Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
File:                     ko35XOma_Fud5gHm6GQDwNiRUp8.mft (raw, json)
Hash identifier:          duOvPxBmtVGbDoEuqZ1N3iVDi4s+kDJR9KZKVnqX9hI=
Subject key identifier:   DD:A3:7D:64:8C:42:C9:DD:A6:EE:E6:7B:5D:E2:67:7E:03:09:61:44
Authority key identifier: 92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F
Certificate issuer:       /CN=A91E9A44/serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
Manifest number:          78
Signing time:             Fri 03 Jul 2026 08:35:36 +0000
Manifest this update:     Fri 03 Jul 2026 08:35:35 +0000
Manifest next update:     Fri 10 Jul 2026 08:35:35 +0000
Files and hashes:         1: ko35XOma_Fud5gHm6GQDwNiRUp8.crl (hash: TDOxLKgNsieucpgqWZwyjIxQIJFtQKEqbog0/DqUJDI=)
                          2: 1F97E6A8C09811F095581A59C4F9AE02.roa (hash: pAWmrFjHQ+Gya0uL4vpKVzvD0cBGp73l2+EQo/ug/JU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl
                          rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 Jul 2026 08:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9A44, serialNumber=928DF95CE99AFC5B9DE601E6E86403C0D891529F
        Validity
            Not Before: Jul  3 08:35:35 2026 GMT
            Not After : Jul 10 08:35:35 2026 GMT
        Subject: CN=6a477458-4e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:bb:3e:ec:8e:59:c8:17:a9:72:04:1b:c5:
                    27:51:a7:8e:98:7e:ec:d9:9d:e8:f0:b2:a5:68:a6:
                    3c:2b:63:9a:53:b7:60:d1:6b:21:53:9b:18:41:a4:
                    4f:ff:bd:92:81:b3:90:84:f3:8f:c3:d2:6e:4c:16:
                    6a:83:a5:e8:dd:d6:ed:7a:27:cf:4e:68:a6:40:09:
                    9b:a8:85:5b:0e:2d:f7:c1:43:d3:52:cf:5b:21:4c:
                    07:cc:f1:e8:95:85:43:36:90:4f:78:76:04:cd:f4:
                    7b:e0:99:1a:d8:e5:54:a2:63:11:59:a6:32:72:4c:
                    bd:d9:52:57:2a:8f:25:5f:f1:9b:e5:13:7e:88:91:
                    c6:e8:46:26:6c:4d:ce:d2:08:9c:b8:95:12:05:45:
                    1c:95:a2:54:5e:c8:38:9c:36:b2:11:f4:52:e1:4c:
                    fe:41:1b:82:51:fd:b6:f0:e7:f7:8a:31:88:cb:7c:
                    55:b8:75:00:42:17:ef:5e:1d:77:8a:8a:4e:e1:c5:
                    17:a0:9e:27:3d:e5:22:a7:6d:76:f5:3e:54:a7:3c:
                    05:8a:81:5e:ee:0e:8e:39:a7:75:9b:dd:6f:56:d1:
                    06:e1:1e:28:17:da:bf:b7:c8:f1:5e:c8:48:e6:99:
                    4a:c9:da:fd:2e:af:c7:9c:c2:54:85:0c:99:4c:af:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A3:7D:64:8C:42:C9:DD:A6:EE:E6:7B:5D:E2:67:7E:03:09:61:44
            X509v3 Authority Key Identifier:
                keyid:92:8D:F9:5C:E9:9A:FC:5B:9D:E6:01:E6:E8:64:03:C0:D8:91:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko35XOma_Fud5gHm6GQDwNiRUp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/D692E1CAC08211F0A08C7226C4F9AE02/ko35XOma_Fud5gHm6GQDwNiRUp8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b7:fc:d3:23:38:a3:6a:11:3a:e0:b2:0e:36:bb:7d:25:0b:
         42:2c:65:a5:12:bc:9a:21:5e:fe:c9:43:85:fc:1c:b5:62:38:
         a7:dc:93:d0:aa:dc:4c:ec:63:f6:97:46:3f:14:03:5b:01:63:
         20:a8:45:cc:18:75:02:40:8e:ab:ce:9a:8e:92:2d:31:0f:11:
         d6:d4:cc:9e:04:d6:2d:42:fa:77:6d:a1:bc:0e:73:25:b5:a8:
         25:49:28:d9:9a:c2:85:77:cb:cd:a1:46:3a:20:e3:28:09:43:
         59:a7:04:5a:f8:23:49:43:28:1e:07:10:17:a3:e0:7f:0a:85:
         bb:d9:42:4b:89:c9:55:34:91:7c:08:90:62:ef:2a:19:cd:2f:
         b8:4c:c2:86:b5:a1:01:b2:46:9d:2d:51:69:63:dd:7a:88:32:
         70:fb:ee:9b:75:88:7b:01:84:d7:7a:7c:4c:47:d2:bc:47:90:
         9f:a4:cf:f9:bc:85:d0:9d:7d:cb:71:26:36:40:87:28:9e:2f:
         b3:d5:a7:54:16:e2:8e:85:4f:fc:ef:1f:70:1c:1c:68:7f:78:
         48:e6:a6:29:b2:1d:ed:62:48:ef:66:b5:c4:3f:e1:ea:c3:b9:
         86:05:cc:7c:73:8a:08:ef:73:2f:16:e0:b6:86:16:96:e2:1f:
         bb:43:0a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:40:45 2026 by rpki-client