Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft
File:                     kKmEULnak4EYotWtU02IKPS5RjQ.mft (raw, json)
Hash identifier:          gUK736plCkpRb3yu8pb2qmkS5A8TQbXyhSeDOYUnEtA=
Subject key identifier:   AD:70:08:8C:3B:06:85:F8:6D:18:23:1D:87:9E:9D:F2:F7:87:51:3A
Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34
Certificate issuer:       /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634
Certificate serial:       0D1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft
Manifest number:          0CFD
Signing time:             Tue 18 Aug 2026 18:41:05 +0000
Manifest this update:     Tue 18 Aug 2026 18:41:04 +0000
Manifest next update:     Tue 25 Aug 2026 18:41:04 +0000
Files and hashes:         1: kKmEULnak4EYotWtU02IKPS5RjQ.crl (hash: rrNIVUUmyauRfD5iWqpJPAFH/ARW1mQ0Z2lSc8RTwFc=)
                          2: 5466CCEA756111F1ADC2B2A489A30FBC.roa (hash: D+BZXupaO6XvkGmNZkv/PQJ4t++QmXQARafI6mhSEgU=)
                          3: D376CA2E63B311EFBEFCDF10C4F9AE02.roa (hash: /W282CqOOeHjOsYgZjL++X+1qtiUVrTREYb/SflQPck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3359 (0xd1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA2CC, serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634
        Validity
            Not Before: Aug 18 18:41:04 2026 GMT
            Not After : Aug 25 18:41:04 2026 GMT
        Subject: CN=6a84a741-b67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5d:71:16:fa:3c:3d:51:71:3b:8c:08:24:bd:
                    1d:22:98:cd:65:be:76:b6:57:57:31:6d:0f:fc:c0:
                    42:2d:ff:9f:85:5c:76:4b:f0:d1:37:1a:4a:8f:9f:
                    99:3d:16:28:63:1e:25:72:b1:55:9a:84:26:80:56:
                    a7:39:cb:1f:b3:93:a4:c0:d8:f9:08:53:39:ab:2a:
                    7d:8e:7d:a7:33:4a:e0:10:0d:f6:ff:1e:76:3d:86:
                    e8:db:9c:de:6c:9c:78:2c:8f:1e:7b:db:4a:b7:f9:
                    9f:71:56:f8:fd:ac:85:fd:83:f1:1e:9e:1f:71:60:
                    a8:c8:3d:db:0c:1b:12:31:b6:79:4a:5b:f4:41:bc:
                    aa:46:05:d8:79:67:1c:dd:59:75:5a:9b:23:f7:b1:
                    b8:6f:33:cd:79:ab:9b:ec:2e:92:10:cf:2a:50:18:
                    08:45:3b:47:a2:65:f8:b5:e5:81:13:09:7b:a5:65:
                    b6:e5:05:f2:60:21:65:6a:72:26:d4:dc:a6:a5:4b:
                    59:c5:39:40:23:b2:6a:23:20:4d:a2:58:7f:d0:8d:
                    de:af:9c:be:55:f9:b9:05:27:bf:24:87:4b:92:70:
                    4a:cd:c2:99:c1:93:19:63:bd:cf:d3:d2:67:37:4a:
                    ef:d5:64:42:e8:6b:0f:6c:f9:41:db:33:eb:4e:6d:
                    52:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:70:08:8C:3B:06:85:F8:6D:18:23:1D:87:9E:9D:F2:F7:87:51:3A
            X509v3 Authority Key Identifier:
                keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d8:af:48:a0:90:65:2a:23:e0:83:3e:6a:bc:14:a7:69:57:
         82:28:b5:0c:6a:49:40:dc:c9:1b:c1:6d:b6:a9:8b:ac:7d:92:
         ac:e7:f4:78:92:b1:00:b5:0e:77:45:df:62:12:c7:17:23:1b:
         66:0f:f6:6c:0b:aa:62:bf:24:05:3f:a2:2d:1c:53:96:01:f8:
         51:20:83:f5:9e:b6:ac:8e:a1:82:cc:a7:05:6a:63:cb:fb:bf:
         9a:b5:e3:33:65:21:1f:b8:07:11:a7:74:47:c4:4b:4b:6b:4b:
         1a:12:0d:03:cd:32:ff:26:bf:6b:78:3b:ec:87:2e:a3:41:5c:
         d4:d9:f6:9b:db:7e:dd:b2:a1:04:3e:85:0c:cf:9d:fa:f3:20:
         40:76:b6:d6:4b:45:49:38:1b:62:f4:49:3a:2a:2b:99:54:45:
         8f:53:e0:dc:b5:b3:8d:87:a1:b2:9b:14:3b:03:1f:94:b2:6c:
         72:a6:7e:4f:b7:2a:62:a9:28:c1:d5:b2:83:7d:2b:34:b1:df:
         59:b7:cd:87:93:09:31:84:9c:67:e6:31:ff:0b:c1:ee:ab:83:
         5a:18:a5:27:a1:44:5b:4d:00:99:de:e6:a8:bc:c7:cb:e2:89:
         bb:73:25:d5:01:3f:76:d0:05:f2:4c:39:e5:f9:c2:73:ed:c9:
         84:1d:02:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:44 2026 by rpki-client