Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
File:                     kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json)
Hash identifier:          aU9wnOvwChaZT22+1cmppKCuhLS9O0BGuoBExHu6Iss=
Subject key identifier:   AB:C6:F5:16:AD:86:4D:51:7D:D0:95:76:C2:46:92:3E:DA:4F:2A:F5
Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
Certificate issuer:       /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Certificate serial:       01F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
Manifest number:          01EA
Signing time:             Fri 17 Jul 2026 04:29:00 +0000
Manifest this update:     Fri 17 Jul 2026 04:29:00 +0000
Manifest next update:     Fri 24 Jul 2026 04:29:00 +0000
Files and hashes:         1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: Q+kClklrPwp6anCuSfTExqeeyrX7OVmP/b+y5QWkxdE=)
                          2: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: X+dqp+Ah396uKCPwR9bMS10gj/YjMNXUMTYy7soM8Zc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
                          rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 04:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
        Validity
            Not Before: Jul 17 04:29:00 2026 GMT
            Not After : Jul 24 04:29:00 2026 GMT
        Subject: CN=6a59af8c-4329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:05:c0:6a:66:9b:30:98:6c:c6:0b:48:e7:
                    3d:ae:04:e0:c6:53:b4:cb:df:22:87:cb:d8:38:cf:
                    55:81:47:e9:36:25:d4:95:8c:9e:65:fe:93:66:5d:
                    82:fa:31:4b:17:d1:32:f0:2b:e1:19:53:8b:7e:e3:
                    23:6f:b6:b4:39:28:34:97:88:4d:57:d6:39:a8:07:
                    cc:12:d9:3c:47:71:e8:cc:4a:1d:e8:d9:56:0d:53:
                    fe:2c:63:73:3a:03:e9:33:15:f8:e3:4a:83:8b:4f:
                    b4:81:1f:b0:4a:e6:5b:71:d5:09:61:f2:4d:29:54:
                    b7:1c:d2:82:3c:b5:7f:d9:22:f4:48:a4:a7:8d:18:
                    93:3e:24:ce:e2:6d:94:3a:1c:7f:7d:6b:88:79:ee:
                    2d:eb:21:61:93:4b:06:90:68:5c:92:a4:db:ba:db:
                    f5:bf:10:79:9c:35:14:e7:96:42:a7:f3:90:6f:96:
                    03:1d:08:78:a5:6e:6b:15:91:66:d0:5a:24:01:e4:
                    5f:9e:c1:ef:c5:1d:23:76:10:62:2f:4a:a9:f1:f6:
                    f5:51:bb:f9:2f:8e:15:c1:fe:9f:2e:e1:d0:60:77:
                    b2:1a:34:4b:af:5d:e6:96:3a:28:90:9c:f1:b3:1b:
                    12:7a:49:8c:1c:0a:ff:bd:f4:e3:bf:8d:d4:1a:06:
                    48:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C6:F5:16:AD:86:4D:51:7D:D0:95:76:C2:46:92:3E:DA:4F:2A:F5
            X509v3 Authority Key Identifier:
                keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:31:3c:03:21:35:93:64:7a:ac:9c:4f:87:cd:cc:31:39:1c:
         59:8e:e9:6a:0f:80:47:c1:42:21:3a:4b:12:6f:2b:e8:ea:78:
         35:8c:5e:76:88:f8:df:5d:fe:bd:0b:be:2b:f6:cf:39:7f:c1:
         b0:36:da:d9:b4:5b:b0:d9:02:60:ca:71:3b:43:e9:62:f6:97:
         99:86:b4:1f:08:db:ea:f6:d7:28:6c:cb:d8:a0:92:63:87:51:
         f6:26:9b:e1:9f:e7:ed:50:e9:f6:93:c6:a9:fa:59:c7:67:14:
         0a:f6:bf:b3:46:71:90:60:2c:bd:25:05:3e:e1:57:86:fd:6c:
         6e:e3:82:06:50:fa:e5:5b:3e:07:e3:75:d5:ec:3d:c4:4e:8e:
         5a:ac:42:ca:b5:8f:31:ca:eb:50:ee:df:c2:7d:0a:13:99:1e:
         21:b1:08:7b:13:88:8f:e1:de:e2:fe:99:45:3d:50:22:ba:9e:
         60:20:50:0c:07:1f:19:ca:2f:c5:4b:a1:e8:de:57:91:64:d4:
         50:a0:d6:15:6b:e1:4b:41:12:77:ce:22:2f:da:4d:c4:06:44:
         99:69:4f:c3:c0:a9:3d:5c:fc:49:f5:3e:15:a2:d2:1f:1c:72:
         fc:d5:25:9f:ce:c5:93:81:48:8a:06:bb:84:a1:af:13:f2:38:
         69:a7:84:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:19 2026 by rpki-client