Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
File:                     KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json)
Hash identifier:          gRGMZGCcFlOteaiPMm7g5XOzNQAKyQGMOuIwJoficTk=
Subject key identifier:   DC:68:B2:AA:38:05:93:A3:41:0C:FC:4F:C4:77:8B:DC:F8:B8:E7:5F
Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
Certificate issuer:       /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Certificate serial:       0BE5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
Manifest number:          0BDA
Signing time:             Sat 04 Jul 2026 19:05:03 +0000
Manifest this update:     Sat 04 Jul 2026 19:05:02 +0000
Manifest next update:     Sat 11 Jul 2026 19:05:02 +0000
Files and hashes:         1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: hvWD3TWdPVZib4Nkltv6dhxeuZrJngbT0t6RKKtO53A=)
                          2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: HUSLKFky67fxy4K/r8HyQudWgBuSg6q+GxzLOv9Syp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
                          rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 19:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3045 (0xbe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
        Validity
            Not Before: Jul  4 19:05:02 2026 GMT
            Not After : Jul 11 19:05:02 2026 GMT
        Subject: CN=6a49595f-e0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8c:0c:ff:49:5a:1d:90:6a:b6:ed:c7:e9:a4:
                    62:75:26:63:47:98:57:81:42:ba:ef:f9:05:78:d0:
                    c5:93:44:4f:19:f2:12:cf:f6:75:52:28:4d:f7:1a:
                    bf:cd:29:96:e8:79:dc:be:a0:52:b3:59:aa:05:99:
                    65:53:90:09:19:10:25:93:6f:94:18:26:2d:26:77:
                    59:ff:b1:b1:f2:62:cf:c6:49:1b:2a:f7:9a:4e:d0:
                    23:99:59:62:c3:0e:09:75:6e:10:1b:b1:41:23:79:
                    fc:86:1a:16:50:1e:cf:36:08:ee:fb:b0:12:40:25:
                    aa:d5:3e:38:c5:36:ce:4d:81:82:df:d0:8a:0e:f4:
                    f6:65:b1:3a:91:07:be:55:3b:d5:95:6f:2e:f7:db:
                    b9:a5:f4:bd:f8:27:74:6a:a8:bb:6b:26:a3:4e:02:
                    54:70:0a:d0:c0:77:c8:b9:4e:fe:4a:92:ce:03:b8:
                    01:39:5d:e9:5a:d3:7c:ca:92:7d:2a:f0:10:34:62:
                    9b:c0:93:1f:04:76:e5:a3:82:e4:a9:a1:f5:ad:40:
                    56:98:95:59:6a:d2:aa:d3:79:90:d8:01:46:f3:fd:
                    a6:30:c9:a9:a4:5e:b9:ed:f9:03:33:2e:fd:c5:3f:
                    9c:c7:42:90:b1:0a:31:d4:0e:08:6a:dc:9a:2c:bc:
                    4e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:68:B2:AA:38:05:93:A3:41:0C:FC:4F:C4:77:8B:DC:F8:B8:E7:5F
            X509v3 Authority Key Identifier:
                keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:eb:d0:c2:9d:84:54:e4:86:a4:ee:a0:3c:0c:c4:17:dc:95:
         5c:78:18:11:d4:6c:a2:fd:72:a5:94:cd:76:d5:d5:de:73:8e:
         ab:43:5f:1b:89:89:6f:b0:23:dc:78:c7:4d:2e:b6:86:b8:ad:
         38:29:bf:1a:40:e4:dc:19:6d:2a:e1:84:d7:67:9a:87:fa:17:
         86:76:7c:5c:e7:7b:02:7a:7a:88:a2:c7:03:6a:1f:18:c2:29:
         e5:52:41:ed:55:9c:0b:06:fd:bd:ac:8e:01:3f:f3:44:26:7f:
         60:36:59:9e:87:d9:be:3a:4e:9f:50:53:9f:94:3e:a5:03:c5:
         59:58:4b:65:d3:17:f2:08:ba:e2:fd:f9:92:fa:85:b8:d4:97:
         8a:92:e9:6c:84:f9:bc:b5:c7:53:ff:a8:1e:f4:f2:8f:98:60:
         b5:3e:72:ee:02:a1:57:3a:86:40:93:8d:b7:fe:35:e6:ee:eb:
         a7:08:f7:83:a9:a3:63:d9:69:51:37:73:79:b5:ad:76:d3:4a:
         39:49:91:73:0e:42:11:ac:04:8f:9b:f8:2e:67:d3:71:3f:1c:
         5b:9c:3f:80:e0:ba:02:02:1d:61:2f:56:bd:f6:62:e2:67:24:
         8d:73:6e:01:78:94:ab:96:27:db:b9:b5:b0:60:7a:ae:02:bb:
         90:7e:a4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:44:13 2026 by rpki-client