Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
File:                     k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft (raw, json)
Hash identifier:          lb+jzRdX37Gqt9q+egYDdM2xiD1ryYBzfRQTPtVF1tQ=
Subject key identifier:   83:6E:F9:27:A1:65:26:39:AD:1D:F9:CC:1E:7D:21:A7:F3:54:E8:5B
Authority key identifier: 93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9
Certificate issuer:       /CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9
Certificate serial:       149F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
Manifest number:          1482
Signing time:             Wed 22 Jul 2026 16:58:09 +0000
Manifest this update:     Wed 22 Jul 2026 16:58:08 +0000
Manifest next update:     Wed 29 Jul 2026 16:58:08 +0000
Files and hashes:         1: k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl (hash: dyCH5L2Z6FNufxP7WEkIYwwiOb7XfaTCRjN+BQGgMDs=)
                          2: A04E05E42CE911EC8F99F486C4F9AE02.roa (hash: lBBrJlFc6lFPUF/puNjL74UgLNgA767qw8yUAFWXy+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl
                          rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5279 (0x149f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3D15, serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9
        Validity
            Not Before: Jul 22 16:58:08 2026 GMT
            Not After : Jul 29 16:58:08 2026 GMT
        Subject: CN=6a60f6a1-89a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:fe:95:05:21:d9:61:8d:b0:cf:de:00:06:
                    05:21:ac:fe:c0:bd:7b:26:d0:05:c1:9e:98:79:35:
                    60:0e:4f:90:a4:18:7c:e3:44:16:e8:8a:2b:e4:9c:
                    47:e8:f0:e2:89:24:f1:34:75:e1:15:ea:01:a2:70:
                    a9:0d:54:cc:02:b7:42:bd:c9:cc:e8:a5:1d:d1:bd:
                    6d:ba:24:d6:85:53:6f:0f:ae:02:0d:2c:75:dc:bc:
                    9c:42:84:2d:fb:93:ec:93:aa:b4:47:ce:10:13:0d:
                    93:1c:2f:9e:94:25:2b:d8:51:3f:b2:12:77:b3:93:
                    0d:55:cb:9e:ab:c9:de:8e:96:19:98:07:c7:0b:b3:
                    c5:46:f5:62:11:6c:ba:1a:b9:21:9b:e2:77:cc:5f:
                    b6:13:2e:0c:6a:fd:15:a1:b1:56:b4:74:51:54:17:
                    90:74:6a:05:e8:c1:da:a2:20:4c:a6:a6:83:3b:2d:
                    12:10:a3:09:9e:53:93:0c:27:dc:9b:7c:f1:b5:db:
                    b8:bb:c8:d9:bb:f1:75:c5:e4:12:fc:65:da:13:ff:
                    87:f5:8e:50:7f:7e:8b:a1:b8:1a:31:74:92:0a:b2:
                    f1:da:d4:8f:3f:84:82:99:0f:c2:75:e2:a6:2b:f4:
                    1a:08:40:bd:18:0b:42:59:82:f1:ed:06:fc:ab:f0:
                    ea:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6E:F9:27:A1:65:26:39:AD:1D:F9:CC:1E:7D:21:A7:F3:54:E8:5B
            X509v3 Authority Key Identifier:
                keyid:93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:5f:81:e3:c0:32:1e:a4:b8:d2:44:3b:91:34:ce:53:e6:03:
         85:b9:28:71:93:0f:aa:08:c4:f8:2c:80:12:2b:2f:70:51:fa:
         3f:64:06:d8:40:fd:14:4a:8a:69:82:54:a6:08:8e:b8:c3:f7:
         70:55:b9:21:95:91:7c:37:37:66:0c:e0:b8:42:13:08:a6:fc:
         1a:ea:6d:c8:1c:b6:c6:72:f9:b5:23:df:7b:5d:33:db:7c:1e:
         f9:6b:7d:db:88:61:8e:b8:99:aa:3a:9d:6a:43:dc:c4:81:fc:
         b7:e5:34:6f:b3:40:dc:8f:cd:90:c0:63:a1:c5:ad:ef:91:34:
         2e:56:2c:81:6f:eb:b6:44:ed:aa:c6:98:8e:56:c1:5a:13:06:
         3b:ab:d9:b9:0a:61:f3:19:33:da:66:af:51:ca:b1:6d:5b:ac:
         f7:2c:e3:38:70:cc:48:63:33:42:83:af:56:24:96:c2:da:e7:
         a9:01:7c:ac:a7:b0:23:8c:4f:8c:85:ae:c4:51:ad:dd:b1:f4:
         20:53:0a:fc:ec:16:83:33:23:0b:91:ac:69:e5:1f:40:a8:e2:
         08:f0:54:17:1e:8a:4b:1e:3d:1e:9c:4e:b1:7d:43:e5:e3:af:
         4e:bc:12:c3:a4:9d:66:b3:f2:43:98:76:8e:22:1e:f1:19:b3:
         1c:1b:12:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:36:24 2026 by rpki-client