:
                    ee:04:be:1c:70:fb:bd:bd:41:1b:8f:23:b4:cb:46:
                    82:96:13:04:f7:f7:df:35:73:10:70:26:81:34:63:
                    9c:f6:53:c9:57:f8:fa:c2:00:aa:dc:68:72:b9:d8:
                    12:c3:e8:d2:f1:c6:26:4c:10:bc:49:21:64:48:73:
                    2d:73:db:8d:89:05:ac:20:d6:dc:99:43:09:3c:cd:
                    4a:ae:f8:1a:64:96:34:1d:52:c7:2c:f2:1e:c3:ff:
                    8d:52:80:03:1c:53:08:82:4f:5e:ce:0a:06:9c:57:
                    1b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:23:1B:FF:5F:EA:10:1D:E5:38:C4:AE:2F:42:F2:7B:AE:4C:76:E3
            X509v3 Authority Key Identifier:
                keyid:28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:67:7b:b3:0b:08:bb:9a:8d:e0:17:08:a2:c0:da:59:0e:c0:
         71:0d:50:33:1d:32:1f:50:74:2e:77:05:ea:17:62:9d:c9:0a:
         06:4d:38:66:c4:93:1f:f8:09:e0:32:9d:07:e0:8d:cf:17:0b:
         25:61:f7:2c:ff:6b:b4:7b:ca:d6:78:20:81:76:f3:3e:54:7e:
         d3:ab:65:61:d8:38:18:44:33:07:38:d2:ae:78:4e:66:08:94:
         86:d0:f1:44:ee:fe:ce:bf:f8:b5:63:e1:35:6e:75:0a:b3:a8:
         f5:f0:a1:68:bb:dc:6c:af:02:7c:62:15:65:ab:6b:c5:11:01:
         ef:90:83:e0:28:e9:7c:5d:7c:de:29:47:cc:4b:52:31:9b:e2:
         4b:c7:9a:82:ca:40:6b:33:2b:b9:f9:e0:2b:d4:b0:eb:bf:0d:
         ff:11:f0:cf:1f:a8:08:69:17:86:7f:62:47:7f:52:b3:99:54:
         57:07:be:28:38:cd:71:36:3a:4e:06:ce:24:c6:29:4a:77:e4:
         b8:20:dc:4c:b8:e4:5b:0a:74:75:d3:35:8e:94:27:08:9e:cc:
         f6:ec:7f:9e:82:bc:51:ee:20:3b:62:2a:b6:ba:b9:cb:b5:34:
         6e:89:60:c8:24:45:94:e5:11:9e:5a:14:b4:61:4e:ed:a6:0b:
         cd:82:8f:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REEyNTIxMTAvBgNVBAUTKDI4RjE4RUM3NDlFQTkxQjVBMzI5OTc0OUYyQUJFMjc4
OEExMEM2OTEwHhcNMjYwNzIyMTk1OTExWhcNMjYwNzI5MTk1OTExWjAYMRYwFAYD
VQQDEw02YTYxMjEwZi1jM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAufUdMZ0I+YaoqTramz/LrozivxMpVB0N+u9OdT+7GUWptbypxicxno0Q6hcQ
zcZG0cfZWmzM/+Ay8vdzBRLy2zM8QyHvKMO0o7u4XionPcjmftXigKnBJb8ZxgiJ
6PUm0oN4x9lJ2yKdWbE9OPghH1lzbAd1GdCg3LOnqI6HFZm/P9NNQ1hCtVWTSQA4
INQdpKJjOibuBL4ccPu9vUEbjyO0y0aClhME9/ffNXMQcCaBNGOc9lPJV/j6wgCq
3GhyudgSw+jS8cYmTBC8SSFkSHMtc9uNiQWsINbcmUMJPM1KrvgaZJY0HVLHLPIe
w/+NUoADHFMIgk9ezgoGnFcbzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMjG/9f
6hAd5TjEri9C8nuuTHbjMB8GA1UdIwQYMBaAFCjxjsdJ6pG1oymXSfKr4niKEMaR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTI1Mi9GMDgxNzE2ODg2
REMxMUVBOUJEM0M0NjZDNEY5QUUwMi9LUEdPeDBucWtiV2pLWmRKOHF2aWVJb1F4
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tQR094MG5xa2JXaktaZEo4cXZpZUlvUXhwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTI1Mi9GMDgxNzE2ODg2REMxMUVBOUJEM0M0NjZDNEY5QUUwMi9LUEdPeDBucWti
V2pLWmRKOHF2aWVJb1F4cEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfGd7swsIu5qN4BcIosDaWQ7AcQ1QMx0yH1B0LncF6hdinckKBk04ZsSTH/gJ
4DKdB+CNzxcLJWH3LP9rtHvK1ngggXbzPlR+06tlYdg4GEQzBzjSrnhOZgiUhtDx
RO7+zr/4tWPhNW51CrOo9fChaLvcbK8CfGIVZatrxREB75CD4CjpfF183ilHzEtS
MZviS8eagspAazMrufngK9Sw678N/xHwzx+oCGkXhn9iR39Ss5lUVwe+KDjNcTY6
TgbOJMYpSnfkuCDcTLjkWwp0ddM1jpQnCJ7M9ux/noK8Ue4gO2Iqtrq5y7U0bolg
yCRFlOURnloUtGFO7aYLzYKPQQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:28:44 2026 by rpki-client