Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
File:                     kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft (raw, json)
Hash identifier:          UtLmyPmiuGy/Ymms0FL55xwkIm+FM/uOlUqyZ0/TpD0=
Subject key identifier:   54:8E:D8:7E:14:73:2F:8E:11:DF:83:D1:A7:3B:54:FA:50:2B:65:78
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Certificate issuer:       /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial:       0A74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
Manifest number:          0A5E
Signing time:             Mon 20 Jul 2026 20:03:00 +0000
Manifest this update:     Mon 20 Jul 2026 20:03:00 +0000
Manifest next update:     Mon 27 Jul 2026 20:03:00 +0000
Files and hashes:         1: kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl (hash: dqspPqLIF31Nv1y6YiDkf+6xM+sATcZfJt1QWLjnzaA=)
                          2: BB7C684E8E0011EA90489A40C4F9AE02.roa (hash: ILtcBpKUIMyb1sUrv3wjwkYLjHTXDdZBLqBGymf477E=)
                          3: EA74C41E84D911EF9E11D46FC4F9AE02.roa (hash: tdt9eteTC9tYcmoaSUex2GA2F4pEXRQmVpOqMgTTHvY=)
                          4: EC4788308DFD11EA8AAFBB36C4F9AE02.roa (hash: paT4d9t1hAPjA3Bx2I1y5IKq0oxlBuTqZwqH8gxt6VE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
                          rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 20:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2676 (0xa74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
        Validity
            Not Before: Jul 20 20:03:00 2026 GMT
            Not After : Jul 27 20:03:00 2026 GMT
        Subject: CN=6a5e7ef4-7b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:3c:97:f7:b4:16:70:0c:8e:96:42:f7:29:
                    7a:4c:d2:42:2f:a7:e5:ce:c7:10:8e:4a:8e:d4:04:
                    0a:97:f8:cc:8e:37:4b:bc:e7:87:ee:1b:7f:aa:ee:
                    46:e1:6e:c7:73:b9:39:d0:a6:70:98:b0:67:7e:ed:
                    ea:ea:71:c3:b6:f5:30:95:92:a4:c0:4f:04:89:cb:
                    8b:2b:3c:cd:df:84:39:99:e7:4c:d0:54:20:8c:29:
                    60:67:89:d4:fc:1f:7e:d1:a4:07:db:cb:9b:dc:bb:
                    dc:13:4e:b5:dd:a1:4a:e7:cc:77:c1:71:fd:eb:60:
                    df:41:cd:b1:9f:83:0b:45:df:73:ff:56:b7:ff:4d:
                    e1:f8:61:35:b2:0d:bb:2a:a4:ff:68:e1:8d:94:b1:
                    32:51:91:39:f7:ec:21:f2:e5:32:46:18:71:c3:aa:
                    48:e5:30:94:01:23:4b:98:99:d5:bd:fd:3a:9f:bc:
                    b5:b6:24:72:71:8c:67:67:bb:a1:3f:66:d2:a2:9e:
                    8d:05:10:ac:c1:3e:1b:f8:c2:16:31:9f:7e:6b:65:
                    b2:e5:95:00:55:c8:68:fa:62:8e:7b:0a:a3:f8:79:
                    e7:5b:57:60:30:8a:96:64:8b:5d:78:19:2f:a2:1b:
                    8b:5b:60:da:5f:ec:04:30:26:29:6e:4e:79:69:05:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8E:D8:7E:14:73:2F:8E:11:DF:83:D1:A7:3B:54:FA:50:2B:65:78
            X509v3 Authority Key Identifier:
                keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9d:9e:13:18:29:29:a4:42:dd:26:e8:43:93:23:18:2e:6f:
         d9:83:77:1b:74:51:30:79:3d:06:8f:b8:95:b3:5d:f8:da:9f:
         f4:ab:6f:19:a8:3f:fa:ce:c0:9c:a4:b2:b7:1c:4b:22:b1:3f:
         1d:f1:4c:f9:e6:7f:e4:fc:da:c7:71:06:fb:4c:01:ad:72:18:
         77:6b:75:3a:e0:ee:c0:28:17:24:da:bb:47:7b:57:cf:df:8b:
         08:1f:24:46:c2:34:56:d0:a0:7f:dc:c7:ce:9b:d8:c3:11:62:
         46:6c:9a:15:10:5b:d0:b2:58:57:5f:13:b0:29:ec:24:1a:77:
         8d:0c:08:27:85:cb:22:06:8d:c6:3b:56:f3:d2:71:39:ac:ab:
         55:da:c4:02:83:53:5a:0d:28:43:41:7b:00:08:04:66:f0:76:
         85:6d:a4:72:ab:b7:99:33:d9:c7:c0:50:a1:be:8f:57:91:50:
         d9:b5:75:93:de:7f:00:46:0a:3d:4b:3a:ac:83:2c:82:fb:39:
         47:4c:02:7b:cb:fc:d3:d2:9e:30:af:24:df:94:05:e7:20:4e:
         0e:a4:a1:d9:64:4e:3c:7e:16:4a:56:d8:04:ab:74:74:ab:57:
         c9:bf:ae:39:07:ed:d2:93:27:b9:6f:b4:ba:f4:43:c3:a6:b6:
         22:ab:f0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:06:23 2026 by rpki-client