Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
File:                     KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json)
Hash identifier:          uQpeasQ978UoAGhJMjoRzC2zBnomuDBptD5/lhzoPzI=
Subject key identifier:   A6:2A:41:E6:46:A1:41:2D:E1:D1:B0:44:11:27:45:92:B8:7E:A9:86
Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C
Certificate issuer:       /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
Manifest number:          016F
Signing time:             Mon 27 Jul 2026 06:45:16 +0000
Manifest this update:     Mon 27 Jul 2026 06:45:15 +0000
Manifest next update:     Mon 03 Aug 2026 06:45:15 +0000
Files and hashes:         1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: 1CAng/h+Kpjw7yu7/C5iawAVgsrarwz61p7MJQqKTD0=)
                          2: B9574A322C1311F0B642882AC4F9AE02.roa (hash: vOf/o1JHkb8wuECkMMHoKSsb6jXZeHUN4IdzhUHE9fc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl
                          rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
        Validity
            Not Before: Jul 27 06:45:15 2026 GMT
            Not After : Aug  3 06:45:15 2026 GMT
        Subject: CN=6a66fe7c-810e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6e:fa:08:3e:7f:c9:4f:fa:fa:de:76:24:f8:
                    26:03:f9:dd:7a:16:36:ce:f8:f5:3d:50:b7:ca:e4:
                    7d:55:85:56:ce:b3:ac:67:cc:77:af:e4:dd:e3:0f:
                    9b:70:48:27:f9:d9:35:02:5e:e2:96:2a:45:e2:82:
                    27:98:12:4f:68:fe:27:75:90:63:b7:8e:96:c0:bb:
                    1c:57:63:3f:10:c1:d5:03:99:1a:2b:b5:d6:81:f1:
                    a6:8f:c8:46:f2:2d:92:6b:51:8b:79:c9:b0:7e:67:
                    33:65:27:32:33:df:fa:d6:bc:0b:d6:0e:1f:78:ed:
                    98:61:8e:c4:57:ba:58:d8:59:4e:8b:80:85:ec:19:
                    ad:97:ed:71:17:9c:3a:9b:30:c4:a8:d0:ed:24:2a:
                    f7:6c:21:ec:5f:b8:bb:e7:be:e8:58:60:69:e3:cd:
                    33:22:a4:cf:b4:bd:77:0c:b6:79:09:04:26:65:94:
                    87:26:8b:51:f5:ae:cb:e4:7e:cd:2a:10:b6:3d:d9:
                    e2:59:f4:c9:d6:5f:59:89:e7:42:f1:f0:88:41:96:
                    f9:e2:6d:c5:c5:d5:e7:1e:7d:8f:4e:c2:c0:0d:84:
                    5f:f1:36:e7:e5:9d:61:77:e1:9c:3f:dd:62:9f:b4:
                    a3:82:fe:6c:9d:11:0d:97:c5:40:c2:0e:57:8d:bf:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2A:41:E6:46:A1:41:2D:E1:D1:B0:44:11:27:45:92:B8:7E:A9:86
            X509v3 Authority Key Identifier:
                keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:d7:cf:f6:ae:0e:32:cd:b6:72:8b:f3:4c:73:14:e1:56:30:
         37:b3:05:b8:ab:32:34:11:65:56:2a:ea:5c:36:36:e5:9e:fe:
         88:33:f9:8d:91:cf:a8:2e:87:68:ed:13:5b:f4:46:cb:d9:b0:
         61:64:b8:90:73:88:d5:8e:3c:7f:7a:b3:3a:df:1a:1b:8a:b8:
         30:1f:fe:be:a4:a5:ea:28:30:75:8e:8a:a5:2c:70:b4:fe:bf:
         4c:cb:71:f8:37:50:2b:71:71:cd:2a:90:46:36:e6:90:6b:ae:
         0b:70:a5:dd:73:29:27:44:68:ed:37:85:8d:69:1c:78:09:26:
         aa:d4:fb:1c:a7:88:ac:48:a7:ef:61:65:b7:a7:0f:d0:8d:3b:
         6d:48:3e:a0:3e:b8:23:46:6e:aa:a4:ca:ee:37:c2:20:00:5f:
         e7:94:d4:bf:d7:3c:ba:96:54:35:7a:e0:ee:95:c7:69:48:11:
         92:f0:4f:ae:5f:93:b5:cf:0f:e9:09:89:c4:1a:7d:56:73:40:
         9e:a5:0c:36:20:53:f9:1b:b8:93:8b:b7:be:1a:fd:0a:c8:f0:
         0a:fe:3a:0f:1d:54:41:31:fa:1d:67:28:ba:16:6a:30:10:88:
         b1:06:86:b0:8f:5d:19:fe:da:7e:66:ca:b7:86:42:e4:e8:e8:
         1e:3f:18:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:09:46 2026 by rpki-client