Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft
File:                     kBdT4_LIclCGbxxHOQChAP1Mq1M.mft (raw, json)
Hash identifier:          kI38on0mh03H5+90FOYDdx895qsJipgcFS7u4sraXvQ=
Subject key identifier:   93:57:B2:8F:5A:02:4E:9A:41:4F:3D:EB:3D:97:91:DA:9E:4D:17:BD
Authority key identifier: 90:17:53:E3:F2:C8:72:50:86:6F:1C:47:39:00:A1:00:FD:4C:AB:53
Certificate issuer:       /CN=A91E4FA6/serialNumber=901753E3F2C87250866F1C473900A100FD4CAB53
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft
Manifest number:          09
Signing time:             Thu 23 Jul 2026 11:16:34 +0000
Manifest this update:     Thu 23 Jul 2026 11:16:33 +0000
Manifest next update:     Thu 30 Jul 2026 11:16:33 +0000
Files and hashes:         1: kBdT4_LIclCGbxxHOQChAP1Mq1M.crl (hash: fCXkypvojsWDABhNxPU3tiDb8/QOQI1u2zlvRPIIVxI=)
                          2: 947763C67B4211F1AEF4840594A30FBC.roa (hash: J3btKuOFaL2iAnmc6q/6qXEqUsLNqUcznVApxNof1zE=)
                          3: 93CAB16C7B4211F1AEF4840594A30FBC.roa (hash: tsHb5mr8RbkReF/Lzb1FiewO29ujOLPqtSMY3Pgh1Og=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.crl
                          rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4FA6, serialNumber=901753E3F2C87250866F1C473900A100FD4CAB53
        Validity
            Not Before: Jul 23 11:16:33 2026 GMT
            Not After : Jul 30 11:16:33 2026 GMT
        Subject: CN=6a61f812-9911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:d3:95:42:d5:cb:ba:09:10:b6:6e:ed:1a:
                    b5:e0:5d:e5:7e:47:38:1a:a2:1f:b5:d1:ed:5f:08:
                    e1:52:90:11:44:d0:82:75:a7:5a:3c:93:15:03:a3:
                    a6:77:bd:f6:31:db:95:2f:75:30:92:af:3e:8f:a5:
                    02:81:4c:69:b6:2b:f1:de:c2:d8:b2:11:a3:1a:f1:
                    7c:d1:04:9d:a1:e7:e5:8f:a0:eb:ca:9a:6e:2e:19:
                    d0:5a:d6:49:d2:cc:a2:30:57:17:fd:92:26:13:bb:
                    ea:0f:1d:c6:1f:47:86:87:37:c3:e2:9b:c9:c9:2d:
                    c4:ca:d4:62:cb:5a:e2:31:0a:ec:1d:ce:1d:a7:23:
                    7f:f1:d3:b1:ff:99:2f:9c:c0:4c:24:6d:65:4b:44:
                    f2:dd:24:19:cc:e6:37:4b:77:ba:5d:fc:30:37:5c:
                    ca:02:b2:c2:64:eb:63:07:b5:ee:61:f5:f8:73:93:
                    a1:4a:ba:82:17:a8:fa:e9:ad:41:6b:f6:fe:00:ba:
                    62:8c:f1:7d:cd:82:5e:25:67:b8:cc:d3:0a:f3:f3:
                    d0:c8:b8:55:eb:6d:a4:46:61:f4:73:56:b4:c6:fa:
                    44:36:ff:df:83:4d:5e:be:ea:6b:67:55:cd:d5:15:
                    75:f3:7c:00:76:37:19:de:5d:e3:9a:60:fd:ef:df:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:57:B2:8F:5A:02:4E:9A:41:4F:3D:EB:3D:97:91:DA:9E:4D:17:BD
            X509v3 Authority Key Identifier:
                keyid:90:17:53:E3:F2:C8:72:50:86:6F:1C:47:39:00:A1:00:FD:4C:AB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c7:63:4e:5a:13:f0:a2:b7:6d:d4:5f:1c:e9:b5:64:a2:90:
         17:2e:99:92:6e:12:ae:b2:4f:5d:68:f9:ba:5a:0d:e9:82:f7:
         cf:58:d5:88:51:a9:66:f7:f0:ce:ae:5c:8d:fd:2b:4e:81:35:
         46:95:f8:06:f8:2c:81:10:12:70:a9:e6:0a:14:cc:a7:38:98:
         c4:94:15:3f:d3:ac:e7:e9:17:ef:da:04:b7:b8:0f:c5:55:c8:
         6a:ce:14:05:be:59:0f:f2:89:98:5e:19:66:41:c9:bd:3a:67:
         0a:31:1c:54:6b:d2:c6:9a:0c:01:5e:1f:a6:19:18:e5:c3:a5:
         8e:87:e1:a8:07:a4:2e:c6:aa:4c:73:af:e9:58:dc:2f:da:ab:
         fa:9e:86:95:51:63:ca:c6:64:7a:f0:04:eb:32:47:46:13:73:
         79:a8:fe:6f:5e:9e:97:bc:18:5c:8c:24:83:60:cc:cd:d2:dc:
         27:5d:bd:c1:64:88:01:fb:d4:01:99:b9:de:25:57:ac:eb:6f:
         68:4d:72:43:8c:cd:69:b1:30:47:e6:d8:ef:70:bb:c0:94:d2:
         8f:87:e9:35:b7:fa:b4:20:b2:2f:11:ea:56:a0:e0:f3:64:db:
         61:46:e0:82:a7:41:d8:dd:70:aa:c6:e8:f3:fd:01:49:80:87:
         da:6b:06:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:21 2026 by rpki-client