Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
File:                     ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json)
Hash identifier:          6qN3dsrmxjOgkKaHMynEUphRpFsy6VUyxQ9VpU7fIl0=
Subject key identifier:   9F:EF:BA:16:0F:FB:FE:7A:83:B7:EA:F7:56:D8:FC:09:DE:08:A0:BD
Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F
Certificate issuer:       /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
Manifest number:          82
Signing time:             Thu 23 Jul 2026 09:30:53 +0000
Manifest this update:     Thu 23 Jul 2026 09:30:52 +0000
Manifest next update:     Thu 30 Jul 2026 09:30:52 +0000
Files and hashes:         1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: LWLGjlKaaV92f1Ki9hIHWPEtr/XeWT12gyCMsNTo+N0=)
                          2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: pAWmrFjHQ+Gya0uL4vpKVzvD0cBGp73l2+EQo/ug/JU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl
                          rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F
        Validity
            Not Before: Jul 23 09:30:52 2026 GMT
            Not After : Jul 30 09:30:52 2026 GMT
        Subject: CN=6a61df4d-1c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2b:be:fc:31:ea:15:8a:98:b4:08:09:33:84:
                    96:f9:91:43:ba:30:37:1f:20:73:1e:1b:b3:5c:fc:
                    79:6c:9a:c3:ea:e8:e2:34:66:56:32:69:4e:ef:d2:
                    04:19:72:aa:a4:a9:80:ad:3c:2b:3f:68:e7:18:a3:
                    ab:e2:8c:ea:74:60:30:2f:ec:4e:a5:c8:e2:53:eb:
                    f7:b6:d9:84:fc:22:1f:22:80:d7:d0:84:2c:7a:65:
                    d9:0c:2b:23:3e:a8:7a:9b:26:0a:8d:ec:f1:ee:47:
                    ee:5c:79:89:ae:b1:7c:3b:a9:41:49:4a:30:71:ab:
                    42:84:56:35:62:77:98:60:5b:b3:3d:a6:68:cf:ed:
                    aa:92:6e:54:66:e8:da:43:19:ac:8b:1e:b7:0b:e8:
                    c5:33:16:38:17:e0:f7:60:44:e4:6d:2d:c9:f3:16:
                    47:4e:7d:b8:ad:b1:88:bd:f8:45:11:9e:88:c8:f8:
                    0c:53:37:14:87:d0:e3:67:64:30:be:ff:e6:b3:f8:
                    2b:ad:2a:7d:b6:bc:d0:d9:65:c8:07:26:af:0d:49:
                    dd:41:0d:39:74:c3:81:2b:2b:cb:9d:19:f9:17:8b:
                    69:46:6c:22:08:95:a1:9c:05:24:ce:04:86:45:7d:
                    8f:1e:05:a1:c6:47:e0:39:5a:79:7f:2a:9c:cf:3b:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EF:BA:16:0F:FB:FE:7A:83:B7:EA:F7:56:D8:FC:09:DE:08:A0:BD
            X509v3 Authority Key Identifier:
                keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f8:93:c4:f4:24:4b:b9:9b:0a:1e:03:b1:4f:fd:d0:b3:64:
         d0:a1:af:21:7a:cf:b1:91:d5:9c:30:a7:dd:fb:7b:fe:f4:76:
         cd:d8:f2:83:f2:72:3f:de:e5:cd:05:e8:8f:d3:35:72:9f:b7:
         c5:b1:cc:5d:ae:67:4f:0b:e4:e6:a7:26:06:48:07:2d:c1:b1:
         93:a6:1a:8f:8c:25:3f:c2:a8:48:6f:f3:29:2f:0c:93:c7:0e:
         2f:ce:f4:aa:d0:db:1a:46:f5:8f:7b:ff:af:74:6a:e7:1f:15:
         83:c6:17:af:13:6a:6e:a1:05:27:06:6d:c9:a9:27:78:43:84:
         05:ad:14:56:93:c9:fa:b2:01:60:4d:47:1d:61:b2:ba:8b:f3:
         7b:e5:f9:10:a2:f6:dc:9e:3b:99:ab:c5:f3:e3:bd:53:5b:a3:
         72:65:c1:63:41:2f:18:32:48:b1:03:8e:78:d4:22:bc:4d:e7:
         c6:48:c0:8f:7c:c9:c0:3d:e3:e8:ed:cd:08:ad:05:79:2a:54:
         37:00:a6:e2:8c:64:70:69:7d:a9:17:5a:34:02:41:63:ee:8a:
         cb:c6:2c:45:d1:3b:f6:f1:fa:ec:62:89:ab:11:14:0f:97:bd:
         0d:f2:68:52:10:2f:d5:b2:b1:04:83:ea:d1:94:b0:65:ca:d4:
         a9:d5:74:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:47:18 2026 by rpki-client