Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.mft
File:                     kWVolTFx5je1xQUy4yMbNrnGjLs.mft (raw, json)
Hash identifier:          YbaK7EjaMq32vTdi+FQBIBzrKiEBjVWfEZQDBhCuU8o=
Subject key identifier:   EA:51:5E:5B:9A:7F:81:E7:58:0F:ED:B9:49:8E:27:BF:D5:4F:12:AF
Authority key identifier: 91:65:68:95:31:71:E6:37:B5:C5:05:32:E3:23:1B:36:B9:C6:8C:BB
Certificate issuer:       /CN=A916B32E/serialNumber=916568953171E637B5C50532E3231B36B9C68CBB
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWVolTFx5je1xQUy4yMbNrnGjLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.mft
Manifest number:          6C
Signing time:             Wed 19 Aug 2026 08:42:35 +0000
Manifest this update:     Wed 19 Aug 2026 08:42:35 +0000
Manifest next update:     Wed 26 Aug 2026 08:42:35 +0000
Files and hashes:         1: kWVolTFx5je1xQUy4yMbNrnGjLs.crl (hash: d9FenXKNjAlFX0IC8KZvQgdgpWLhkdoZ+ngCvx/e1yQ=)
                          2: CBA294E6000F11F1A395F9D03F6F56BC.roa (hash: 7pdhmhnOODRIBE8hIy7aPVlTry8TuLzDRyLTI2kIKXU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.crl
                          rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWVolTFx5je1xQUy4yMbNrnGjLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B32E, serialNumber=916568953171E637B5C50532E3231B36B9C68CBB
        Validity
            Not Before: Aug 19 08:42:35 2026 GMT
            Not After : Aug 26 08:42:35 2026 GMT
        Subject: CN=6a856c7b-62e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:d7:b9:7e:ff:e1:0d:29:4e:25:1e:9b:d9:
                    19:9a:c5:bd:76:e4:81:d6:fc:55:77:fa:f5:7a:33:
                    29:a0:00:be:c0:81:c4:e1:6d:54:b2:cf:38:4f:7e:
                    96:be:3e:36:d1:6f:b6:10:75:3b:b1:19:dd:d0:58:
                    d0:60:43:68:43:18:20:90:7f:8a:6b:5f:f4:64:e0:
                    46:32:b6:d7:5b:df:bd:88:73:23:6b:3f:2a:74:d0:
                    c0:4f:4d:3b:68:6b:02:49:16:a4:97:1c:b8:3c:7f:
                    97:25:9e:27:c2:da:79:23:c1:81:03:3d:9b:fd:82:
                    6f:50:eb:31:84:df:6a:98:1f:c3:bb:0b:9b:57:02:
                    3b:be:a6:f0:6f:7e:14:ae:9c:be:b8:90:39:5d:c1:
                    26:0e:1e:ce:30:b9:83:69:6e:d4:b1:ba:fb:78:ac:
                    2f:a7:85:27:b3:3e:84:ff:89:b5:d3:e5:29:4d:b4:
                    6e:4e:af:aa:5c:3e:12:17:ff:7a:f0:b6:86:df:3d:
                    bf:c9:a2:b1:ff:52:a8:aa:3e:06:5b:16:ba:2e:4a:
                    64:24:1b:04:44:20:e1:f3:8e:db:b7:dd:db:cd:31:
                    df:7d:13:92:2e:29:2d:8f:dc:43:1f:a4:c2:bd:f4:
                    d1:8f:72:47:f0:27:04:9f:11:1f:8d:63:f8:f7:a9:
                    c8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:51:5E:5B:9A:7F:81:E7:58:0F:ED:B9:49:8E:27:BF:D5:4F:12:AF
            X509v3 Authority Key Identifier:
                keyid:91:65:68:95:31:71:E6:37:B5:C5:05:32:E3:23:1B:36:B9:C6:8C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kWVolTFx5je1xQUy4yMbNrnGjLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B32E/8F4A0B96000F11F1B9492C613F6F56BC/kWVolTFx5je1xQUy4yMbNrnGjLs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8f:5a:3c:96:77:ce:15:59:3b:28:ba:0d:71:16:55:7b:37:
         ac:27:fb:8a:f5:f4:e1:8c:61:14:5d:3c:74:98:6d:f4:6a:3c:
         c3:49:70:e1:51:c3:89:50:20:cd:18:b3:1a:c8:b5:f6:6b:ca:
         0c:4b:b5:24:14:a8:c1:20:be:86:dc:4b:35:08:04:cd:9a:f8:
         ce:01:0a:aa:3d:4a:de:86:28:c8:41:b9:42:1a:06:52:1a:d9:
         11:b1:de:14:87:26:a3:22:ae:6d:cc:a8:e4:50:ce:23:99:d3:
         72:70:72:9a:33:eb:af:94:4e:50:25:51:1a:54:07:4c:68:fc:
         3a:1e:55:71:48:bb:8f:4d:d1:ef:5d:3d:f9:15:1d:cd:2b:39:
         09:46:9f:70:d2:2d:2f:da:e2:e6:73:49:4c:cc:17:f6:75:bc:
         0b:c1:2d:37:1a:25:e3:a4:da:bc:48:bf:4c:a6:5c:cd:c9:e4:
         b1:74:28:7b:da:45:a4:b5:be:39:72:77:45:28:aa:33:e3:d4:
         b2:49:32:cf:56:a2:83:57:54:84:ee:99:42:1c:c8:a9:a3:50:
         6e:da:60:b7:c4:3a:b9:32:33:a3:ca:97:17:e2:28:b5:a7:ea:
         a9:cb:40:f4:a3:0a:87:a0:ab:25:ad:7f:b8:be:44:74:7c:4d:
         a7:3d:19:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:04 2026 by rpki-client