Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
File:                     kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json)
Hash identifier:          xn4YcXuKloyig29lV57xJosJ6EcERqvf6Q4/ExxXUz0=
Subject key identifier:   3F:61:BE:71:F2:1B:EA:36:72:E0:E5:02:29:3E:94:EE:DA:A8:4E:49
Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Certificate issuer:       /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Certificate serial:       047D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
Manifest number:          0475
Signing time:             Sat 25 Jul 2026 01:00:30 +0000
Manifest this update:     Sat 25 Jul 2026 01:00:30 +0000
Manifest next update:     Sat 01 Aug 2026 01:00:30 +0000
Files and hashes:         1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: Up/w70a7u+bEolEqi5lT9ZJZuNrGvvEIn+Jgd2p/m2s=)
                          2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: BDMTldlOhtRE8fdsa/Kig0BEI477q3hDk2bU8o4N/Fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Aug 2026 00:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1149 (0x47d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
        Validity
            Not Before: Jul 25 01:00:30 2026 GMT
            Not After : Aug  1 01:00:30 2026 GMT
        Subject: CN=6a640aae-5a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:6e:e8:d0:44:29:fe:cc:b2:17:03:69:b6:
                    b6:07:03:88:bc:08:7c:d5:1c:b6:92:87:aa:d9:04:
                    b4:df:f6:1c:66:d8:56:eb:a0:a5:2e:ad:bb:7d:72:
                    6e:12:1d:67:40:c8:b6:cf:fc:cf:a3:d4:90:a0:16:
                    78:93:17:40:ff:11:52:53:00:4f:ec:87:da:0c:18:
                    33:e6:f7:9a:b3:60:9b:33:92:c1:f3:ea:48:83:9c:
                    6a:13:84:eb:58:ec:16:3f:46:29:e0:f3:1e:a9:8e:
                    c9:24:22:a6:87:74:fa:87:70:79:a8:bc:c0:73:21:
                    92:6e:da:2a:8e:88:d9:ac:fa:53:2d:72:d5:91:2a:
                    2f:c8:6d:c0:9a:0c:4f:38:cf:80:00:4e:a2:45:ab:
                    c9:a4:5b:b5:a0:b9:a1:78:bb:96:5e:61:89:4a:67:
                    43:9f:ed:c4:91:56:f3:5d:73:a6:58:79:55:c8:37:
                    5d:80:97:9f:9f:05:af:fc:07:32:cf:b7:16:85:ec:
                    6a:9a:32:01:7b:5b:2c:ba:59:2b:14:2f:61:4d:29:
                    02:32:3f:41:c1:c7:bc:31:4d:0e:6d:f4:26:fb:ca:
                    3b:5a:ed:32:7f:9b:5b:b0:77:54:69:62:6e:76:54:
                    b3:ea:4c:8b:78:89:0a:92:81:be:f2:47:3e:90:e7:
                    68:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:61:BE:71:F2:1B:EA:36:72:E0:E5:02:29:3E:94:EE:DA:A8:4E:49
            X509v3 Authority Key Identifier:
                keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ee:07:24:c6:df:b3:22:d8:8a:bc:96:5d:33:93:f2:36:4a:
         58:3a:e7:41:72:51:97:52:dd:05:c3:99:2f:25:7b:b3:f5:23:
         49:ab:20:fe:cc:aa:48:eb:43:96:6a:3a:57:51:34:79:ae:20:
         fd:19:ce:0b:84:5d:84:5c:8f:27:04:b4:82:85:a6:94:8a:ab:
         43:8f:a0:6a:da:d5:84:c2:aa:f3:c4:be:e8:91:dd:01:e9:21:
         96:5c:85:8d:2d:c0:72:2e:dd:bb:e7:53:55:8f:8a:c7:22:6c:
         e9:29:5a:ac:55:37:93:1e:32:06:cb:e6:93:dc:a0:9a:2f:9c:
         ef:b3:b0:ec:e6:30:c6:d3:17:2e:19:45:71:07:3f:b0:51:e3:
         06:bc:79:e7:ca:4f:ee:82:0b:99:d9:47:58:05:62:f8:18:70:
         e7:84:f6:17:50:76:aa:db:dc:b6:e8:4b:94:d0:27:64:41:d6:
         4f:b5:07:35:82:9e:79:a4:49:00:1e:ba:18:83:ce:96:67:7b:
         38:1d:36:18:a6:f3:07:40:8c:e4:ee:cf:93:58:03:ec:f7:6f:
         d5:cc:3a:48:24:60:6e:ad:b7:e0:be:99:32:c8:4a:68:f9:67:
         b8:15:d4:d9:a7:b4:36:b0:14:21:f7:c9:d5:d3:0a:c3:70:eb:
         1f:f3:2f:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF
M0M0NDM3RTcwHhcNMjYwNzI1MDEwMDMwWhcNMjYwODAxMDEwMDMwWjAYMRYwFAYD
VQQDEw02YTY0MGFhZS01YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyjxu6NBEKf7MshcDaba2BwOIvAh81Ry2koeq2QS03/YcZthW66ClLq27fXJu
Eh1nQMi2z/zPo9SQoBZ4kxdA/xFSUwBP7IfaDBgz5veas2CbM5LB8+pIg5xqE4Tr
WOwWP0Yp4PMeqY7JJCKmh3T6h3B5qLzAcyGSbtoqjojZrPpTLXLVkSovyG3AmgxP
OM+AAE6iRavJpFu1oLmheLuWXmGJSmdDn+3EkVbzXXOmWHlVyDddgJefnwWv/Acy
z7cWhexqmjIBe1ssulkrFC9hTSkCMj9Bwce8MU0ObfQm+8o7Wu0yf5tbsHdUaWJu
dlSz6kyLeIkKkoG+8kc+kOdohwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9hvnHy
G+o2cuDlAik+lO7aqE5JMB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC
OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1
THQ4T2tQNFRjNERqeEVOLWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANO4HJMbfsyLYiryWXTOT8jZKWDrnQXJRl1LdBcOZLyV7s/UjSasg/syqSOtD
lmo6V1E0ea4g/RnOC4RdhFyPJwS0goWmlIqrQ4+gatrVhMKq88S+6JHdAekhllyF
jS3Aci7du+dTVY+KxyJs6SlarFU3kx4yBsvmk9ygmi+c77Ow7OYwxtMXLhlFcQc/
sFHjBrx558pP7oILmdlHWAVi+Bhw54T2F1B2qtvctuhLlNAnZEHWT7UHNYKeeaRJ
AB66GIPOlmd7OB02GKbzB0CM5O7Pk1gD7Pdv1cw6SCRgbq234L6ZMshKaPlnuBXU
2ae0NrAUIffJ1dMKw3DrH/Mvww==
-----END CERTIFICATE-----
Generated at Sat Jul 25 03:11:43 2026 by rpki-client