Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
File:                     Klm5bDClX71h0iMDc864nR2wGos.mft (raw, json)
Hash identifier:          sj5XBsSETYKk2IGB5KGGnyb1oDqlIybIHyafvTfEoYQ=
Subject key identifier:   96:40:C4:1C:36:5D:65:BA:22:BC:39:8C:5F:59:92:E0:E8:4C:4A:86
Authority key identifier: 2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
Certificate issuer:       /CN=A91F523F/serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
Manifest number:          0134
Signing time:             Thu 23 Jul 2026 07:12:44 +0000
Manifest this update:     Thu 23 Jul 2026 07:12:44 +0000
Manifest next update:     Thu 30 Jul 2026 07:12:44 +0000
Files and hashes:         1: Klm5bDClX71h0iMDc864nR2wGos.crl (hash: fYaOHd+Y7gI63dZ78ZpK2vsTaLyXzo/rsvhbdZY4EDQ=)
                          2: 607B5F6AB05411EF84C8DC74C4F9AE02.roa (hash: FK/DlPDSG9WEqzNFstF7HVEnaAW4fzuMAjNc2Kwb/bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
                          rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F523F, serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
        Validity
            Not Before: Jul 23 07:12:44 2026 GMT
            Not After : Jul 30 07:12:44 2026 GMT
        Subject: CN=6a61beec-e343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:46:08:34:10:fd:fd:90:a8:fe:35:15:94:fe:
                    c6:d8:0f:1c:51:7e:4c:02:0e:7d:ca:ca:82:46:51:
                    96:d5:e4:12:48:97:a6:05:8a:0d:11:45:ee:c0:45:
                    c9:51:3e:b8:2d:cd:ca:34:f6:a3:65:45:d1:4f:b8:
                    1d:86:d8:ac:36:82:ac:2c:02:30:4c:35:de:7e:4d:
                    db:4d:3d:b8:ec:bc:ad:26:6a:ee:63:16:3c:fb:cc:
                    86:ea:60:de:e9:67:a6:76:97:3e:cc:da:88:68:fd:
                    a9:db:e9:df:78:8d:f1:b5:40:3a:90:76:8d:bf:90:
                    ab:8e:42:99:60:e5:82:c0:58:b2:c0:a5:ea:46:00:
                    f7:7b:90:af:35:8e:cf:78:d2:78:69:64:eb:7e:88:
                    01:4c:ee:95:7d:b5:59:ab:64:c0:c3:ba:03:94:1c:
                    3f:59:1c:a8:77:2e:b4:26:cd:e9:2f:77:f1:4e:16:
                    f7:be:73:43:72:b0:9c:87:56:f4:3c:3f:52:e5:ed:
                    29:f9:20:a1:1e:a2:9f:2e:a3:4f:41:ad:66:46:3e:
                    95:8a:b6:e0:67:31:08:15:65:1a:15:c4:15:a6:b9:
                    2b:53:07:82:b2:8b:9a:61:45:29:ca:0b:82:f1:49:
                    74:0f:36:59:00:4e:8a:42:8f:fd:c0:8f:20:0b:5c:
                    89:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:40:C4:1C:36:5D:65:BA:22:BC:39:8C:5F:59:92:E0:E8:4C:4A:86
            X509v3 Authority Key Identifier:
                keyid:2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9d:49:8c:8a:d6:a4:4c:2d:59:db:c8:4f:a3:67:0f:8a:8d:
         da:be:a5:57:3a:1b:40:2b:60:db:2c:87:63:2b:9d:11:dc:b7:
         e3:c7:ca:02:fa:aa:83:47:e8:df:d8:b9:5a:dc:2d:7c:ce:a7:
         93:bc:25:a8:61:8f:bb:9c:db:0e:33:05:40:75:73:d0:d5:3d:
         ad:18:ad:d2:ef:ed:e8:55:7b:f1:d2:4b:d7:47:50:66:79:0c:
         d6:5a:68:82:fb:8b:49:ae:05:c9:e9:5a:53:13:39:4b:49:64:
         2c:30:1c:1a:17:2f:bd:3b:b2:49:b7:65:f1:92:2d:80:e1:35:
         63:57:b3:0f:e6:76:0d:d8:96:e4:02:9d:17:ac:cb:68:72:47:
         41:97:92:fa:a6:b6:ae:ab:77:de:fe:c9:27:95:fd:10:73:d7:
         4a:ee:b3:6f:02:1d:33:fe:88:e4:e7:1f:3f:eb:7c:49:ff:6c:
         19:2a:05:92:90:b8:1b:b5:df:bc:17:6b:94:17:f4:b3:ae:8e:
         18:25:29:ac:90:81:be:02:17:a1:b5:95:ce:ca:01:65:a4:84:
         c5:bf:42:c4:e1:55:3a:1e:91:d4:a3:e9:34:a2:cf:02:1f:22:
         b1:86:ca:ef:92:06:0e:a1:61:29:ef:7a:c0:f4:e0:fb:f5:b0:
         f4:06:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:12 2026 by rpki-client