Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
File:                     kcPJZndvAR_FNQIdhfWue_utpX4.mft (raw, json)
Hash identifier:          OSpcmOgN8AAW3j4luk7bYjOABHmsgookRLUq2WRD87s=
Subject key identifier:   C1:59:DD:09:FF:DB:A0:ED:C4:F8:60:7D:57:E3:DB:02:31:A0:B6:60
Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
Certificate issuer:       /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Certificate serial:       0C7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
Manifest number:          0C43
Signing time:             Wed 22 Jul 2026 19:05:54 +0000
Manifest this update:     Wed 22 Jul 2026 19:05:53 +0000
Manifest next update:     Wed 29 Jul 2026 19:05:53 +0000
Files and hashes:         1: kcPJZndvAR_FNQIdhfWue_utpX4.crl (hash: eZD9wVVCZkgvdhpcn5fkCq3gUrHilJpEL5hQalmzkbA=)
                          2: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (hash: j5PopsmOwZFXKKisotFRY1R3qhxNhXf+mgbfOulCpEE=)
                          3: AD4CF94A6D1711F085288D45C4F9AE02.roa (hash: nim0r8cX0AWo+u+y8biXKnG294pD1aj3IrEpuP3v1ew=)
                          4: 41B2F448ECE611EA882BEA79C4F9AE02.roa (hash: nI/6MDunIRDvmHBfJBx95Y0vV2wSohzwNZEZUy5WKGA=)
                          5: ACE4FD2C6D1711F085288D45C4F9AE02.roa (hash: GS1ZWCrOmI/wzMrtSy23rOps4nyG5A3UiWlzO5POe50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
                          rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3197 (0xc7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
        Validity
            Not Before: Jul 22 19:05:53 2026 GMT
            Not After : Jul 29 19:05:53 2026 GMT
        Subject: CN=6a611492-29a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d8:37:fd:22:5c:f3:ac:6b:84:67:16:24:ee:
                    03:9a:2d:15:53:5a:4e:bd:fa:0b:27:db:7e:38:ce:
                    7a:b4:67:b4:15:b8:d0:08:68:db:3a:bd:c5:f2:78:
                    15:4b:72:d9:36:95:f1:e3:ec:4c:3c:ec:00:b4:57:
                    a6:14:e9:d1:ec:a6:a9:01:12:fa:28:67:21:79:33:
                    e1:50:15:e1:db:49:04:9e:82:16:4d:27:f5:e9:53:
                    5f:da:ac:d7:b5:07:0e:80:45:b1:f8:42:61:01:2f:
                    16:c5:58:d7:72:19:62:73:9c:76:68:9c:7b:e2:07:
                    c9:52:42:57:c6:e9:6d:52:07:f7:5c:5b:ed:b2:8b:
                    e2:66:d1:f9:18:e3:0d:ad:c3:89:e0:2c:61:92:45:
                    9d:6c:b8:d4:2c:a4:dc:13:a9:e2:fc:10:23:50:92:
                    ba:d3:a0:fd:dd:49:c0:30:9d:c0:3d:b7:c4:82:71:
                    08:6e:4b:15:d8:82:bf:76:58:26:fe:24:1a:3f:20:
                    61:d8:9a:d4:ce:8a:13:30:c3:07:21:7d:d5:7e:10:
                    33:18:74:1e:b0:05:6d:1d:7a:a7:65:4e:1e:96:df:
                    6c:a8:73:5f:8d:36:7e:7a:a5:a7:f3:e5:4c:ae:92:
                    71:75:57:1d:d1:d2:e9:50:32:55:0c:56:ed:33:51:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:59:DD:09:FF:DB:A0:ED:C4:F8:60:7D:57:E3:DB:02:31:A0:B6:60
            X509v3 Authority Key Identifier:
                keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:94:35:86:6f:8f:46:25:bf:94:a8:97:e0:4b:06:f1:c3:1d:
         13:6d:2a:8b:5a:39:1f:76:de:5c:60:34:aa:ef:6b:aa:da:10:
         e9:c0:54:03:5c:f9:c7:22:22:a7:96:17:fe:2b:90:d7:a0:14:
         09:44:99:5b:22:52:9f:9a:24:f7:72:61:37:7d:c2:6b:3f:e8:
         00:8a:01:80:71:3d:97:a1:a6:68:82:96:f7:8b:16:c4:6f:be:
         40:95:71:1f:18:f1:cf:a9:9f:22:9c:18:e4:1d:c5:4c:15:60:
         9b:fb:40:2e:b6:0c:c2:30:35:8c:a0:a1:46:5f:d7:c2:73:3a:
         91:6e:f9:bc:04:8d:65:6b:a6:87:90:82:aa:5d:a3:df:fe:fc:
         fc:f4:46:dd:42:65:46:10:6a:d0:56:95:36:0b:c4:72:86:cd:
         94:06:ad:65:49:97:8e:31:1c:3e:c6:fb:1e:aa:48:25:22:98:
         bb:5e:60:55:9a:d7:29:4f:13:5f:d1:90:cf:8b:87:e7:9f:dc:
         17:95:dc:19:d0:fe:0f:fb:4a:1c:52:2f:b1:18:95:7f:78:24:
         e8:fe:2e:00:46:38:4e:b5:e3:2c:b8:84:a8:38:1e:15:30:38:
         36:e7:de:c6:2c:c5:ad:01:3f:3a:32:8d:d0:81:2d:a8:66:f2:
         2d:d5:b3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:30 2026 by rpki-client