Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
File:                     kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft (raw, json)
Hash identifier:          //4AOrS69iogz1BCzu5fAfVSFxdO6pRw3XSQxQl7PR4=
Subject key identifier:   A5:05:30:E6:4A:C8:74:96:D0:61:A1:FE:17:09:4B:97:89:06:71:9A
Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
Certificate issuer:       /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
Manifest number:          0102
Signing time:             Thu 23 Jul 2026 08:02:40 +0000
Manifest this update:     Thu 23 Jul 2026 08:02:40 +0000
Manifest next update:     Thu 30 Jul 2026 08:02:40 +0000
Files and hashes:         1: kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl (hash: fUQ+W0nik6MYBvYNV/N0c5isd9ErMn6wvLNORQomHR8=)
                          2: B754B304107A11F19C5931212E3D8C67.roa (hash: huCm1mBmBIglhSBRl6UnmkwQvjS11VKDaF0YxEP0qiI=)
                          3: DA700744185511F09304D972C4F9AE02.roa (hash: xEV8fhHLEIKGrI5YTOsWxn19pEc9YJdRhWQdUmLp4HI=)
                          4: E658E72CB4A611F08CEAB576C4F9AE02.roa (hash: LB1cMpp6lgRAraUuswM5qd18Dx/7M0dNMmnPvZo4tAw=)
                          5: 48FC67FA3F0311F19638C692C8833773.roa (hash: q/F4IX1jrr64j6ZLgDWTXya8iVRGveIbkohShgwB5Hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
                          rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
        Validity
            Not Before: Jul 23 08:02:40 2026 GMT
            Not After : Jul 30 08:02:40 2026 GMT
        Subject: CN=6a61caa0-3dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4f:90:11:be:b4:4d:3b:f8:88:04:45:d8:78:
                    83:5c:99:65:b5:24:c1:dd:1e:bc:57:35:5f:79:16:
                    ea:b9:64:8e:b5:0f:4b:d0:87:20:8d:3a:d0:fb:7d:
                    57:9f:2c:49:6e:32:52:7b:29:a1:72:e9:16:2e:3e:
                    31:14:26:31:d3:b0:c4:5c:2a:14:cb:8a:a3:06:e3:
                    dd:d4:da:16:d0:e9:a1:7d:fb:7c:36:5d:1c:57:64:
                    d2:7b:3d:b8:d9:2a:ac:d9:c8:97:b0:f8:cb:a4:5e:
                    04:e0:ae:b9:69:08:dc:d2:33:85:ce:64:ed:9e:d5:
                    47:d2:e3:b7:aa:19:82:10:70:f5:9e:ba:18:4a:9e:
                    ee:cf:7f:c3:15:2a:6b:cc:02:70:ec:91:44:01:c4:
                    3e:f8:9d:8a:cd:1d:d2:4e:26:76:98:84:f7:d6:a8:
                    4e:60:df:fa:87:3d:cc:43:2a:92:43:f4:d4:52:87:
                    1f:51:de:8c:8c:97:b2:d7:5b:89:2f:f9:85:b0:b2:
                    b8:df:a0:6f:ea:b3:3a:45:cb:05:45:95:dc:98:2b:
                    dd:dc:1d:85:9e:95:d2:e7:53:80:96:83:4c:3f:11:
                    af:9a:79:f9:b6:2f:16:d9:f1:27:18:f0:84:74:bb:
                    1a:42:2b:51:94:c4:52:46:7e:56:9e:02:15:55:e0:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:05:30:E6:4A:C8:74:96:D0:61:A1:FE:17:09:4B:97:89:06:71:9A
            X509v3 Authority Key Identifier:
                keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:3d:be:c6:b0:ae:7f:f5:f1:19:02:6c:ea:eb:da:5d:e7:5c:
         bf:83:5c:0e:a9:ee:bb:0c:57:bb:d9:6e:6f:fb:38:56:c8:bb:
         b3:75:6c:5e:8a:ef:cb:a2:a4:e1:c5:b8:e3:e1:2e:e5:2c:eb:
         02:66:44:bf:85:66:e1:e9:b4:7c:6c:bb:82:4a:dc:ce:4e:69:
         18:3e:5a:5f:07:8f:b6:29:fb:58:dc:de:16:9c:53:51:d2:91:
         27:23:3f:83:21:6b:1b:b9:98:4f:7f:90:47:77:28:f3:d6:36:
         b0:f7:a8:96:93:59:13:8f:60:44:15:14:26:85:1e:47:26:40:
         5c:dd:20:62:b7:d3:30:9a:48:5e:bb:6e:31:a4:35:b1:f8:cc:
         57:86:3f:e7:7f:78:e0:6f:4e:c2:83:c2:93:a0:3b:85:1e:ce:
         2b:1f:cf:3f:af:72:d0:d0:0a:59:04:6f:48:92:38:6e:b7:93:
         38:b7:1c:bc:a3:82:5e:18:1e:2f:77:56:c2:ee:f8:31:d9:d0:
         13:09:57:c1:67:f3:1e:25:f3:97:bf:e7:22:8d:b2:1c:07:65:
         99:90:70:b6:eb:5b:6d:58:3a:49:a3:b4:ea:14:e6:62:6a:59:
         f2:77:80:6c:f4:ef:75:76:85:63:f3:55:09:8c:2a:78:88:22:
         39:61:9a:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY1QjkxMTAvBgNVBAUTKDkxMTc2RDE2OUM0MkYwM0Q5NTI4MkJCQkEyMDRDNEU0
NEQzMUVEMDkwHhcNMjYwNzIzMDgwMjQwWhcNMjYwNzMwMDgwMjQwWjAYMRYwFAYD
VQQDEw02YTYxY2FhMC0zZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA10+QEb60TTv4iARF2HiDXJlltSTB3R68VzVfeRbquWSOtQ9L0IcgjTrQ+31X
nyxJbjJSeymhcukWLj4xFCYx07DEXCoUy4qjBuPd1NoW0Omhfft8Nl0cV2TSez24
2Sqs2ciXsPjLpF4E4K65aQjc0jOFzmTtntVH0uO3qhmCEHD1nroYSp7uz3/DFSpr
zAJw7JFEAcQ++J2KzR3STiZ2mIT31qhOYN/6hz3MQyqSQ/TUUocfUd6MjJey11uJ
L/mFsLK436Bv6rM6RcsFRZXcmCvd3B2FnpXS51OAloNMPxGvmnn5ti8W2fEnGPCE
dLsaQitRlMRSRn5WngIVVeAzNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUFMOZK
yHSW0GGh/hcJS5eJBnGaMB8GA1UdIwQYMBaAFJEXbRacQvA9lSgru6IExORNMe0J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVCOS81MjAyRDAyODBE
RjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhEMlZLQ3U3b2dURTVFMHg3
UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tSZHRGcHhDOEQyVktDdTdvZ1RFNUUweDdRay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjVCOS81MjAyRDAyODBERjkxMUYwOEU2RTc2MkFDNEY5QUUwMi9rUmR0RnB4QzhE
MlZLQ3U3b2dURTVFMHg3UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtz2+xrCuf/XxGQJs6uvaXedcv4NcDqnuuwxXu9lub/s4Vsi7s3VsXorvy6Kk
4cW44+Eu5SzrAmZEv4Vm4em0fGy7gkrczk5pGD5aXwePtin7WNzeFpxTUdKRJyM/
gyFrG7mYT3+QR3co89Y2sPeolpNZE49gRBUUJoUeRyZAXN0gYrfTMJpIXrtuMaQ1
sfjMV4Y/53944G9OwoPCk6A7hR7OKx/PP69y0NAKWQRvSJI4breTOLccvKOCXhge
L3dWwu74MdnQEwlXwWfzHiXzl7/nIo2yHAdlmZBwtutbbVg6SaO06hTmYmpZ8neA
bPTvdXaFY/NVCYwqeIgiOWGaVQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:05:30 2026 by rpki-client