Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
File:                     kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json)
Hash identifier:          95MyY94zai1/s4OjmdN60yEAnToK1WGt/VcmBOsNSvU=
Subject key identifier:   41:89:BA:B9:11:51:48:0E:99:A0:12:DB:96:1E:C0:E4:25:83:52:C1
Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Certificate issuer:       /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Certificate serial:       046A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
Manifest number:          0463
Signing time:             Tue 23 Jun 2026 00:12:52 +0000
Manifest this update:     Tue 23 Jun 2026 00:12:51 +0000
Manifest next update:     Tue 30 Jun 2026 00:12:51 +0000
Files and hashes:         1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: AmlC+nF7yFDfuia0AlLK04RaqN4kHE/jdKsu6MbO5XY=)
                          2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: dHCif+Ldj0bWw7XW3VRYigHVgHSS9PTU4XO4u0HGdK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 00:12:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1130 (0x46a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
        Validity
            Not Before: Jun 23 00:12:51 2026 GMT
            Not After : Jun 30 00:12:51 2026 GMT
        Subject: CN=6a39cf84-94e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:a2:e1:be:0f:13:55:9b:3a:86:0a:fc:36:
                    6e:1b:51:3d:c1:e4:05:dd:33:37:cf:3d:e1:89:1f:
                    65:30:ff:b5:b2:d7:9d:e6:fe:16:58:7e:c3:b5:12:
                    6d:94:72:52:00:91:60:88:cd:e3:91:0f:1f:ab:a5:
                    23:6f:3e:97:8c:2a:d5:a1:45:b2:eb:83:8b:ef:91:
                    a9:97:40:98:1e:50:03:b3:60:df:c7:5f:34:54:e7:
                    cc:20:25:ad:f4:9e:02:3d:6d:5b:a0:8e:56:95:c4:
                    03:26:bb:1d:8f:8a:c0:40:2c:6e:bb:e2:19:d5:8c:
                    b6:ac:88:07:d2:8b:8e:00:dc:27:a3:d6:ed:e7:bb:
                    78:4a:2f:00:06:2a:8d:fd:f5:0b:d1:be:19:34:a0:
                    97:a9:95:f1:db:97:16:e7:f0:af:87:16:14:d5:64:
                    ad:fc:66:13:62:f2:b5:32:2e:2c:7f:0c:01:11:de:
                    4f:17:96:28:a2:4c:36:35:b6:33:98:5c:80:5f:af:
                    19:50:aa:03:75:e9:24:29:bc:f8:cd:79:9d:13:f0:
                    cd:4e:9d:a1:e0:c7:55:fe:4c:e7:22:99:e3:83:66:
                    1c:a4:9e:3b:3d:96:d8:25:1a:6b:fa:7a:f7:51:5d:
                    94:05:6e:57:b4:e8:e9:af:dc:04:fa:d4:4c:bb:fb:
                    8e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:89:BA:B9:11:51:48:0E:99:A0:12:DB:96:1E:C0:E4:25:83:52:C1
            X509v3 Authority Key Identifier:
                keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1e:74:d6:17:5b:23:51:35:ea:c1:0e:7f:31:61:74:18:c8:
         94:37:6e:bb:da:6a:71:34:31:f9:ce:fd:8e:bc:27:9c:ff:eb:
         d9:f5:3c:ed:de:10:71:2c:ae:d4:b9:8b:cb:18:dc:6f:ed:18:
         b6:e1:f6:36:30:f2:db:cf:d5:41:be:b4:7d:c8:5b:cf:1b:c2:
         1a:55:53:a4:08:37:f7:2b:06:98:5a:83:e9:8d:5e:d1:d1:8a:
         04:e6:c6:9e:3b:4a:f5:ae:87:14:f8:72:54:3d:61:6f:bb:c2:
         8a:58:a4:cd:aa:cf:ac:d9:3d:58:01:25:cc:c4:bd:90:6c:66:
         af:8a:fc:3c:f7:da:be:af:8b:a4:ce:59:62:63:99:cf:a5:36:
         31:97:c1:4c:ba:1d:49:b4:a9:dd:21:f3:42:ac:06:ea:a3:4c:
         e4:f9:c7:6e:ba:b8:1c:bf:f5:33:fc:f0:d1:31:93:c3:f3:25:
         67:83:b0:73:bf:c7:d8:b5:42:5a:74:22:ba:0d:82:ec:0d:63:
         c8:15:3a:8e:33:fd:94:9a:c5:fa:3c:8d:c8:12:62:16:87:50:
         73:bc:d9:91:ec:f5:44:83:92:d7:ae:14:bd:64:2d:0d:55:05:
         e7:56:8c:dc:e3:54:b6:30:3c:07:17:80:38:31:83:f4:27:e8:
         22:08:40:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 01:34:02 2026 by rpki-client