Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
File:                     KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json)
Hash identifier:          oAAg8CyDwSNaxMg2++exi5YVH+GgsmMnVFNEJZ0mn0E=
Subject key identifier:   B2:DE:6C:60:49:23:C8:FA:7A:31:2D:A1:55:9E:CC:A4:6C:F9:2E:75
Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
Certificate issuer:       /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Certificate serial:       033A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
Manifest number:          032B
Signing time:             Mon 13 Jul 2026 01:11:04 +0000
Manifest this update:     Mon 13 Jul 2026 01:11:03 +0000
Manifest next update:     Mon 20 Jul 2026 01:11:03 +0000
Files and hashes:         1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: AO9ZXDHwX+28GdnY2Z21nqKXsYQlnWkQjAcZCOaipKE=)
                          2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: WyMfvYsLQHMgLVM8XPqCRpkFzoUhxbdKs79AF+461J0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
                          rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Jul 2026 01:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 826 (0x33a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7897, serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
        Validity
            Not Before: Jul 13 01:11:03 2026 GMT
            Not After : Jul 20 01:11:03 2026 GMT
        Subject: CN=6a543b27-2c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6f:fc:44:55:5e:a0:2e:a7:8a:0f:c7:c8:b9:
                    b3:4c:10:83:7a:93:0d:ac:68:57:56:46:f0:36:76:
                    2b:de:c1:54:20:98:72:5d:08:f1:6d:49:86:4b:45:
                    7d:4f:0a:90:23:4b:26:96:e4:7f:42:e6:06:a3:05:
                    6a:52:df:e7:a3:e1:98:c4:f3:22:ff:5b:14:c0:0e:
                    88:d6:c5:11:f1:02:29:09:5a:32:49:f0:74:2b:ca:
                    62:77:46:53:01:0e:e9:0f:4e:31:1d:b5:f9:28:36:
                    b1:02:4f:86:ad:2e:ed:2c:13:ad:47:e6:00:9e:59:
                    ae:13:67:a2:e0:af:9c:bf:24:db:db:ab:86:57:63:
                    e6:a7:6e:20:16:93:cc:0c:28:f1:c2:79:01:a4:98:
                    04:88:00:ff:e3:4b:e9:0d:df:bb:b1:b2:45:df:6e:
                    9c:b7:69:f5:fc:d4:8e:14:91:90:41:0f:a1:d5:c3:
                    a6:1b:6c:cf:7a:25:b5:8e:d6:2e:35:c2:f6:fd:5b:
                    08:af:c6:3e:c3:61:8b:84:83:3c:b2:52:2d:fe:64:
                    75:54:c3:aa:85:38:8f:20:2c:fe:bb:51:01:71:08:
                    46:10:90:19:17:ae:f7:85:e6:1e:39:72:0a:20:33:
                    13:3c:6b:86:46:20:cd:d2:f1:f6:53:35:a1:e9:bc:
                    3f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DE:6C:60:49:23:C8:FA:7A:31:2D:A1:55:9E:CC:A4:6C:F9:2E:75
            X509v3 Authority Key Identifier:
                keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:50:97:25:a0:4a:9b:6b:b3:26:33:1b:77:a0:67:37:ba:c0:
         da:b6:1e:73:40:f2:c9:f4:22:c0:ed:66:11:de:fa:e3:8a:22:
         21:96:4a:a1:03:4b:8a:2d:a0:84:50:d7:57:01:86:b6:61:3b:
         f8:a0:40:aa:ee:72:a4:74:64:fb:b1:ff:1a:77:6b:97:13:57:
         6d:bf:1d:54:84:30:15:33:d6:bc:8d:fd:3b:ea:c1:27:30:cb:
         7e:b7:52:75:3d:46:9b:77:c1:9e:c5:b0:45:36:a7:64:d7:45:
         ba:dd:f9:4f:3c:c7:53:fd:6f:ca:1d:d7:7a:69:58:0d:75:97:
         b9:fb:5d:0b:2c:a0:f1:e1:d1:df:28:66:ec:08:13:ee:0b:dc:
         87:95:1a:f0:21:ff:91:c8:3e:f5:64:0b:cc:82:f6:7d:88:4a:
         0b:3f:af:21:f8:e8:5f:d5:02:47:ee:35:f6:b6:30:de:02:72:
         80:7d:a8:e4:4c:f2:97:1b:d5:ac:a6:e6:59:63:e1:76:43:ac:
         b8:47:37:90:88:e6:8d:7f:c1:03:3c:a2:dc:2f:4f:3a:0d:76:
         65:7c:b7:8c:ee:1d:0e:90:3f:b8:d9:a8:06:07:67:8c:a3:f8:
         5a:18:ba:49:29:f6:79:48:d2:dc:11:b6:f5:f0:88:66:30:bc:
         da:50:c8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 10:34:52 2026 by rpki-client