Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
File:                     K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json)
Hash identifier:          KpUmnxyQJC1TScoLUkKUjUQRGalzy0Zsg3H3MUk3pVg=
Subject key identifier:   88:A7:5D:6C:32:C7:D0:0C:3B:EB:F2:57:B8:63:F0:77:A2:5A:46:2E
Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
Certificate issuer:       /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Certificate serial:       359D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
Manifest number:          3589
Signing time:             Fri 24 Jul 2026 14:24:27 +0000
Manifest this update:     Fri 24 Jul 2026 14:24:26 +0000
Manifest next update:     Fri 31 Jul 2026 14:24:26 +0000
Files and hashes:         1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: omAdqs6GIHUsf5r7H778fCN48h0r+6nN8kVewn/o/20=)
                          2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: FneWbJ04EWBnNB9hcGYxNXW+7dDU9U/j/uBXyZbLddM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
                          rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 14:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13725 (0x359d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
        Validity
            Not Before: Jul 24 14:24:26 2026 GMT
            Not After : Jul 31 14:24:26 2026 GMT
        Subject: CN=6a63759b-97ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:3a:05:0c:4f:f0:da:c3:bb:82:c3:85:6c:
                    e8:d1:d1:e9:29:b9:6a:97:09:6a:b4:c9:33:c5:92:
                    08:db:f2:bb:9f:10:6d:58:cb:75:7b:e6:8d:19:f1:
                    96:71:57:e8:51:06:2e:68:42:78:27:4d:a0:f3:9b:
                    7f:68:4a:16:c6:01:da:34:ca:19:b0:0a:41:c9:7c:
                    39:21:6e:e1:1a:67:6f:39:2c:58:a6:af:0b:48:ad:
                    f6:ef:f8:48:83:4c:f2:0a:76:fe:10:cc:3b:a5:9f:
                    33:8b:7a:b6:a7:5f:f0:31:36:ec:cb:5f:35:6c:09:
                    f4:65:60:ae:80:83:97:41:78:b6:10:75:54:15:05:
                    08:f9:7d:3f:03:4d:11:c1:f9:bc:3b:fd:1b:97:26:
                    d4:ba:82:23:05:81:ea:08:e9:0d:15:90:23:9b:89:
                    49:28:e5:20:eb:47:0b:e3:0b:a1:47:bd:6f:74:55:
                    6c:01:16:73:ec:80:68:e9:1c:bf:94:74:8b:3b:ff:
                    d2:89:b4:93:44:68:22:c1:ff:a0:e2:99:1b:f0:62:
                    2e:d1:57:9d:af:6f:ec:d8:6c:57:d9:6e:31:f3:3e:
                    b7:8d:1c:2c:8d:63:58:4f:46:48:2e:f4:d1:09:e5:
                    2f:01:60:11:21:f1:4f:95:66:06:16:60:72:45:b4:
                    a1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A7:5D:6C:32:C7:D0:0C:3B:EB:F2:57:B8:63:F0:77:A2:5A:46:2E
            X509v3 Authority Key Identifier:
                keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:6c:54:ec:ed:4d:6e:c1:3f:1e:4e:69:b1:56:1e:96:b7:c3:
         4c:7d:cb:d9:a0:f0:23:1d:9d:87:4b:b3:3d:ba:5a:1e:53:3c:
         4f:37:ff:48:dd:5a:7c:bd:8b:ff:58:20:23:57:1f:32:3a:c4:
         c2:6c:cb:01:da:6c:0f:fb:94:a7:1a:a9:0c:ba:26:69:b6:44:
         2b:4e:b5:a6:26:80:a6:9b:b9:df:cd:6b:54:e7:a9:bb:71:fd:
         c8:c7:d0:4d:2c:9a:15:ca:85:7c:2b:0c:7f:c8:39:7f:3d:e5:
         98:7b:d7:e7:ab:81:fb:86:54:d0:e1:99:46:71:ca:bd:c4:a4:
         2d:c2:d9:06:9d:aa:c8:7e:ce:0f:f6:11:a3:c5:36:38:6f:03:
         d8:1d:35:65:fb:30:a9:77:c2:01:0e:9f:32:27:bf:ec:1a:72:
         08:de:75:9c:85:1f:a2:71:75:e1:e0:f0:eb:2a:5c:46:b4:63:
         7c:3b:fc:91:e5:92:56:3e:43:8f:98:d1:d0:5e:80:2d:45:ab:
         ef:65:81:d8:27:59:9f:93:f1:fd:a5:12:86:22:d3:6a:e0:32:
         f5:d5:4a:98:e5:f7:82:f0:2d:35:10:b6:ed:5e:12:26:eb:f7:
         cb:14:48:0a:ec:36:d6:0a:07:f4:df:86:37:15:f6:04:33:84:
         a0:95:1d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:33:37 2026 by rpki-client