Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
File:                     kFj-3Oxfh289_hYZQxnBRcnAzLU.mft (raw, json)
Hash identifier:          zsOqa8jf1RpyPxVgazw3A0Saj24ey90huNAVX54LQ5Q=
Subject key identifier:   73:F1:9D:13:E3:D0:AC:63:EA:3D:70:BE:74:6D:C9:54:F9:48:2D:B2
Authority key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
Certificate issuer:       /CN=A9185B0F/serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
Certificate serial:       075A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
Manifest number:          0752
Signing time:             Sat 26 Sep 2026 21:52:46 +0000
Manifest this update:     Sat 26 Sep 2026 21:52:46 +0000
Manifest next update:     Sat 03 Oct 2026 21:52:46 +0000
Files and hashes:         1: kFj-3Oxfh289_hYZQxnBRcnAzLU.crl (hash: hp3j1c8lwwuufbjfqSD7U62KNcO0xBZp6dOsXbxnNtM=)
                          2: 25A7FE7E855211EB8DEDD812C4F9AE02.roa (hash: JFLwuBXWDX0J8f5lX14aiOUiyE2v7U9ODxE/5aeQfZg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl
                          rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 21:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1882 (0x75a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B0F, serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
        Validity
            Not Before: Sep 26 21:52:46 2026 GMT
            Not After : Oct  3 21:52:46 2026 GMT
        Subject: CN=6ab83eae-0663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:25:bb:76:38:a5:3f:df:4b:32:b6:ff:23:
                    22:43:e8:42:aa:d6:d6:9c:14:8c:28:2d:89:13:10:
                    a5:cb:f4:e0:03:04:00:0c:27:e3:7d:78:ca:dc:a4:
                    53:40:74:9e:6d:f2:7f:53:e6:8b:36:7c:ac:24:8c:
                    84:33:9c:36:07:4b:97:38:0c:a9:62:07:58:d3:70:
                    bc:c1:69:25:ad:d3:17:44:74:ac:03:c5:96:5b:83:
                    1b:80:96:4a:b8:c8:c2:c6:a0:3c:53:0a:7d:a4:50:
                    34:c2:88:5c:03:fd:1f:09:b3:57:43:82:dc:79:a5:
                    64:06:a0:7a:42:32:09:c0:d8:c7:fa:fa:a1:82:a4:
                    1b:e8:d6:8b:9d:95:e8:e7:7b:d8:24:4a:56:a4:2c:
                    4b:70:3e:e3:c6:e7:f1:3c:c3:53:7f:c4:f8:5b:8d:
                    61:82:42:c5:10:77:2a:0c:ae:b7:3a:20:74:c8:80:
                    2e:f3:aa:3e:c7:1a:f6:9e:d2:98:fa:d9:91:8f:be:
                    6e:7d:cd:af:8f:cf:a1:b2:b1:47:f6:5a:5b:62:cf:
                    79:f4:5a:8b:3b:5a:0a:89:99:77:79:42:51:2d:bf:
                    20:56:21:5f:58:63:e6:40:ae:4e:0c:57:e5:08:98:
                    b0:6b:a6:d3:60:bd:b1:6b:09:9c:db:76:32:fd:72:
                    d5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F1:9D:13:E3:D0:AC:63:EA:3D:70:BE:74:6D:C9:54:F9:48:2D:B2
            X509v3 Authority Key Identifier:
                keyid:90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b7:f7:b4:5e:6b:3b:34:61:49:87:54:4d:e5:07:ec:38:ed:
         b1:00:35:0c:c1:52:39:79:6b:66:45:dc:5a:68:23:ba:b6:07:
         c4:49:98:3e:b2:5b:ab:5d:d0:2e:ae:a0:a7:42:20:16:ca:63:
         e9:0f:da:f2:ff:3a:58:f2:e8:3d:f1:b5:5c:89:37:71:99:3a:
         08:6b:83:c7:cd:b5:0c:30:5e:66:5b:2b:ea:ce:f8:d1:2b:1a:
         08:72:d2:b4:3f:5c:57:df:03:82:31:99:4d:ac:4b:08:45:da:
         28:45:bf:68:19:f7:88:da:4c:7c:80:be:14:62:a6:22:ef:cb:
         f2:c4:c6:b2:5b:13:2b:1b:45:9d:0e:cc:14:30:d8:cf:c3:31:
         1d:6c:1a:d2:f9:e6:58:d4:13:fa:01:16:86:fc:b6:ff:1c:60:
         7b:2a:40:ab:70:bc:48:21:7f:6c:0b:90:4f:36:0a:34:89:d4:
         88:76:80:34:0a:cf:2d:a3:6f:21:cb:93:57:a5:be:bb:b5:0b:
         77:84:6b:7b:03:8f:62:9b:58:a9:59:45:33:ed:2f:4d:78:cf:
         d6:7e:8d:e5:33:05:fa:9e:d4:6b:e3:9b:d8:08:3e:41:b1:2c:
         00:19:49:39:af:b6:1f:6c:06:0f:fe:93:8d:1c:bd:ca:52:ab:
         6c:92:de:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:06:55 2026 by rpki-client