Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
File:                     KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json)
Hash identifier:          UUwYumkZUkM4g5VphHhVy8pc/DhjfDpLxjhEBYis3Ok=
Subject key identifier:   BA:62:8E:69:B1:0D:3C:BA:B5:EF:32:15:A0:36:2A:5D:25:C5:62:8E
Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
Certificate issuer:       /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
Manifest number:          E7
Signing time:             Fri 17 Jul 2026 07:42:04 +0000
Manifest this update:     Fri 17 Jul 2026 07:42:04 +0000
Manifest next update:     Fri 24 Jul 2026 07:42:04 +0000
Files and hashes:         1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: PItdQJx7LRwMkO9Ga4E8r2w9ULxop+OqLL0shupXiBY=)
                          2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: QsP9uqEiNFI8mG4UNJDemIDsWI8VClhN6iYFmbVOcY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
                          rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
        Validity
            Not Before: Jul 17 07:42:04 2026 GMT
            Not After : Jul 24 07:42:04 2026 GMT
        Subject: CN=6a59dccc-cf7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:6d:6a:f5:12:45:d7:2e:81:ed:dc:05:c5:
                    3f:94:84:22:4a:25:ea:5a:5e:ec:6e:e6:c5:10:09:
                    0d:03:5d:8d:a6:34:f8:20:35:c6:6b:06:44:ed:56:
                    68:80:00:0a:e7:f1:96:8c:69:aa:17:26:b8:b1:4a:
                    e5:7e:cd:fb:1d:8c:bd:58:9e:09:a7:ae:af:76:82:
                    61:6e:ed:d6:54:c5:6c:6f:5d:93:72:7d:1a:d0:62:
                    d6:9d:21:5e:d9:59:26:75:07:7e:6b:23:c0:42:65:
                    25:7b:37:6c:07:3e:6c:7c:a0:fb:4f:94:e8:70:04:
                    65:fd:52:5f:1b:07:8d:ee:53:c5:ec:d9:24:10:6e:
                    bc:c9:33:9d:5e:7c:09:fc:d8:97:c1:76:f0:13:1d:
                    77:44:13:ba:c1:d4:84:d8:19:9c:d9:06:7f:c8:1b:
                    3a:d1:49:f3:7c:3d:e4:3e:1e:9d:e4:ee:0b:3e:44:
                    f3:ac:b9:48:01:b3:8b:e1:e2:cc:ca:f1:26:be:12:
                    14:44:0c:c5:85:1d:2b:fb:03:d1:d5:df:18:47:d4:
                    c2:68:92:ab:5e:47:18:7d:20:aa:88:3f:70:a0:96:
                    dc:2a:ee:da:b1:ef:f7:e3:81:60:9c:61:b1:6d:64:
                    5d:ca:4d:10:f3:bd:82:0a:1d:e5:c5:ab:3a:38:4c:
                    21:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:62:8E:69:B1:0D:3C:BA:B5:EF:32:15:A0:36:2A:5D:25:C5:62:8E
            X509v3 Authority Key Identifier:
                keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5b:12:ac:ae:ad:07:11:31:81:08:37:7a:a9:8d:2d:aa:45:
         03:20:58:4b:14:f9:b7:14:94:a5:bc:a6:d4:8a:0e:ae:01:d8:
         87:43:ea:b5:cd:52:94:10:90:1e:c7:4c:9a:47:74:9f:39:da:
         1f:c4:5b:1d:c5:69:98:64:4e:41:d7:6d:28:fb:57:da:90:61:
         f0:a0:55:67:62:af:ce:e6:9f:66:57:d5:85:5e:eb:f1:aa:67:
         2a:c8:b2:c3:fa:45:5c:44:50:d1:a8:81:c8:2a:cb:10:b7:50:
         70:62:ce:fc:98:9b:2a:41:17:87:ef:4b:bf:60:60:cf:78:6d:
         16:36:61:e2:0b:93:12:f9:26:fd:ba:17:0e:65:fb:19:d0:78:
         2c:79:da:03:4f:c2:87:3e:23:bc:62:4d:7a:5c:b9:2f:2d:5f:
         4e:84:98:f4:bb:34:e0:ed:25:a2:af:11:96:77:06:fb:df:87:
         c0:b7:d3:a7:0c:30:91:db:98:46:e7:a4:1e:85:d5:61:e3:9d:
         21:e5:1a:45:5e:02:f3:33:5e:1c:c2:c8:89:93:3a:2c:97:e3:
         98:31:a7:bd:cf:21:43:97:b8:e0:87:e5:6e:1e:89:6c:18:25:
         e2:51:41:99:1a:5f:11:40:9d:e4:05:6c:2a:06:87:7c:e3:23:
         b4:c1:a0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:17 2026 by rpki-client