Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
File:                     kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json)
Hash identifier:          DD1wWarsV9YCCxwzSpueMq26XfhP13eIFR4nBoF64BE=
Subject key identifier:   DD:FD:66:DC:20:F8:31:F7:72:9D:FE:7B:39:70:92:A3:8D:C5:6A:F6
Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
Certificate issuer:       /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Certificate serial:       052A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
Manifest number:          051C
Signing time:             Mon 27 Jul 2026 00:36:37 +0000
Manifest this update:     Mon 27 Jul 2026 00:36:36 +0000
Manifest next update:     Mon 03 Aug 2026 00:36:36 +0000
Files and hashes:         1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: IPwiOek333SrA5VHmyyJOav+eqp3LO06EzBtHvkrYVI=)
                          2: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: 6GOb57PaiaApAF0iXlJZz9FHSsE1JEzbnMGnVso/Dyc=)
                          3: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: n3UNJ83TlZkHD6+TDV3hr4HHxdPAJoRzYmt6WvpCYj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
                          rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
        Validity
            Not Before: Jul 27 00:36:36 2026 GMT
            Not After : Aug  3 00:36:36 2026 GMT
        Subject: CN=6a66a814-46e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:09:cb:fb:6b:59:b1:bd:99:33:b5:ac:24:
                    bb:b3:9f:f8:cc:47:b3:48:d7:cc:d7:2a:40:6b:1c:
                    70:9e:01:aa:50:44:1a:53:d7:7f:60:6a:38:a8:5b:
                    ef:31:6b:ea:95:2f:fe:fc:88:a6:a9:53:97:58:9e:
                    19:df:de:18:d5:b1:19:0f:19:de:12:3f:17:f3:20:
                    77:e9:a8:25:86:3d:17:0c:8e:af:80:49:62:1c:63:
                    f9:16:70:72:ce:4b:6f:82:cf:a4:9e:31:f0:76:fd:
                    76:30:e0:9c:84:94:3e:ac:d4:11:88:bd:8d:77:2c:
                    de:ee:24:8b:a3:e1:93:85:ab:a5:7e:5b:4f:b1:98:
                    10:d8:2d:5d:23:3d:74:23:38:f4:e8:08:c4:79:9b:
                    ea:06:26:c8:ff:4b:30:79:05:90:61:2b:2c:92:d1:
                    97:c7:d2:17:2c:14:18:07:39:18:54:00:40:40:5b:
                    0f:50:5f:ed:86:7f:01:94:10:48:13:c8:95:be:49:
                    69:71:ad:54:f2:a8:b4:89:e0:9e:7a:f9:26:f3:56:
                    7d:8a:76:2a:c5:c0:b5:b7:a7:6b:e9:cc:0c:b3:7f:
                    e7:2c:25:5d:a7:a6:a3:31:43:51:e7:f3:43:3a:e2:
                    68:f2:b9:eb:f5:b8:65:96:af:f0:ef:9f:df:4d:cc:
                    11:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FD:66:DC:20:F8:31:F7:72:9D:FE:7B:39:70:92:A3:8D:C5:6A:F6
            X509v3 Authority Key Identifier:
                keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:52:da:41:2d:b3:d8:92:dd:3a:ab:c8:7f:75:47:cd:13:45:
         da:28:53:45:33:97:ef:6c:8c:bf:b4:0d:85:04:b2:43:5e:cf:
         12:ab:29:3f:09:b6:44:e3:c0:0d:77:02:62:8a:a6:ed:bc:69:
         67:b9:f7:b8:b0:86:b3:3a:da:78:56:db:c0:72:ae:6b:0b:d5:
         98:14:b1:80:3c:61:82:1a:21:f1:a1:ab:85:c1:18:e1:e3:41:
         f0:ef:0b:78:18:3b:8e:47:7f:f1:57:2a:e4:75:d3:f1:0e:77:
         77:6d:63:61:af:4b:c3:93:e6:7c:ce:37:77:e1:96:20:ad:df:
         73:41:05:3a:90:61:f1:e2:d9:9e:74:be:93:b9:1d:87:13:a6:
         75:85:8f:2f:a9:43:59:37:56:66:7d:21:d3:9a:93:39:35:c1:
         7e:1e:dd:48:fc:ce:1c:5d:d5:e8:3a:69:45:62:f2:6d:06:a9:
         67:c0:13:25:e0:74:51:ec:53:37:63:6a:28:2c:fc:8c:55:08:
         8c:16:01:00:43:6a:57:74:ec:96:34:7b:cd:37:62:c4:ad:d3:
         ef:48:26:4a:40:3c:a3:59:db:c2:22:a9:eb:9b:85:4b:7d:20:
         ea:3a:76:bd:30:7c:65:61:84:14:08:e0:43:5b:d2:00:97:05:
         64:6e:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:22:35 2026 by rpki-client