Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
File:                     kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json)
Hash identifier:          SHh2EFXAtTvGqshtV+53Dksfgrshr1Ba7l97jQIAQaM=
Subject key identifier:   94:11:47:38:DE:37:61:66:A1:EC:B1:32:AD:8C:11:1F:A4:A3:BE:E2
Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
Certificate issuer:       /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Certificate serial:       0B84
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
Manifest number:          0B7A
Signing time:             Mon 20 Jul 2026 19:33:12 +0000
Manifest this update:     Mon 20 Jul 2026 19:33:11 +0000
Manifest next update:     Mon 27 Jul 2026 19:33:11 +0000
Files and hashes:         1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: xZgS1oFw9BZxwC7V303Xrb6IX2CAqVUC2cAEkZz4e5o=)
                          2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: U8LPi0ztG0viQT8FjnrvYf4D9AeaJJe8T9chhBCJepM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
                          rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 19:33:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2948 (0xb84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
        Validity
            Not Before: Jul 20 19:33:11 2026 GMT
            Not After : Jul 27 19:33:11 2026 GMT
        Subject: CN=6a5e77f8-a1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:ff:ba:ad:74:de:8c:78:05:26:2d:61:4d:
                    a0:59:8e:85:60:77:a8:03:ad:98:64:7d:bf:c4:39:
                    c1:75:4e:b1:dd:e1:3a:01:e2:31:d6:b7:f4:0e:b1:
                    2c:5a:bf:79:b7:f9:70:19:00:04:1a:60:4c:94:19:
                    59:c2:8b:4c:64:92:f4:b9:9e:b9:7a:66:34:45:0d:
                    79:a6:c5:73:f3:0b:de:16:9c:24:0a:4e:de:62:4e:
                    1b:9c:e7:b6:81:39:44:7f:3f:96:fe:1f:57:c5:ac:
                    0e:84:54:34:55:29:05:68:e3:ce:7f:62:17:e1:de:
                    91:eb:c2:7d:b5:b8:b7:42:60:ee:60:25:6d:0f:26:
                    40:8d:07:4d:c8:94:cd:b0:d6:e6:28:e2:bd:1b:a1:
                    1a:81:af:90:87:05:c1:fa:61:c8:da:c7:8f:3f:f3:
                    be:29:d6:f3:38:18:90:05:ee:12:ba:d0:d4:d1:0d:
                    78:56:16:4f:fd:f2:35:44:06:73:d5:91:af:8e:65:
                    a4:9f:d9:8c:29:eb:90:82:48:f9:39:2a:37:43:5b:
                    8f:a5:a0:a0:9c:a5:61:61:20:f1:08:80:52:df:84:
                    61:3e:3a:4c:e1:4c:f0:a4:73:62:ed:22:25:51:7a:
                    a5:54:b6:86:a6:f5:c2:bb:d0:91:b2:32:de:48:72:
                    45:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:11:47:38:DE:37:61:66:A1:EC:B1:32:AD:8C:11:1F:A4:A3:BE:E2
            X509v3 Authority Key Identifier:
                keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:67:ac:a7:2e:1e:ef:2d:91:1d:16:d1:31:0d:91:e0:26:84:
         37:08:65:48:66:e8:00:c8:17:73:d1:82:84:ac:73:54:3c:c7:
         2b:13:71:15:c1:d2:76:40:de:f9:64:d7:dd:64:c4:cf:d8:6e:
         74:db:e1:33:7f:88:1e:0c:9b:34:66:93:29:c3:ea:b0:a8:d2:
         68:26:f6:7d:32:02:a9:1a:b3:f3:b0:ac:55:90:a2:e9:c6:28:
         6d:cd:6d:e2:f3:87:d4:d4:2e:1a:08:d9:ca:ec:e7:de:00:dc:
         48:9b:45:51:62:d8:e6:74:39:ba:32:ce:20:53:15:a4:a9:b3:
         3c:1d:ee:3f:fe:ed:81:fd:f8:50:98:5b:67:e5:10:b7:be:24:
         d9:a8:22:1c:23:97:42:6d:a2:66:8b:ab:8d:fb:0d:1a:5f:e5:
         16:b5:f6:bc:a6:ca:66:c9:85:76:72:e2:b3:6c:6d:b1:4f:98:
         74:04:03:98:94:ac:a1:be:4b:44:5e:b8:06:8f:3c:9c:a7:ee:
         bb:f1:ea:66:9b:c5:96:b2:cf:1f:71:18:d7:87:26:ee:fc:f1:
         15:96:5c:5f:35:84:11:f3:bd:ab:86:59:10:a6:78:a0:2f:c5:
         06:fe:12:f8:6f:e2:c1:4a:a1:cb:29:c2:bc:fb:a7:b1:85:d0:
         2b:a6:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:35:18 2026 by rpki-client