Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft
File:                     A0kndy5R4IVbEP1QK4FvJDRhm_I.mft (raw, json)
Hash identifier:          ua0Ya4CKCnkhqPcNYTqJr0Z0ydcETUjgXnAQFKHaBh4=
Subject key identifier:   4B:36:1F:5D:66:32:87:88:04:28:F8:1B:DF:85:3F:8D:BF:DF:A9:8B
Authority key identifier: 03:49:27:77:2E:51:E0:85:5B:10:FD:50:2B:81:6F:24:34:61:9B:F2
Certificate issuer:       /CN=A91676C8/serialNumber=034927772E51E0855B10FD502B816F2434619BF2
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft
Manifest number:          4F
Signing time:             Sun 27 Sep 2026 08:54:41 +0000
Manifest this update:     Sun 27 Sep 2026 08:54:40 +0000
Manifest next update:     Sun 04 Oct 2026 08:54:40 +0000
Files and hashes:         1: A0kndy5R4IVbEP1QK4FvJDRhm_I.crl (hash: 3dgcXPczMshaDg2p7bL8lbnxkT9/m4+zsHc5Hw/mpOE=)
                          2: D9F300348D9B11F1B8EC10E14011F970.roa (hash: jn7pUkPOtKls3Rk24joGYbeuhfP9/ROHUbwLSv4g/SA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.crl
                          rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91676C8, serialNumber=034927772E51E0855B10FD502B816F2434619BF2
        Validity
            Not Before: Sep 27 08:54:40 2026 GMT
            Not After : Oct  4 08:54:40 2026 GMT
        Subject: CN=6ab8d9d1-608e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:65:05:25:88:d1:f2:1f:cc:1a:08:75:48:
                    ee:b8:8a:71:00:d2:a0:4c:aa:bb:fe:8e:f8:f7:45:
                    7d:ed:3c:1d:96:1c:90:51:ff:4e:d6:54:b0:a1:d8:
                    8b:d0:4f:a9:8d:14:03:12:52:82:ec:67:45:67:64:
                    c9:cc:13:8a:76:21:49:97:30:41:4d:15:f5:18:ed:
                    94:06:ee:99:b7:f9:f1:ff:c4:1a:df:04:06:f7:06:
                    cd:fe:93:83:ef:34:82:e9:90:cc:bf:37:0a:fa:86:
                    e8:89:6d:b6:03:6c:0f:7e:6c:49:e3:14:6b:72:79:
                    74:ee:cc:8d:1f:ee:92:90:35:38:f6:8f:5c:fa:38:
                    b2:01:2c:b4:a0:c2:d9:06:a6:fb:bc:ae:c5:a6:74:
                    96:88:a5:d2:77:71:7f:ef:e7:0f:0b:5e:b2:5c:60:
                    03:ea:f4:de:76:a5:92:66:33:54:19:9c:b8:53:e7:
                    30:5f:3f:08:7d:92:a2:51:ad:1d:cb:72:49:52:0d:
                    79:92:3b:fd:1d:c0:56:38:bd:67:e5:a6:88:d1:3f:
                    34:04:88:f4:4f:8d:aa:f2:51:53:c0:5f:b6:61:47:
                    ae:d9:28:cb:1c:73:7f:33:b2:7b:3f:27:a5:94:64:
                    23:0a:62:23:35:aa:0e:fb:87:c6:a8:02:ad:c4:24:
                    67:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:36:1F:5D:66:32:87:88:04:28:F8:1B:DF:85:3F:8D:BF:DF:A9:8B
            X509v3 Authority Key Identifier:
                keyid:03:49:27:77:2E:51:E0:85:5B:10:FD:50:2B:81:6F:24:34:61:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:90:b9:06:fd:90:44:2a:6a:a8:43:49:72:57:8a:a4:d8:34:
         5a:f8:25:69:5f:29:21:d0:9e:ee:4a:f7:e7:00:c0:f6:64:71:
         0f:01:c4:6e:42:d9:e3:42:74:57:ab:f5:f3:e4:1e:5d:05:4d:
         fe:0f:46:1c:c9:02:16:ee:49:6f:7e:dd:41:ea:7c:94:e7:bb:
         40:3b:22:f9:e9:37:56:10:3d:88:72:0e:c5:40:26:33:86:cc:
         db:20:0c:c3:dc:3f:9b:12:de:c7:42:8f:8d:2d:8f:60:49:40:
         18:bb:f5:5b:53:bc:3d:5f:93:ab:46:09:5d:8e:52:4e:d0:9c:
         6a:07:82:84:e7:0b:52:c0:db:22:6d:b2:e1:6e:53:bc:24:f8:
         c8:fe:c7:e5:fb:ac:d3:46:4f:26:1b:9b:af:78:8f:02:70:5c:
         67:88:23:b2:8d:da:8f:5e:0c:1a:97:7e:ec:8b:41:2b:a4:d4:
         97:e2:98:dd:2d:44:e4:30:1e:af:f2:19:4f:05:a7:0e:d8:9b:
         76:db:8b:7f:23:ae:5b:ca:2e:5f:43:c9:0c:ba:0b:ee:54:03:
         49:f2:e4:fe:f4:87:0c:c9:21:c0:2c:b3:66:21:13:42:a4:eb:
         be:bc:4e:bb:36:6a:ad:95:a6:f5:fc:55:84:f6:1b:11:5f:9e:
         ad:e5:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:35:02 2026 by rpki-client