Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
File:                     KmvwVK0j6tLbOVMbZGcmypRaxJI.mft (raw, json)
Hash identifier:          y+1eZEZSMmeyaL7SajYECVjQMrOFcfAj9vvOgi/gokQ=
Subject key identifier:   40:68:3D:88:9B:BB:80:B8:08:25:D2:FA:38:BE:9D:C0:52:F2:79:DE
Authority key identifier: 2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92
Certificate issuer:       /CN=A918AB7E/serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
Manifest number:          0121
Signing time:             Sat 03 Oct 2026 06:32:37 +0000
Manifest this update:     Sat 03 Oct 2026 06:32:36 +0000
Manifest next update:     Sat 10 Oct 2026 06:32:36 +0000
Files and hashes:         1: KmvwVK0j6tLbOVMbZGcmypRaxJI.crl (hash: /WvZqC0JI6okTLJxnixkVbKgbuBcfVY9gZVYwrA4+NE=)
                          2: 3E4E5610438B11F18B6C5738C9833773.roa (hash: 1P+X6qPkn0VdYt1Cmrpk5GJKo0+TU3IuJXvl0/kng8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl
                          rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AB7E, serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492
        Validity
            Not Before: Oct  3 06:32:36 2026 GMT
            Not After : Oct 10 06:32:36 2026 GMT
        Subject: CN=6ac0a184-8187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:3c:44:6c:23:85:27:cd:91:aa:d6:0a:57:
                    1d:c2:7b:c4:47:82:de:21:4f:f1:71:a2:32:21:f0:
                    9e:d7:6f:f8:d9:51:db:95:65:81:6b:22:7f:af:1b:
                    e3:2c:92:8e:af:28:90:f1:fb:5a:7b:98:97:17:09:
                    a3:73:c7:cc:5c:94:07:4f:19:4d:1a:18:73:2e:5c:
                    26:7b:82:30:be:48:c3:42:1f:e2:4d:54:ba:20:77:
                    29:ea:51:8f:61:39:4d:c1:21:20:ea:42:38:f9:94:
                    f2:59:f4:fc:17:e0:7a:f5:26:6c:61:af:d0:af:4d:
                    3a:1a:ba:0d:cf:af:46:4a:1a:ea:bc:b1:55:08:01:
                    db:9f:47:d2:55:63:36:0a:c5:bc:4f:ca:98:d5:13:
                    13:10:30:f1:e0:0b:18:a0:f1:09:30:25:b6:7c:fc:
                    48:a1:21:3a:86:4b:5d:f0:c3:51:55:b2:67:5b:a8:
                    f6:67:24:20:c6:d2:2d:30:43:5e:4f:30:2a:1a:69:
                    1e:12:36:63:39:18:d0:f8:6c:b7:f3:bf:6d:04:53:
                    cf:f6:06:cb:fd:68:1c:8c:15:6b:47:53:98:e7:e6:
                    cb:96:72:91:1c:b5:84:c2:95:d0:04:c0:a7:73:c4:
                    6d:c2:89:f2:e9:83:df:8b:00:84:2e:54:63:61:18:
                    5b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:68:3D:88:9B:BB:80:B8:08:25:D2:FA:38:BE:9D:C0:52:F2:79:DE
            X509v3 Authority Key Identifier:
                keyid:2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f0:8f:26:76:04:af:42:2c:7d:26:43:83:3d:52:67:2a:5e:
         9b:51:43:3a:d1:e8:1a:3c:37:03:43:55:90:b2:8b:e6:d8:81:
         d8:1f:4e:2c:45:1a:19:79:17:b6:0a:85:ae:bb:b3:1c:53:2d:
         72:00:fc:d4:63:fb:fc:b5:35:d0:b5:e7:a6:41:1f:0e:0b:77:
         92:be:54:85:a8:2d:be:6c:87:21:0f:14:f1:63:f5:dd:b3:aa:
         59:30:8a:4d:e9:be:7f:c8:65:db:f9:88:c6:5a:c7:3e:d6:bb:
         58:72:4f:a2:c5:83:aa:64:20:8a:89:42:88:bc:b9:28:42:3e:
         b2:24:3a:90:a8:a6:32:fe:78:1f:7e:de:4c:b4:25:98:71:81:
         e8:99:69:1d:8c:41:de:d5:f9:3f:0c:73:dd:71:93:72:25:6d:
         db:70:15:35:af:57:be:ff:0d:39:d4:61:37:eb:2a:17:ac:1e:
         04:d5:fc:4e:e3:a3:56:48:8d:77:1d:20:f9:c7:15:9a:62:72:
         cc:6b:31:47:a7:e1:32:1a:5d:15:4d:18:b1:54:77:fb:b9:a7:
         24:3c:98:d4:22:9c:5e:bb:56:82:48:65:41:5a:6b:fd:eb:0f:
         2f:aa:3e:d5:68:17:a7:7b:f7:e1:da:ed:55:d3:c4:7f:85:b7:
         8f:32:c4:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFCN0UxMTAvBgNVBAUTKDJBNkJGMDU0QUQyM0VBRDJEQjM5NTMxQjY0NjcyNkNB
OTQ1QUM0OTIwHhcNMjYxMDAzMDYzMjM2WhcNMjYxMDEwMDYzMjM2WjAYMRYwFAYD
VQQDEw02YWMwYTE4NC04MTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvPw8RGwjhSfNkarWClcdwnvER4LeIU/xcaIyIfCe12/42VHblWWBayJ/rxvj
LJKOryiQ8ftae5iXFwmjc8fMXJQHTxlNGhhzLlwme4IwvkjDQh/iTVS6IHcp6lGP
YTlNwSEg6kI4+ZTyWfT8F+B69SZsYa/Qr006GroNz69GShrqvLFVCAHbn0fSVWM2
CsW8T8qY1RMTEDDx4AsYoPEJMCW2fPxIoSE6hktd8MNRVbJnW6j2ZyQgxtItMENe
TzAqGmkeEjZjORjQ+Gy3879tBFPP9gbL/WgcjBVrR1OY5+bLlnKRHLWEwpXQBMCn
c8Rtwony6YPfiwCELlRjYRhbQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEBoPYib
u4C4CCXS+ji+ncBS8nneMB8GA1UdIwQYMBaAFCpr8FStI+rS2zlTG2RnJsqUWsSS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUI3RS9GNzU5Nzk2RTA4
ODExMUYwQkFDMzQxM0VDNEY5QUUwMi9LbXZ3VkswajZ0TGJPVk1iWkdjbXlwUmF4
SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ttdndWSzBqNnRMYk9WTWJaR2NteXBSYXhKSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QUI3RS9GNzU5Nzk2RTA4ODExMUYwQkFDMzQxM0VDNEY5QUUwMi9LbXZ3VkswajZ0
TGJPVk1iWkdjbXlwUmF4SkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARvCPJnYEr0IsfSZDgz1SZypem1FDOtHoGjw3A0NVkLKL5tiB2B9OLEUaGXkX
tgqFrruzHFMtcgD81GP7/LU10LXnpkEfDgt3kr5UhagtvmyHIQ8U8WP13bOqWTCK
Tem+f8hl2/mIxlrHPta7WHJPosWDqmQgiolCiLy5KEI+siQ6kKimMv54H37eTLQl
mHGB6JlpHYxB3tX5Pwxz3XGTciVt23AVNa9Xvv8NOdRhN+sqF6weBNX8TuOjVkiN
dx0g+ccVmmJyzGsxR6fhMhpdFU0YsVR3+7mnJDyY1CKcXrtWgkhlQVpr/esPL6o+
1WgXp3v34drtVdPEf4W3jzLEjQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 06:50:36 2026 by rpki-client