Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
File:                     KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json)
Hash identifier:          bU08G2WjsWMNrD54jHL6Hwmby/ZxdKtYxRM0mM+JpNg=
Subject key identifier:   F4:FC:F8:7D:93:A9:4F:81:86:37:14:F3:84:2A:82:35:A7:FC:87:D9
Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30
Certificate issuer:       /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30
Certificate serial:       07C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
Manifest number:          12F7
Signing time:             Wed 22 Jul 2026 19:34:57 +0000
Manifest this update:     Wed 22 Jul 2026 19:34:57 +0000
Manifest next update:     Wed 29 Jul 2026 19:34:57 +0000
Files and hashes:         1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: tGh3FDfTz0s1jqusxS4N9Q5ftI1AV1A4+XHDMNmr7g4=)
                          2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: 7lVvPvKm0jDrCtO8FOe2rLzoGXgVOgfwoKgNAbdQ/CA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl
                          rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1992 (0x7c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30
        Validity
            Not Before: Jul 22 19:34:57 2026 GMT
            Not After : Jul 29 19:34:57 2026 GMT
        Subject: CN=6a611b61-a8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:16:1f:89:9b:98:cc:b9:61:90:48:28:16:
                    e8:96:87:ce:c9:2d:53:9c:4d:d3:41:5a:05:c4:a4:
                    6f:f0:2a:e7:68:d8:d3:5c:4a:4d:c4:98:20:5b:c0:
                    d2:c7:f6:12:c5:b0:31:f9:e7:fa:22:53:be:dd:52:
                    5b:1e:08:d9:d6:1c:0d:82:db:96:3c:bf:a9:e2:48:
                    1f:96:16:70:00:c6:57:da:d1:c8:88:d8:5c:26:3f:
                    15:b2:b5:91:af:7f:cc:fb:3b:a9:a7:51:f2:aa:fd:
                    aa:60:ca:fd:3a:98:c7:81:8d:8b:90:b4:d2:45:fe:
                    6a:3b:74:a7:f9:52:9a:d4:3e:21:a4:63:62:dd:cf:
                    f4:5e:9a:f1:9d:84:82:b2:30:27:f2:24:fd:c6:b5:
                    e3:7d:1f:16:8c:ca:d8:85:4a:91:50:62:d0:bb:1e:
                    cd:7d:c7:17:4b:75:7d:56:b8:33:33:4c:98:b0:52:
                    ab:f0:76:74:73:fb:03:eb:49:79:97:78:72:6d:a4:
                    da:0b:d6:21:a0:75:ed:a3:8a:c6:15:4a:d6:b1:45:
                    fe:7b:05:4d:3b:e2:d6:ab:6a:bf:6f:61:c7:58:50:
                    4a:0e:98:6e:e5:6c:f2:b3:67:f3:09:5b:ca:08:82:
                    ae:9e:93:d0:6a:1a:25:76:e4:70:8a:a3:15:46:7e:
                    07:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FC:F8:7D:93:A9:4F:81:86:37:14:F3:84:2A:82:35:A7:FC:87:D9
            X509v3 Authority Key Identifier:
                keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:01:1b:07:bc:4a:89:e4:e4:0e:9f:25:f3:05:4f:8d:a2:e0:
         b7:69:c0:fb:01:90:f2:32:c9:fa:b7:97:bc:f8:52:a1:a7:10:
         0f:31:05:1e:74:ec:ed:48:08:73:30:65:9f:8d:19:85:8c:fd:
         7a:87:4f:81:db:c3:79:15:26:84:78:bd:ad:fb:b7:8b:bb:bb:
         e7:fc:bf:4e:c4:cb:38:30:dd:54:d4:b9:80:d0:fb:eb:9f:c2:
         f1:3b:a1:3f:41:67:4c:6f:ae:d7:7d:58:9e:f3:bc:37:57:18:
         0e:37:b7:bb:99:ad:d0:79:a4:e9:c4:00:f8:75:42:d6:3f:a6:
         2b:8b:91:5a:3c:f8:da:49:a3:70:95:20:dc:e6:1e:f1:02:cf:
         14:60:9b:59:66:d6:b8:34:1a:09:97:c2:1f:71:0c:47:70:88:
         f1:49:0b:98:39:7f:da:c0:b4:f7:9e:e2:a2:a0:70:13:c4:b9:
         a1:30:55:39:73:ce:4a:9f:02:2d:ff:ba:f0:d3:5f:9f:8f:98:
         da:cf:a3:b6:cd:3f:ef:76:11:1f:6b:15:17:22:09:30:64:b3:
         7a:9d:e3:f7:29:2f:ad:ea:00:af:27:c9:61:0f:3b:9a:74:5b:
         19:c5:0c:13:77:49:a5:a8:3b:c4:03:d4:75:50:da:8a:be:fd:
         8a:fd:10:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRFRjYxMTAvBgNVBAUTKDI4Q0FFRTg0OTY1NjlDNTczQzNFNUIxODkwQzVBMUIz
NENGQzhFMzAwHhcNMjYwNzIyMTkzNDU3WhcNMjYwNzI5MTkzNDU3WjAYMRYwFAYD
VQQDEw02YTYxMWI2MS1hOGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyyIWH4mbmMy5YZBIKBbolofOyS1TnE3TQVoFxKRv8CrnaNjTXEpNxJggW8DS
x/YSxbAx+ef6IlO+3VJbHgjZ1hwNgtuWPL+p4kgflhZwAMZX2tHIiNhcJj8VsrWR
r3/M+zupp1Hyqv2qYMr9OpjHgY2LkLTSRf5qO3Sn+VKa1D4hpGNi3c/0XprxnYSC
sjAn8iT9xrXjfR8WjMrYhUqRUGLQux7NfccXS3V9VrgzM0yYsFKr8HZ0c/sD60l5
l3hybaTaC9YhoHXto4rGFUrWsUX+ewVNO+LWq2q/b2HHWFBKDphu5Wzys2fzCVvK
CIKunpPQaholduRwiqMVRn4HBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPT8+H2T
qU+BhjcU84QqgjWn/IfZMB8GA1UdIwQYMBaAFCjK7oSWVpxXPD5bGJDFobNM/I4w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx
RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25GYzhQbHNZa01XaHMwejhq
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tNcnVoSlpXbkZjOFBsc1lrTVdoczB6OGpqQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi9LTXJ1aEpaV25G
YzhQbHNZa01XaHMwejhqakEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARAEbB7xKieTkDp8l8wVPjaLgt2nA+wGQ8jLJ+reXvPhSoacQDzEFHnTs7UgI
czBln40ZhYz9eodPgdvDeRUmhHi9rfu3i7u75/y/TsTLODDdVNS5gND765/C8Tuh
P0FnTG+u131YnvO8N1cYDje3u5mt0Hmk6cQA+HVC1j+mK4uRWjz42kmjcJUg3OYe
8QLPFGCbWWbWuDQaCZfCH3EMR3CI8UkLmDl/2sC0957ioqBwE8S5oTBVOXPOSp8C
Lf+68NNfn4+Y2s+jts0/73YRH2sVFyIJMGSzep3j9ykvreoAryfJYQ87mnRbGcUM
E3dJpag7xAPUdVDair79iv0QNA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:49:10 2026 by rpki-client