Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
File:                     kTeon0YQ2uLIjGlNyVLOWDVScHk.mft (raw, json)
Hash identifier:          C68MWrFxZuRm6U9VIpX3Rk88Nc52QBfCmgJJq51y8bc=
Subject key identifier:   A3:69:30:4B:37:AC:6A:DE:94:1A:D4:F2:2E:11:75:2F:29:79:EF:F1
Authority key identifier: 91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79
Certificate issuer:       /CN=A913F8BC/serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079
Certificate serial:       10E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
Manifest number:          10D7
Signing time:             Thu 24 Sep 2026 17:17:34 +0000
Manifest this update:     Thu 24 Sep 2026 17:17:33 +0000
Manifest next update:     Thu 01 Oct 2026 17:17:33 +0000
Files and hashes:         1: kTeon0YQ2uLIjGlNyVLOWDVScHk.crl (hash: 4QPl4HUqUf9rKP7f4CQkgKA7FfNIEn5RQn6qjfcYUtc=)
                          2: E9056E5A520611E9ABE43055C4F9AE02.roa (hash: RzwYZuvd4XyjCOm9BluFD+cQ9dlkUBoYuq3X1xwqlGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl
                          rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4327 (0x10e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F8BC, serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079
        Validity
            Not Before: Sep 24 17:17:33 2026 GMT
            Not After : Oct  1 17:17:33 2026 GMT
        Subject: CN=6ab55b2e-f5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8e:1d:f1:fb:c1:9a:6a:c4:da:4d:2a:79:4c:
                    e3:9a:23:dc:f8:c0:ea:10:5d:35:76:93:af:67:de:
                    00:96:70:55:d8:c9:dd:4d:24:75:9a:95:60:83:62:
                    fe:12:c6:e2:75:2b:aa:93:05:d9:ef:db:31:d4:91:
                    a1:8f:8f:2d:6f:3e:28:c8:56:22:37:a4:7f:7f:38:
                    47:65:ef:a7:50:cd:a9:d4:0c:dc:db:3d:93:a4:31:
                    b2:12:02:1c:45:cf:21:f9:71:e5:aa:12:1b:e2:25:
                    e5:98:ca:25:5e:f9:72:ef:a7:99:aa:5d:2a:f0:44:
                    d5:3a:34:73:a1:8f:4d:a5:59:3b:c4:61:f9:e0:6e:
                    d9:42:a5:a1:7e:6a:38:0a:56:55:f3:76:4e:bb:32:
                    52:26:47:34:62:4b:1f:58:9a:ed:9a:40:18:4c:84:
                    8a:76:6b:b6:63:c6:70:57:d7:c4:d2:68:21:d5:53:
                    50:19:5e:5c:2a:8a:78:e3:84:2a:36:28:fb:ce:a4:
                    66:6f:64:e7:3e:22:45:0c:81:dd:74:48:fe:d9:25:
                    bb:e9:16:ad:b3:c2:dd:f5:57:ad:be:9f:df:64:c9:
                    0f:3c:75:9b:79:5b:7e:60:be:29:ee:cf:2f:dc:5c:
                    ed:1a:6b:66:3b:38:d8:f3:d6:e9:68:b9:e8:38:be:
                    b3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:69:30:4B:37:AC:6A:DE:94:1A:D4:F2:2E:11:75:2F:29:79:EF:F1
            X509v3 Authority Key Identifier:
                keyid:91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ec:6d:e5:ed:96:21:03:03:74:a6:41:06:56:fe:28:5c:c9:
         46:20:76:85:ad:03:a7:cb:ae:31:58:98:94:29:87:f8:67:a1:
         72:51:a0:60:a4:43:41:4a:7b:0b:54:a1:15:ca:22:84:9d:fe:
         5d:73:07:e3:44:ad:1a:43:62:3f:94:f7:db:f0:0f:8b:ee:f6:
         d0:88:01:6e:b8:d8:0e:27:83:4c:37:6a:95:82:11:6f:82:10:
         65:db:21:98:2c:e2:a5:e2:a2:96:29:57:b0:c5:c1:8d:ad:aa:
         7e:4a:3f:8f:fa:6b:30:8b:82:a7:d8:62:4d:24:1d:f6:70:e6:
         b6:0e:14:0c:ee:f5:81:4a:4c:bd:04:25:15:18:7a:87:cd:bb:
         79:e9:c7:8b:9c:30:9b:bf:23:a2:02:71:23:0b:83:24:19:65:
         d9:d2:82:41:2d:ad:3f:6f:aa:cc:5b:6a:dc:89:37:01:ff:4c:
         04:01:35:9b:1e:f2:80:0b:13:4e:60:5b:b1:d5:37:ce:23:05:
         b0:43:01:54:cf:3d:24:4f:67:b9:b7:06:80:85:b3:5d:77:3a:
         79:ed:ae:a2:7b:a3:c7:db:a6:f8:fa:56:bd:a9:2e:e0:7c:bd:
         3e:4c:08:37:f8:1d:ed:8f:f1:ef:24:54:6b:29:41:b3:23:02:
         bf:2d:5b:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y4QkMxMTAvBgNVBAUTKDkxMzdBODlGNDYxMERBRTJDODhDNjk0REM5NTJDRTU4
MzU1MjcwNzkwHhcNMjYwOTI0MTcxNzMzWhcNMjYxMDAxMTcxNzMzWjAYMRYwFAYD
VQQDEw02YWI1NWIyZS1mNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA744d8fvBmmrE2k0qeUzjmiPc+MDqEF01dpOvZ94AlnBV2MndTSR1mpVgg2L+
EsbidSuqkwXZ79sx1JGhj48tbz4oyFYiN6R/fzhHZe+nUM2p1Azc2z2TpDGyEgIc
Rc8h+XHlqhIb4iXlmMolXvly76eZql0q8ETVOjRzoY9NpVk7xGH54G7ZQqWhfmo4
ClZV83ZOuzJSJkc0YksfWJrtmkAYTISKdmu2Y8ZwV9fE0mgh1VNQGV5cKop444Qq
Nij7zqRmb2TnPiJFDIHddEj+2SW76Rats8Ld9Vetvp/fZMkPPHWbeVt+YL4p7s8v
3FztGmtmOzjY89bpaLnoOL6zrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKNpMEs3
rGrelBrU8i4RdS8pee/xMB8GA1UdIwQYMBaAFJE3qJ9GENriyIxpTclSzlg1UnB5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCQy80RTEzRjQwQzUy
MDYxMUU5OEVGQzNBNTRDNEY5QUUwMi9rVGVvbjBZUTJ1TElqR2xOeVZMT1dEVlNj
SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tUZW9uMFlRMnVMSWpHbE55VkxPV0RWU2NIay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjhCQy80RTEzRjQwQzUyMDYxMUU5OEVGQzNBNTRDNEY5QUUwMi9rVGVvbjBZUTJ1
TElqR2xOeVZMT1dEVlNjSGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf+xt5e2WIQMDdKZBBlb+KFzJRiB2ha0Dp8uuMViYlCmH+GehclGgYKRDQUp7
C1ShFcoihJ3+XXMH40StGkNiP5T32/APi+720IgBbrjYDieDTDdqlYIRb4IQZdsh
mCzipeKililXsMXBja2qfko/j/prMIuCp9hiTSQd9nDmtg4UDO71gUpMvQQlFRh6
h827eenHi5wwm78jogJxIwuDJBll2dKCQS2tP2+qzFtq3Ik3Af9MBAE1mx7ygAsT
TmBbsdU3ziMFsEMBVM89JE9nubcGgIWzXXc6ee2uonujx9um+PpWvaku4Hy9PkwI
N/gd7Y/x7yRUaylBsyMCvy1bhQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:18:35 2026 by rpki-client