Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
File:                     KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft (raw, json)
Hash identifier:          nU83muwar0Hhumf1Ge2nQXo+VXEIc60Np1fmDj0rGfQ=
Subject key identifier:   07:C7:82:90:6B:21:60:65:CC:0C:62:C9:2C:B5:9C:B4:CD:A9:7B:F1
Authority key identifier: 2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B
Certificate issuer:       /CN=A91233D4/serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
Certificate serial:       0B55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
Manifest number:          0B3F
Signing time:             Thu 24 Sep 2026 19:13:17 +0000
Manifest this update:     Thu 24 Sep 2026 19:13:16 +0000
Manifest next update:     Thu 01 Oct 2026 19:13:16 +0000
Files and hashes:         1: KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl (hash: IRC3jJf40IW9KFKDaWs1vmSi0wyFmTFOphYeYBeNwI4=)
                          2: A1D479B878D411EAA8C57711C4F9AE02.roa (hash: obRBQ6LEWosfS1i2NAWPUNb1MMXwUPUFHNc2IZBZzak=)
                          3: A08B108A78D411EAA8C57711C4F9AE02.roa (hash: N/vJ3gYa2yZt4lT/pvPMJti4tbnPowjmmGAT5w4Jh4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl
                          rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2901 (0xb55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91233D4, serialNumber=2A93E1459766506195DFFC99B523362BE5AC0D6B
        Validity
            Not Before: Sep 24 19:13:16 2026 GMT
            Not After : Oct  1 19:13:16 2026 GMT
        Subject: CN=6ab5764d-e911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:36:c5:10:ad:de:71:77:e4:6c:b8:6e:6d:
                    89:06:e7:e6:dd:9f:0d:78:0f:93:41:aa:5e:c8:8d:
                    1e:ef:0b:fc:96:35:32:e1:00:f1:49:5b:1a:3f:3f:
                    33:bc:e3:6d:84:b6:7c:b0:a5:c7:4d:d7:c7:1c:55:
                    15:8b:a2:41:43:f3:6b:17:7f:de:1c:49:16:74:d4:
                    1a:14:92:57:2b:40:5d:0e:26:18:b4:c9:a3:e0:6d:
                    45:6a:21:d8:06:b5:78:6a:cf:ab:94:05:67:c2:03:
                    fb:b8:ae:6b:6c:b6:16:4e:85:b8:4a:1d:56:5b:9c:
                    73:30:f7:96:cb:cf:39:ae:d3:ea:b4:2e:ea:f9:71:
                    c9:85:5f:d0:2d:7b:58:4f:51:00:29:7f:72:f5:ac:
                    05:46:8b:76:34:3d:83:dc:23:db:fb:bd:24:21:4f:
                    3b:62:3d:ab:94:68:ac:fe:cc:30:42:b8:1d:79:ed:
                    67:d5:0b:8a:5b:63:d7:4b:f0:3a:24:1b:5a:9a:2a:
                    00:f9:05:05:15:cc:bb:63:17:32:08:e3:03:5b:21:
                    b9:7c:17:f0:c5:06:f8:84:37:a5:ae:d2:bd:7f:4c:
                    59:0f:ae:25:25:cb:07:9a:64:67:43:d1:6e:d4:55:
                    b5:7a:f7:49:79:5b:ca:d9:8a:a8:c4:01:7b:ca:f5:
                    13:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C7:82:90:6B:21:60:65:CC:0C:62:C9:2C:B5:9C:B4:CD:A9:7B:F1
            X509v3 Authority Key Identifier:
                keyid:2A:93:E1:45:97:66:50:61:95:DF:FC:99:B5:23:36:2B:E5:AC:0D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpPhRZdmUGGV3_yZtSM2K-WsDWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91233D4/25A061806B1F11EA8130A65FC4F9AE02/KpPhRZdmUGGV3_yZtSM2K-WsDWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0c:2a:c3:1b:62:89:03:2a:58:8d:83:e1:39:ef:e9:1a:60:
         98:87:9c:6e:c3:24:b4:f0:a0:0a:be:53:fc:3e:9f:88:17:39:
         d0:94:b8:c2:20:1d:21:51:f7:a6:ba:be:a7:51:30:69:96:bd:
         14:df:cd:fb:d3:9e:95:78:58:ff:37:b2:fa:65:5e:51:13:95:
         b7:29:17:33:c9:69:83:77:25:da:45:b1:5b:93:cd:62:7f:61:
         10:8e:59:93:d7:9f:92:3c:cf:02:99:91:65:d9:ce:cb:91:14:
         58:89:67:d4:98:5f:cd:44:6f:40:8e:d6:9f:a9:e7:3f:d2:fc:
         7c:23:af:a9:ff:44:9c:18:99:16:5a:a7:36:bb:64:08:ed:10:
         64:17:8f:0d:10:28:71:25:11:49:67:72:bc:00:74:61:b1:c5:
         d6:51:1c:a5:b8:63:da:b3:71:39:b5:41:a9:97:f8:a9:03:02:
         ff:77:47:f2:cb:c1:2a:12:58:c2:4a:97:68:ad:40:2b:c2:12:
         ae:7c:b3:f0:8f:b8:63:eb:0d:b5:89:7f:f8:15:66:18:bd:95:
         2d:9a:31:cf:25:ca:23:4b:52:5a:b7:ca:27:a6:0b:48:ed:3f:
         df:5a:41:70:17:26:8d:ee:7a:46:12:6a:6c:ce:21:7f:50:99:
         5c:a5:64:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:30:12 2026 by rpki-client