Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
File:                     KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json)
Hash identifier:          eKqPHYAi6JNb5BR6bkMfACam952443fqXQztt1X6FwA=
Subject key identifier:   68:B9:3A:07:1B:AE:D4:4C:A5:0E:FC:69:EF:D0:DB:F9:52:4E:D9:BB
Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
Certificate issuer:       /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
Certificate serial:       0295
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
Manifest number:          028E
Signing time:             Sun 11 Oct 2026 02:13:41 +0000
Manifest this update:     Sun 11 Oct 2026 02:13:41 +0000
Manifest next update:     Sun 18 Oct 2026 02:13:41 +0000
Files and hashes:         1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: BCI6HUf7taAb3uizGu2LCXf16Hda9I42kbAbXUlx30M=)
                          2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: 2mQOZhorMosfPHcn+LmzBqbrRN1zMlGU1bgw29KMwX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl
                          rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193BF8, serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
        Validity
            Not Before: Oct 11 02:13:41 2026 GMT
            Not After : Oct 18 02:13:41 2026 GMT
        Subject: CN=6acaf0d5-71ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:b7:b6:c2:b4:a9:db:f9:c9:25:0a:db:0d:
                    ea:b3:d4:76:8e:21:05:49:5e:0b:29:f2:06:b2:28:
                    60:2a:26:8b:e7:60:24:a2:08:81:8c:83:e4:9a:97:
                    28:32:e7:a9:7f:7e:01:ea:c7:e9:4f:bc:a2:2d:ef:
                    16:99:05:4c:c5:b9:e7:ad:13:c9:64:2f:2a:da:fd:
                    7e:c0:b3:72:45:a5:f3:f9:7d:6a:cb:66:3c:d0:cc:
                    ad:eb:6d:bd:10:5f:53:f7:e9:35:4f:ef:9a:44:dc:
                    1f:04:38:e0:c4:97:d6:dc:af:a6:8b:c8:fc:c7:49:
                    7d:4b:27:09:f3:43:58:96:43:60:6f:d9:d6:69:4d:
                    9d:d6:d9:3c:cf:b4:af:49:96:f0:c2:86:24:8c:c3:
                    c7:96:47:53:e6:a8:15:39:44:73:4d:43:c4:39:ca:
                    04:ab:9c:34:97:f6:44:99:19:ff:18:bc:42:46:2b:
                    81:13:66:d5:63:51:23:8d:53:1b:7a:5c:d9:6f:bf:
                    a8:b4:8c:0c:cf:37:4c:67:40:75:80:c9:78:ce:98:
                    fe:d1:9e:bd:45:64:6a:40:31:00:75:f2:3c:41:9b:
                    54:e2:f6:d6:4c:41:63:a0:5c:2e:7f:44:6a:ca:f4:
                    f9:04:d4:ab:59:8b:ae:c8:9f:a7:66:58:2f:d3:6e:
                    b6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B9:3A:07:1B:AE:D4:4C:A5:0E:FC:69:EF:D0:DB:F9:52:4E:D9:BB
            X509v3 Authority Key Identifier:
                keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:bf:70:31:ea:83:df:09:67:1f:ec:c0:5a:d9:50:e7:1d:46:
         2d:83:1e:26:a1:6c:1f:a7:36:5f:99:41:c0:86:5a:5f:9d:79:
         ed:1f:96:72:83:67:66:10:12:48:d2:27:dc:ac:72:7b:53:91:
         4d:c3:be:a7:46:b5:8a:d6:79:3c:5f:ea:7f:32:47:15:e5:52:
         0b:62:fb:e4:04:73:b8:c3:e6:12:36:16:b3:c8:e0:68:4e:f6:
         68:a9:ef:02:a7:c0:a5:37:29:5a:7e:18:8a:24:67:38:e1:35:
         bd:9f:ef:78:33:d7:09:74:58:3b:0c:88:ac:28:32:14:6b:ec:
         55:fd:42:11:2e:ec:83:8e:72:3f:b1:d9:21:3f:84:98:ea:15:
         c1:ee:2c:87:f3:a0:6d:04:46:57:58:a9:34:71:7e:c6:2b:29:
         7f:09:07:8c:d1:b9:1f:cf:4b:63:d3:04:c6:2f:6e:20:f5:55:
         fa:11:c2:0e:84:76:e4:58:e9:f6:c1:50:49:99:3a:6f:d7:d5:
         bb:12:3c:08:81:02:bb:ce:67:14:ca:84:f1:18:7c:a8:18:48:
         69:70:f4:68:f1:6c:ff:0c:1a:e4:82:00:d0:0d:15:6b:8c:1f:
         48:fd:b3:45:c4:32:1e:2a:a9:12:2d:5f:41:8b:0e:28:41:74:
         1c:2b:c3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:56:28 2026 by rpki-client