Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
File:                     kcPJZndvAR_FNQIdhfWue_utpX4.mft (raw, json)
Hash identifier:          XdRFF7rho4Pw5m41d3VMq3mYkdyKL40NGjh2vorOY2c=
Subject key identifier:   58:69:A9:04:95:60:D3:57:15:8A:21:3D:C1:1E:00:A3:DC:51:23:AD
Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
Certificate issuer:       /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Certificate serial:       0C7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
Manifest number:          0C42
Signing time:             Mon 20 Jul 2026 19:06:44 +0000
Manifest this update:     Mon 20 Jul 2026 19:06:44 +0000
Manifest next update:     Mon 27 Jul 2026 19:06:44 +0000
Files and hashes:         1: kcPJZndvAR_FNQIdhfWue_utpX4.crl (hash: nhXhfTWnns3D2RwtRbxCZbJwZGQRc+v9qX4otgtOpUo=)
                          2: AD4CF94A6D1711F085288D45C4F9AE02.roa (hash: nim0r8cX0AWo+u+y8biXKnG294pD1aj3IrEpuP3v1ew=)
                          3: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (hash: j5PopsmOwZFXKKisotFRY1R3qhxNhXf+mgbfOulCpEE=)
                          4: 41B2F448ECE611EA882BEA79C4F9AE02.roa (hash: nI/6MDunIRDvmHBfJBx95Y0vV2wSohzwNZEZUy5WKGA=)
                          5: ACE4FD2C6D1711F085288D45C4F9AE02.roa (hash: GS1ZWCrOmI/wzMrtSy23rOps4nyG5A3UiWlzO5POe50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
                          rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 19:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3196 (0xc7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
        Validity
            Not Before: Jul 20 19:06:44 2026 GMT
            Not After : Jul 27 19:06:44 2026 GMT
        Subject: CN=6a5e71c4-3ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:77:26:9b:d8:60:6f:c4:78:d5:34:43:28:f2:
                    cf:2d:3a:76:da:4c:76:24:2a:ae:3d:d7:a4:f9:77:
                    bc:c7:78:33:30:9c:4a:89:2c:3c:03:f5:61:8f:1b:
                    8e:8a:74:38:24:5d:98:87:93:f7:62:ca:26:3b:9d:
                    51:ba:39:cb:b4:66:ac:61:2a:8b:e7:94:97:34:1e:
                    d5:e7:a4:19:9d:32:77:c9:7d:9a:b3:81:28:9b:2d:
                    d6:5c:e5:ff:78:b0:f8:ac:02:43:25:6f:84:98:44:
                    d7:ce:29:c0:c6:32:5d:84:86:18:87:1b:de:b6:01:
                    89:44:fd:e1:95:72:d5:54:e4:d4:6a:a1:26:2f:1a:
                    8d:4c:1b:7a:7a:79:76:53:bc:28:16:65:43:b3:42:
                    a1:80:19:27:d9:9f:39:eb:33:b0:57:94:d2:2c:c6:
                    f4:46:96:d7:92:44:70:3c:78:5d:f3:33:76:11:1e:
                    44:fd:4b:b8:61:fa:d2:4a:a8:62:7f:9b:b2:dc:d1:
                    69:5c:d0:72:cf:38:12:f4:ce:24:79:02:87:ad:0a:
                    be:f0:55:00:56:bb:00:13:2b:8e:e7:91:1e:df:66:
                    b6:c9:41:4b:ec:9c:6f:e8:e4:dc:30:d9:45:d3:00:
                    50:54:77:dc:be:27:bf:6d:cf:90:44:84:6b:f2:29:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:69:A9:04:95:60:D3:57:15:8A:21:3D:C1:1E:00:A3:DC:51:23:AD
            X509v3 Authority Key Identifier:
                keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d0:b5:70:43:1e:67:30:04:ed:4c:28:69:59:bf:2e:78:27:
         37:fe:39:b6:c0:83:fe:24:0f:93:da:10:7f:5a:71:de:bc:6e:
         b8:b7:22:97:1f:39:bb:84:2f:de:63:c5:e5:62:3a:08:e8:d1:
         10:20:a7:4f:1b:34:eb:f0:f0:b0:a9:02:ab:38:73:38:fb:82:
         fb:7d:a8:89:2d:09:4f:3b:00:00:54:a4:6e:d9:02:f8:34:ad:
         65:b4:53:91:a9:6e:33:57:16:29:99:84:1b:d3:7d:34:3e:5b:
         e2:d1:b8:bd:15:7d:3b:8b:04:be:99:ec:8a:c7:bc:12:e0:d5:
         93:9a:d6:c3:53:cc:e7:9d:01:ae:4f:46:b7:b3:40:c4:a3:86:
         93:9d:5e:3b:cf:f8:6d:c6:fd:b6:75:9f:e1:47:a2:7c:5b:54:
         fb:06:d8:d5:45:f5:2d:3c:49:d0:1f:fe:7e:7d:97:cf:a9:e8:
         43:c8:94:68:e4:10:af:59:ff:77:41:ac:6e:83:e6:9a:d3:95:
         ec:54:4d:df:89:7e:e0:ef:48:19:9f:c5:9b:58:aa:2e:ad:44:
         bf:76:b2:83:2a:de:2b:bb:7b:35:48:a5:a6:d6:cb:16:0e:64:
         38:04:da:4f:f2:ee:7c:cc:b1:81:c8:82:cb:a3:23:0c:82:c0:
         88:6d:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:09 2026 by rpki-client