Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
File:                     _KtbpyYSYFeOSNmqwBIRqzpaIwk.mft (raw, json)
Hash identifier:          gK+3fzpSlf90iNH7cc7DWu9xyALdLqNedHGMfy6YG+0=
Subject key identifier:   6E:34:BB:8E:ED:AD:CC:DE:5C:5B:20:F8:84:1A:28:2D:95:7E:2A:E4
Authority key identifier: FC:AB:5B:A7:26:12:60:57:8E:48:D9:AA:C0:12:11:AB:3A:5A:23:09
Certificate issuer:       /CN=A9186214/serialNumber=FCAB5BA7261260578E48D9AAC01211AB3A5A2309
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
Manifest number:          36
Signing time:             Sun 26 Jul 2026 15:38:02 +0000
Manifest this update:     Sun 26 Jul 2026 15:38:01 +0000
Manifest next update:     Sun 02 Aug 2026 15:38:01 +0000
Files and hashes:         1: _KtbpyYSYFeOSNmqwBIRqzpaIwk.crl (hash: KnliJtoYVl/Rw5mvhLOrLMaFCiGG2Ri4Loa9Fs3OC3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 15:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=FCAB5BA7261260578E48D9AAC01211AB3A5A2309
        Validity
            Not Before: Jul 26 15:38:01 2026 GMT
            Not After : Aug  2 15:38:01 2026 GMT
        Subject: CN=6a6629da-d8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:ec:2b:00:c1:a4:48:5a:6c:fd:cb:80:25:
                    ec:6d:78:37:c2:18:d7:dd:15:fa:10:f6:25:7c:8b:
                    a9:b7:1f:ae:fc:9d:29:f5:c1:d0:12:9b:3b:e0:36:
                    13:52:11:d5:96:a6:9c:e9:ce:19:0a:66:6e:a4:9d:
                    bb:82:d1:12:cb:f6:b4:e1:aa:07:f4:30:f5:56:e1:
                    67:e9:74:c0:54:14:96:b4:d7:19:78:25:64:f1:d7:
                    58:07:cb:ec:ee:0d:90:9f:38:0c:dc:15:f5:90:cb:
                    03:fb:5a:d4:b0:62:a8:98:25:d8:2a:99:13:d3:81:
                    83:fc:ce:0d:98:a4:14:98:c4:e9:01:80:4d:07:eb:
                    cd:0a:d3:0f:f2:c9:63:e3:c6:35:0b:10:b2:6b:a3:
                    51:4a:c8:ea:3f:8c:93:65:b1:a1:1c:f3:e4:ef:e4:
                    46:ae:b9:18:30:c8:b5:08:22:c6:3a:f1:d7:7c:a0:
                    b5:c7:b2:97:f5:5d:1a:f5:bd:f6:13:8f:31:06:08:
                    e1:91:57:13:85:59:d9:d7:40:d6:37:c2:60:05:f0:
                    6d:24:95:1b:9e:2f:32:d0:b6:df:f1:15:78:89:36:
                    85:6c:6a:fb:06:01:5e:d7:11:0b:b2:50:1b:79:99:
                    2e:14:d0:ce:e6:ea:dd:91:18:70:08:f7:d6:30:a6:
                    08:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:34:BB:8E:ED:AD:CC:DE:5C:5B:20:F8:84:1A:28:2D:95:7E:2A:E4
            X509v3 Authority Key Identifier:
                keyid:FC:AB:5B:A7:26:12:60:57:8E:48:D9:AA:C0:12:11:AB:3A:5A:23:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:bf:14:28:61:a1:6e:64:db:f5:ee:b5:90:3e:12:02:1d:a1:
         09:6d:af:4b:ed:22:2a:5c:4c:43:20:f5:73:31:b6:44:66:02:
         c1:fb:5d:3b:a6:c3:c0:8f:90:b2:fa:b0:2b:3d:ba:da:93:22:
         ce:d3:fc:60:ae:8b:75:7b:84:c6:b8:99:38:05:17:7c:c8:d9:
         4f:4e:0f:71:2e:fe:29:a0:e2:eb:98:f2:cb:5a:51:3a:78:4e:
         65:10:80:b9:d3:17:39:4a:37:84:4b:53:48:12:42:08:74:a6:
         3a:08:c5:7b:0a:66:23:bf:c6:dc:b8:44:e3:10:e0:82:16:08:
         3e:55:66:0d:a8:05:9b:3e:75:76:a9:d9:1d:04:a2:58:65:b5:
         c9:bc:03:46:ea:a0:27:1a:01:94:c2:15:9b:0e:9b:fa:46:4f:
         5d:b1:47:b1:fd:9d:a4:90:e3:b4:92:de:fe:c4:16:17:a5:b3:
         df:78:05:15:07:00:90:0a:bc:cf:8e:87:2b:74:68:bf:1b:52:
         00:7d:6a:a5:dc:5e:b4:51:4d:cc:54:11:1d:fd:10:1d:0a:43:
         2e:cd:e8:0b:83:36:63:09:25:af:3b:44:6a:70:26:fb:d9:8c:
         a4:b4:82:d8:b0:bc:c3:bd:59:b3:79:97:38:c6:90:b6:41:73:
         19:2c:9f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:17 2026 by rpki-client