Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
File:                     kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json)
Hash identifier:          MKEUyEwzh2ar4SlND1IWsFtmFsrAocbTyV64tx4S3AY=
Subject key identifier:   87:72:01:C8:5E:34:BB:4C:57:CA:16:C9:8C:45:07:36:EC:5E:AF:AC
Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF
Certificate issuer:       /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
Certificate serial:       178B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
Manifest number:          1773
Signing time:             Fri 24 Jul 2026 16:44:09 +0000
Manifest this update:     Fri 24 Jul 2026 16:44:08 +0000
Manifest next update:     Fri 31 Jul 2026 16:44:08 +0000
Files and hashes:         1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: TX+BqoQ4rDTIzJI77+FS0ZIhT8hSDq7koPdEeLC0urg=)
                          2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: RmJVIv3K1Et0GVIGjp0LwXAHfwN0fchApUgm3Ee6HOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl
                          rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 16:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6027 (0x178b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
        Validity
            Not Before: Jul 24 16:44:08 2026 GMT
            Not After : Jul 31 16:44:08 2026 GMT
        Subject: CN=6a639659-74a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:2b:4c:ee:43:1e:4a:3c:98:2c:b3:b8:fc:
                    ae:dc:fb:ba:3f:1f:c7:04:f3:38:fb:1c:4b:74:fb:
                    a2:6e:ad:78:f4:e7:c2:d7:f3:4f:a3:d8:d3:6c:83:
                    32:43:d0:a9:32:e1:82:f9:0f:59:06:0c:9b:bc:54:
                    f7:fe:02:90:c8:10:5a:25:b2:6c:8b:80:94:c7:58:
                    a6:2c:51:7a:2b:04:e3:d1:d4:d6:9c:f5:aa:a7:68:
                    88:06:73:97:b8:08:00:0e:66:bd:71:72:c4:bd:67:
                    b6:2d:8f:27:a1:f3:eb:45:bf:ca:8d:3d:29:8b:0a:
                    08:c3:5a:11:d6:98:b3:be:13:b9:63:d8:17:cd:ad:
                    af:c9:a5:73:db:11:e1:63:12:71:d5:6c:c9:05:28:
                    1c:7b:f6:e2:c4:c0:c3:0a:9e:07:2e:aa:b0:e0:4d:
                    c3:3b:7d:36:e2:92:c9:56:77:e6:4e:03:96:48:b5:
                    31:13:d5:58:6e:13:45:b2:8c:34:0c:e6:0f:a3:3e:
                    bf:23:bc:1d:d0:1d:dd:06:ac:1e:ca:8b:43:d4:ed:
                    72:f3:86:be:e5:3b:97:67:8a:11:76:e9:37:fe:a8:
                    79:12:a0:9a:19:66:8d:17:8c:e0:6d:09:1b:bb:19:
                    d7:85:d5:85:98:6e:f9:ec:ec:df:60:da:f7:d7:7a:
                    93:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:72:01:C8:5E:34:BB:4C:57:CA:16:C9:8C:45:07:36:EC:5E:AF:AC
            X509v3 Authority Key Identifier:
                keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:76:00:19:ec:fb:db:05:ea:0c:f4:d3:1d:12:93:1d:ca:9d:
         3a:59:d7:47:15:b5:cc:92:86:52:b0:5c:76:d6:ea:01:1f:a8:
         61:42:68:ac:99:f1:5f:ad:81:5f:45:11:f3:70:89:be:f9:17:
         83:7a:f4:4e:2c:7e:f6:c7:70:c8:12:d4:a1:f1:de:af:3b:19:
         ef:74:f6:eb:a6:0d:38:65:28:ec:40:fe:71:5e:6b:6c:6d:78:
         8a:b4:2a:cc:33:d8:c7:9a:1e:71:27:01:7a:03:17:71:6c:3d:
         59:52:a2:b5:43:7d:8b:6a:26:ce:e4:42:fa:07:93:f6:94:80:
         4f:29:97:73:1d:b5:05:90:e3:8a:56:2a:6a:61:b2:6c:ae:06:
         c3:3f:86:b2:83:81:c9:c0:e6:00:fc:0f:e7:d7:ff:54:ef:91:
         c0:87:7a:a9:d1:0b:2e:0d:d5:d3:70:db:38:d6:58:9f:cf:40:
         fa:12:0a:3a:ed:b4:7c:73:65:15:19:9d:c3:3f:61:33:bc:98:
         5d:66:37:0c:3b:44:31:3d:d7:ec:ca:3d:c6:6b:c3:62:51:9e:
         dd:85:ac:0a:e5:32:c7:0b:82:dd:c5:5b:82:94:1f:5f:f6:0b:
         94:97:8c:fd:01:8a:c8:68:6b:86:c9:dd:9b:6c:82:f2:f4:7d:
         b0:66:24:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYxNjMxMTAvBgNVBAUTKDkyMEVDNkZDMzY1N0QzRkIwMDk4ODI1OThDOTg2QTc0
RjU1NTU4REYwHhcNMjYwNzI0MTY0NDA4WhcNMjYwNzMxMTY0NDA4WjAYMRYwFAYD
VQQDEw02YTYzOTY1OS03NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArU0rTO5DHko8mCyzuPyu3Pu6Px/HBPM4+xxLdPuibq149OfC1/NPo9jTbIMy
Q9CpMuGC+Q9ZBgybvFT3/gKQyBBaJbJsi4CUx1imLFF6KwTj0dTWnPWqp2iIBnOX
uAgADma9cXLEvWe2LY8nofPrRb/KjT0piwoIw1oR1pizvhO5Y9gXza2vyaVz2xHh
YxJx1WzJBSgce/bixMDDCp4HLqqw4E3DO3024pLJVnfmTgOWSLUxE9VYbhNFsow0
DOYPoz6/I7wd0B3dBqweyotD1O1y84a+5TuXZ4oRduk3/qh5EqCaGWaNF4zgbQkb
uxnXhdWFmG757OzfYNr313qTVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIdyAche
NLtMV8oWyYxFBzbsXq+sMB8GA1UdIwQYMBaAFJIOxvw2V9P7AJiCWYyYanT1VVjf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE2My8wMjlBRjk4NjAw
NzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBfc0FtSUpaakpocWRQVlZX
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tnN0dfRFpYMF9zQW1JSlpqSmhxZFBWVldOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjE2My8wMjlBRjk4NjAwNzYxMUU4QjM1OTlEMTdDNEY5QUUwMi9rZzdHX0RaWDBf
c0FtSUpaakpocWRQVlZXTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhnYAGez72wXqDPTTHRKTHcqdOlnXRxW1zJKGUrBcdtbqAR+oYUJorJnxX62B
X0UR83CJvvkXg3r0Tix+9sdwyBLUofHerzsZ73T266YNOGUo7ED+cV5rbG14irQq
zDPYx5oecScBegMXcWw9WVKitUN9i2omzuRC+geT9pSATymXcx21BZDjilYqamGy
bK4Gwz+GsoOBycDmAPwP59f/VO+RwId6qdELLg3V03DbONZYn89A+hIKOu20fHNl
FRmdwz9hM7yYXWY3DDtEMT3X7Mo9xmvDYlGe3YWsCuUyxwuC3cVbgpQfX/YLlJeM
/QGKyGhrhsndm2yC8vR9sGYkVA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:33:35 2026 by rpki-client