Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft
File:                     kGA-NU21aLPKQpAOcDAR55ZiiS4.mft (raw, json)
Hash identifier:          wKFuFcJI5L7CUOEoOFSczIVE9m2n0QboVOS0GQJaevw=
Subject key identifier:   84:1F:D5:96:82:DB:5A:B0:7B:E8:29:9C:49:CD:5B:7C:B5:F3:11:92
Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E
Certificate issuer:       /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E
Certificate serial:       06DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft
Manifest number:          06CC
Signing time:             Thu 16 Jul 2026 16:02:09 +0000
Manifest this update:     Thu 16 Jul 2026 16:02:09 +0000
Manifest next update:     Thu 23 Jul 2026 16:02:09 +0000
Files and hashes:         1: kGA-NU21aLPKQpAOcDAR55ZiiS4.crl (hash: tGmJrU0Tqwn3xWAwwFwAw6bwZOLGJeUSkjMIpl5Q3xY=)
                          2: 8CD64094BDFE11EBBBB16A42C4F9AE02.roa (hash: yCmJKCeUjCX4/1rndfEcZXyyAy1UCnlaRalfod8v7Ts=)
                          3: 30857DB6CBA211ECAE233133C4F9AE02.roa (hash: po/i8uxPFYRsNFTlJU1d5KEDrihE5XxUDGJv65GiON0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl
                          rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 16:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1756 (0x6dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E, serialNumber=90603E354DB568B3CA42900E703011E79662892E
        Validity
            Not Before: Jul 16 16:02:09 2026 GMT
            Not After : Jul 23 16:02:09 2026 GMT
        Subject: CN=6a590081-a47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:a4:67:5c:ac:80:fd:11:e1:ec:de:e3:19:
                    07:d1:d7:12:2b:62:c4:81:10:88:5b:21:ec:91:fb:
                    cd:f8:0b:97:67:b2:d9:06:0a:bc:c0:e9:98:da:be:
                    72:f7:65:38:c4:b5:20:5d:4a:74:fc:f4:6e:6d:b4:
                    55:02:76:c7:95:70:7b:36:fd:e8:e9:21:54:70:33:
                    54:7a:44:99:71:16:d8:bc:da:93:f6:5b:8b:03:ac:
                    e4:cc:f4:46:06:c0:5d:b9:f2:f2:89:13:a0:64:9e:
                    56:a6:3e:95:97:8f:4e:a2:61:8a:71:48:0c:f5:07:
                    7d:df:f9:0a:a2:ff:3f:89:f3:dd:82:be:89:2d:7d:
                    63:f4:30:c2:72:fe:ee:1a:0e:3d:ae:81:63:f0:98:
                    94:72:69:4a:53:b7:05:84:31:0e:bb:4b:11:5f:5a:
                    ba:e7:7f:dc:23:af:af:bf:01:dd:7e:86:1e:9f:53:
                    f2:50:11:5d:e4:0a:d4:26:cc:98:80:b3:26:55:86:
                    9c:86:9e:da:c7:c6:75:51:e5:44:59:0b:ff:81:22:
                    94:cb:b6:78:77:92:f4:85:e5:42:d7:cc:a9:0e:e7:
                    82:a5:fe:0d:be:0c:f6:07:eb:ee:9e:cf:f7:3c:bd:
                    4c:41:e5:71:e3:66:35:f3:fb:2d:58:63:56:98:7e:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1F:D5:96:82:DB:5A:B0:7B:E8:29:9C:49:CD:5B:7C:B5:F3:11:92
            X509v3 Authority Key Identifier:
                keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:19:2d:2e:f6:d7:3b:d9:0d:39:d3:aa:08:73:c9:d2:0d:35:
         82:73:c4:c7:e6:23:9c:e8:01:05:fd:e5:c7:dd:bb:38:d5:83:
         20:da:73:31:b9:bf:f1:0c:b5:e5:bd:be:75:66:6f:c0:36:18:
         cc:c4:34:df:02:7f:88:17:af:2a:50:2b:ff:b6:19:14:aa:bc:
         fc:16:0b:c8:56:28:44:23:53:27:27:cf:4a:bd:c0:9f:c4:96:
         5c:28:5a:2f:99:1c:4b:45:99:2d:ce:22:94:58:24:30:de:c0:
         7d:45:ca:9a:ab:11:fd:95:be:29:ad:ae:33:2f:f2:95:83:17:
         1f:69:cb:06:df:2b:5b:6a:b1:87:7a:26:69:7d:0f:98:51:7d:
         56:1b:54:6d:fb:04:12:ae:4b:90:b6:3d:da:64:7e:1c:59:dd:
         7e:c7:7e:25:04:fc:e0:c3:60:44:3f:be:63:96:cd:ed:36:0c:
         50:2a:89:0d:01:cd:2a:6b:e5:cc:2d:59:aa:97:0f:bc:f3:15:
         87:d2:3a:89:7b:aa:ec:fd:18:fb:80:34:17:b4:f9:70:25:81:
         cb:b1:f5:22:fa:79:15:5a:b3:08:68:b5:76:e4:6c:67:f5:f6:
         d0:38:28:ed:ac:bb:9e:e0:85:36:38:6e:39:3c:5b:f6:43:2f:
         55:1b:09:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:10 2026 by rpki-client