Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
File:                     kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json)
Hash identifier:          bCdoAfPPrXJjzFkQ3tcZUm4FXrvtFPId8G2FfXKlzEA=
Subject key identifier:   B9:E2:A0:98:7E:5F:94:95:38:50:6F:4B:A5:21:35:33:75:50:16:DE
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Certificate issuer:       /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial:       10B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
Manifest number:          1094
Signing time:             Wed 20 May 2026 17:22:18 +0000
Manifest this update:     Wed 20 May 2026 17:22:18 +0000
Manifest next update:     Wed 27 May 2026 17:22:18 +0000
Files and hashes:         1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: iYHCQ3cTiDyNoQ9ObTcSSQv9zlt2/QdN4U6JW5T7KaE=)
                          2: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: qwQKPoIUFxOPN3MeCcCPfp5jviDrGHMY5L0x8rUXkG0=)
                          3: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: TLISGWppoBnnfbHZFjULlfKEwbQDopU4rmYPr0nU0OE=)
                          4: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: 9oD7ePq9FUpAKk3w/IsQePKTLx2iOd3tFZxiCRUR3No=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
                          rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4281 (0x10b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
        Validity
            Not Before: May 20 17:22:18 2026 GMT
            Not After : May 27 17:22:18 2026 GMT
        Subject: CN=6a0dedca-3417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:1c:52:38:d5:9c:e5:8a:0d:63:12:18:dd:
                    f8:46:33:32:fa:53:6d:88:6c:44:da:ff:e0:4a:94:
                    4e:02:83:53:d1:3b:73:65:c5:a2:d8:eb:95:6d:17:
                    18:93:ce:d3:fe:6d:3c:25:f8:25:ab:c0:10:11:3d:
                    71:74:cc:75:fc:53:c1:d2:bc:09:2e:28:ea:93:5d:
                    3f:e9:fc:58:28:6d:f4:87:9d:85:d1:5b:17:03:12:
                    8f:33:2f:5b:55:ad:88:c1:fb:c4:64:98:0f:16:83:
                    37:27:0c:56:2e:e1:56:8b:46:0d:07:17:d2:d8:55:
                    84:ef:16:ef:a1:1a:98:e9:b9:f1:3f:71:d9:78:81:
                    18:10:d1:59:c8:b9:4a:48:94:d6:ae:a0:cc:46:e0:
                    d0:30:66:d5:a4:70:1a:f4:27:37:ce:9f:63:af:02:
                    a1:db:2b:8c:2f:9f:37:bb:77:93:14:65:23:bb:36:
                    2c:ab:c6:19:3f:e1:1f:4f:28:49:4a:2b:05:3c:aa:
                    4a:b1:45:b8:a2:a0:c2:34:37:49:04:55:e7:e0:3b:
                    e2:d6:f4:15:7d:2d:07:39:94:b9:b4:a8:fa:52:49:
                    20:84:ac:43:39:04:e2:2e:79:32:e0:8a:f8:46:e6:
                    3a:3d:1c:2c:0e:ed:a1:34:4f:c3:13:d1:04:cd:d5:
                    2e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E2:A0:98:7E:5F:94:95:38:50:6F:4B:A5:21:35:33:75:50:16:DE
            X509v3 Authority Key Identifier:
                keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e9:49:3a:44:6f:e7:2b:9c:a7:79:40:6c:ef:69:6b:fd:4e:
         d6:21:88:56:38:ca:14:3c:06:0a:48:fc:c3:d6:bb:02:12:3b:
         ba:30:d0:08:fb:4a:ac:e5:15:42:94:1c:82:8c:f1:6e:aa:5c:
         92:13:de:8c:0c:0a:c5:98:a8:0f:38:f1:da:c6:5d:39:4b:e5:
         30:cc:b1:e7:b4:3e:6b:59:47:c7:f0:40:25:b4:c6:a9:1a:83:
         70:dc:9a:5e:5d:11:1f:43:2a:e2:bf:1a:ff:58:4c:d1:1d:b8:
         a2:33:4e:24:43:d6:f8:6b:0a:11:d2:5e:e9:ee:80:91:b0:0f:
         8e:45:7a:ad:f3:97:9d:e9:9d:95:97:95:67:b0:37:35:a6:dc:
         80:10:53:6c:29:99:a1:92:9e:98:05:58:dc:c3:e8:3a:91:65:
         fe:22:97:ea:d5:cf:83:8c:4f:25:3e:9b:9a:6f:e5:b6:ff:74:
         fe:e4:02:04:8f:43:d3:e4:13:a0:fe:81:df:8e:78:bf:12:05:
         69:c5:0b:93:a0:45:92:fe:09:bc:9a:2d:00:33:e6:eb:a4:59:
         bc:56:59:de:ae:ce:62:77:e2:00:a8:e2:4f:0c:72:b3:28:81:
         81:d9:d8:03:e0:5c:e0:64:55:ee:f8:8f:23:38:a2:5e:78:7d:
         60:57:24:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:06 2026 by rpki-client