Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
File:                     Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json)
Hash identifier:          9r+c/XRYxxuY66CXn/EeTT73d/cTCqLNFMEBpvPJDJo=
Subject key identifier:   C5:A3:27:62:CC:F4:51:CD:F0:2E:22:94:EA:D1:91:54:42:B4:F6:F6
Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
Certificate issuer:       /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
Manifest number:          01CD
Signing time:             Tue 21 Jul 2026 05:06:18 +0000
Manifest this update:     Tue 21 Jul 2026 05:06:17 +0000
Manifest next update:     Tue 28 Jul 2026 05:06:17 +0000
Files and hashes:         1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: GrmngBwpmxHG+3F7FD7Djobe0edE1b421zEZQdHl8+c=)
                          2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: lo4efARTvEcP2ve6/ixSUWQB1NQ99xWjC1uzkkmYqbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
                          rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 05:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
        Validity
            Not Before: Jul 21 05:06:17 2026 GMT
            Not After : Jul 28 05:06:17 2026 GMT
        Subject: CN=6a5efe4a-68e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:dd:fc:32:d5:a7:a8:21:3c:42:87:5f:11:
                    e8:6b:03:c3:65:49:85:5c:be:c8:4d:ac:f2:98:40:
                    3e:2f:91:28:fc:82:52:c0:31:34:e5:84:0f:5e:4c:
                    bd:1a:be:27:d6:ae:61:72:e9:09:ee:86:fd:83:d0:
                    1c:59:5d:89:15:49:0e:e6:f2:c1:14:16:a7:44:bb:
                    08:43:31:09:43:e3:70:15:6d:2e:24:24:92:11:31:
                    8e:ee:ec:4a:eb:fe:5e:a3:d0:89:77:ab:e7:f5:d1:
                    99:02:1d:78:11:98:83:a7:90:bb:25:a6:84:5a:d4:
                    08:6d:92:16:91:89:ba:77:19:a5:ec:8d:a0:bd:34:
                    7e:e6:c1:28:f7:66:72:d0:11:ad:42:54:d4:2f:f2:
                    92:49:f9:db:99:58:b9:61:b8:c6:31:0f:11:e8:22:
                    88:12:66:94:2a:f7:c4:58:2c:cc:be:10:ae:b6:f2:
                    f4:a4:71:d4:26:ad:b5:8f:9f:ab:7f:7b:25:51:8f:
                    57:0a:75:3d:6a:d0:6f:6a:31:90:55:50:2b:ff:ab:
                    0d:4b:51:2c:d2:f9:b4:b5:96:73:d1:da:97:92:3f:
                    c1:ca:43:53:68:f8:f7:2c:ab:b3:b6:7b:fe:eb:40:
                    d4:20:c4:c4:b4:f9:4f:8c:fc:45:86:4b:ed:a7:e0:
                    91:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A3:27:62:CC:F4:51:CD:F0:2E:22:94:EA:D1:91:54:42:B4:F6:F6
            X509v3 Authority Key Identifier:
                keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ea:04:a3:2f:aa:1c:34:d6:aa:e0:a6:21:02:b3:f1:3b:35:
         a2:9b:be:3e:f8:31:c6:42:ec:fc:68:fd:a7:a2:81:e8:a7:24:
         3d:aa:03:45:52:e2:67:47:f2:d0:ce:f8:77:a6:f8:33:21:5e:
         ef:6a:32:77:cc:f5:32:6c:84:29:63:f0:60:9c:c3:53:68:95:
         7c:c3:0d:20:fb:9a:87:03:14:57:0d:77:0a:ab:62:1b:17:c4:
         48:0a:c7:e8:3d:a9:44:20:14:3c:8e:62:cf:1d:75:60:58:fa:
         5c:9f:72:c6:7d:b2:07:f4:92:38:e1:ed:58:6b:86:26:1a:9a:
         44:f4:98:6a:51:7d:dd:0e:fc:37:00:7e:a7:e9:6c:10:2a:de:
         42:2e:2d:ae:4f:75:29:6a:af:9f:51:3a:fc:91:7d:60:56:b5:
         a7:3e:51:00:ec:ee:85:ac:60:6a:bf:05:63:9b:d8:5d:db:e0:
         6f:6a:75:94:e6:3e:a5:a4:e9:07:65:c5:22:08:61:96:52:9a:
         6c:79:21:ac:65:b3:ca:33:5c:20:f0:ca:46:50:de:bd:46:d1:
         57:fd:22:28:ec:38:3d:27:31:6c:92:6b:e6:49:21:33:59:4b:
         e1:78:89:0b:88:a3:4c:1e:bd:d0:15:cf:94:01:93:7f:ed:2d:
         70:29:77:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzhBOUYxMTAvBgNVBAUTKDJBQ0U5NDBCNURDMzAzMzdEMkU1NDIxNzIyMTkxQUI5
MjNBQTc1QzcwHhcNMjYwNzIxMDUwNjE3WhcNMjYwNzI4MDUwNjE3WjAYMRYwFAYD
VQQDEw02YTVlZmU0YS02OGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZ7d/DLVp6ghPEKHXxHoawPDZUmFXL7ITazymEA+L5Eo/IJSwDE05YQPXky9
Gr4n1q5hcukJ7ob9g9AcWV2JFUkO5vLBFBanRLsIQzEJQ+NwFW0uJCSSETGO7uxK
6/5eo9CJd6vn9dGZAh14EZiDp5C7JaaEWtQIbZIWkYm6dxml7I2gvTR+5sEo92Zy
0BGtQlTUL/KSSfnbmVi5YbjGMQ8R6CKIEmaUKvfEWCzMvhCutvL0pHHUJq21j5+r
f3slUY9XCnU9atBvajGQVVAr/6sNS1Es0vm0tZZz0dqXkj/BykNTaPj3LKuztnv+
60DUIMTEtPlPjPxFhkvtp+CRIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWjJ2LM
9FHN8C4ilOrRkVRCtPb2MB8GA1UdIwQYMBaAFCrOlAtdwwM30uVCFyIZGrkjqnXH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE5Ri84MkM2N0VBNkM1
NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6ZlM1VUlYSWhrYXVTT3Fk
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tzNlVDMTNEQXpmUzVVSVhJaGthdVNPcWRjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OEE5Ri84MkM2N0VBNkM1NkQxMUVFQjI3ODUzNEFDNEY5QUUwMi9LczZVQzEzREF6
ZlM1VUlYSWhrYXVTT3FkY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIeoEoy+qHDTWquCmIQKz8Ts1opu+PvgxxkLs/Gj9p6KB6KckPaoDRVLiZ0fy
0M74d6b4MyFe72oyd8z1MmyEKWPwYJzDU2iVfMMNIPuahwMUVw13CqtiGxfESArH
6D2pRCAUPI5izx11YFj6XJ9yxn2yB/SSOOHtWGuGJhqaRPSYalF93Q78NwB+p+ls
ECreQi4trk91KWqvn1E6/JF9YFa1pz5RAOzuhaxgar8FY5vYXdvgb2p1lOY+paTp
B2XFIghhllKabHkhrGWzyjNcIPDKRlDevUbRV/0iKOw4PScxbJJr5kkhM1lL4XiJ
C4ijTB690BXPlAGTf+0tcCl3fA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:18:54 2026 by rpki-client