Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
File:                     kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json)
Hash identifier:          AXOZJUcyq2A2Mlt4M+/zhG8i/7uhTVjA+Y+nHjS6uw8=
Subject key identifier:   EE:65:EB:8C:76:82:64:24:64:4C:B2:06:AA:27:B2:12:AE:FD:91:BF
Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA
Certificate issuer:       /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA
Certificate serial:       0376
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
Manifest number:          0376
Signing time:             Thu 15 Oct 2026 01:14:54 +0000
Manifest this update:     Thu 15 Oct 2026 01:14:53 +0000
Manifest next update:     Thu 22 Oct 2026 01:14:53 +0000
Files and hashes:         1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: yL5N3GTyqzBuJMw7K7X0rePXYcfOSKUelVsH+G33bx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl
                          rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 01:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886 (0x376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA
        Validity
            Not Before: Oct 15 01:14:53 2026 GMT
            Not After : Oct 22 01:14:53 2026 GMT
        Subject: CN=6ad0290e-8cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:85:c9:dd:64:35:4c:76:e8:aa:7b:e1:e1:
                    a5:e1:e1:c6:2c:6a:47:7a:d9:70:e6:b5:78:95:be:
                    b8:8b:7f:d6:59:d4:f9:1a:bc:ee:11:49:01:81:3c:
                    ea:76:4c:da:0c:c0:46:0a:df:36:6c:88:3f:6c:4e:
                    0b:3a:e4:c7:fe:bc:77:bc:27:85:fe:0a:51:d7:b1:
                    61:3c:77:d9:a3:9b:b8:b3:8c:f9:2a:7a:90:10:d3:
                    2b:86:99:ff:a1:ff:43:65:19:9f:8c:d1:34:fb:d4:
                    91:7e:e4:c2:9d:67:3f:ab:1f:4f:61:50:35:b6:cc:
                    24:8e:8a:7f:55:f7:a6:18:f3:5f:b0:29:33:cf:71:
                    e8:dd:95:18:0c:83:1e:66:3b:c8:b3:8f:e1:3b:38:
                    b4:46:9d:a5:78:6d:35:72:4d:db:61:55:9b:ef:cc:
                    ec:5f:c7:39:8c:93:da:6e:e4:45:37:da:9c:a6:b8:
                    ab:41:1f:01:50:3e:2e:42:71:9b:37:9a:17:d2:dc:
                    64:73:31:6f:83:52:10:d9:72:cd:35:84:64:92:3b:
                    c0:08:4b:fe:df:f3:75:62:46:1d:11:e9:2d:8b:20:
                    b8:07:b7:1a:9f:d8:81:12:73:53:93:5d:90:17:19:
                    5e:8f:b5:58:11:98:29:6a:ba:b4:7e:06:01:5b:da:
                    4a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:65:EB:8C:76:82:64:24:64:4C:B2:06:AA:27:B2:12:AE:FD:91:BF
            X509v3 Authority Key Identifier:
                keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:8c:d9:69:46:b6:e4:78:ac:50:f0:38:ab:8f:cd:0f:25:b0:
         1f:ca:dd:c0:3b:f3:b0:7f:cf:49:6f:3f:7a:7a:9c:c0:37:d3:
         a9:ea:59:f6:26:55:f7:9b:f9:a5:dc:a2:3e:58:bf:92:e7:b4:
         0f:64:cb:6d:eb:0a:c6:2d:7f:f6:d6:0e:60:2e:74:62:53:9c:
         af:78:dc:5f:e0:43:b9:f2:d9:76:d0:9e:cd:d7:a0:a6:8a:f4:
         2b:27:33:d0:eb:cd:b3:20:b7:4f:0c:47:91:ac:63:a5:d7:10:
         ed:a8:75:49:32:76:12:d9:38:b6:ce:ac:5e:a1:0e:44:95:09:
         b2:2a:12:6d:bd:75:1d:da:19:a0:17:19:a9:d2:d5:f4:6e:f6:
         ed:e1:46:0b:cd:84:6d:13:f0:0a:e0:c0:c9:8c:ba:69:db:f8:
         23:a2:0f:af:f3:cc:7c:ec:a7:dc:4b:21:c8:08:2c:2f:cd:98:
         87:01:93:69:19:7d:30:50:c2:13:22:2f:63:bc:6f:d7:18:c7:
         e4:36:8e:21:ca:aa:e0:60:aa:6e:91:34:b0:05:cd:e1:92:b9:
         81:de:bf:18:46:74:fe:0e:47:9c:6a:44:38:56:2f:af:3b:34:
         14:e4:c0:24:06:bc:d4:85:eb:67:c4:38:68:94:6d:0f:8b:67:
         41:52:f1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:32:40 2026 by rpki-client