Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
File:                     kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft (raw, json)
Hash identifier:          T5exiXeYtXnieg2nPFdN8zu+gQedpA1mF/VtmqdR+Bs=
Subject key identifier:   7A:D0:5F:20:D1:E3:A2:30:41:8D:36:E8:7B:5E:8E:D8:BF:D1:39:8E
Authority key identifier: 90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74
Certificate issuer:       /CN=A91A038D/serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
Manifest number:          CB
Signing time:             Sun 27 Sep 2026 07:26:15 +0000
Manifest this update:     Sun 27 Sep 2026 07:26:14 +0000
Manifest next update:     Sun 04 Oct 2026 07:26:14 +0000
Files and hashes:         1: kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl (hash: /tCOGlXDBiSvzz9hfBR9O4qDZZsJca+QDmvcrH1Km+I=)
                          2: 117F7230ADD611F1A3F789A53C11F970.roa (hash: MvbalvbytGaLCVL9NlFOUAL6a0UY6goTUEonuI/BFVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A038D, serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
        Validity
            Not Before: Sep 27 07:26:14 2026 GMT
            Not After : Oct  4 07:26:14 2026 GMT
        Subject: CN=6ab8c517-fdd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4b:70:e1:6a:a8:1f:27:61:50:92:59:2b:0c:
                    84:52:11:f9:cf:60:20:1a:87:02:e7:2e:57:0f:a3:
                    9f:77:67:b8:f1:7f:ea:ae:bc:c8:d6:b2:35:af:ca:
                    bd:43:5c:24:39:8d:6e:be:25:db:0a:d5:be:13:1e:
                    b1:3e:b1:44:34:7e:a6:0e:75:fa:c5:00:77:99:30:
                    b7:3f:e1:5c:a8:f6:67:4c:4f:a9:f9:78:82:93:26:
                    09:ba:1f:52:0d:a5:e2:c2:24:de:22:b5:cc:24:d6:
                    7a:d4:2d:b7:4b:06:f4:c6:3e:93:37:42:31:6d:07:
                    43:68:03:00:c9:56:8c:d9:b3:10:fa:63:71:cc:6c:
                    7e:80:26:20:6c:a3:0d:b3:c1:a9:bc:26:9d:0d:19:
                    e6:35:4a:54:69:cb:e2:e4:77:19:52:09:d9:2a:f9:
                    a1:f9:37:2d:c7:af:d0:dd:0a:ad:24:76:94:bd:f9:
                    13:fc:fe:5b:c8:b6:8b:38:5f:f6:a2:57:6b:e0:c2:
                    56:8c:8d:eb:11:8c:d0:30:4a:e2:aa:ec:cd:89:6b:
                    b3:aa:ad:66:f8:33:67:f9:db:20:f9:d2:19:0c:ce:
                    4d:04:68:d2:8f:ae:8e:2a:de:74:c8:a9:52:2e:48:
                    1c:35:49:4e:05:06:88:6c:22:0d:13:33:3c:54:3d:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D0:5F:20:D1:E3:A2:30:41:8D:36:E8:7B:5E:8E:D8:BF:D1:39:8E
            X509v3 Authority Key Identifier:
                keyid:90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a6:52:f9:a1:a6:ff:80:00:d6:12:de:8f:e2:3f:c1:ed:ce:
         f2:66:f1:75:40:57:67:cf:a5:c7:76:2e:14:79:b9:c5:6d:a3:
         fe:2d:0f:fe:e2:69:c3:4b:c8:73:a3:2a:d9:ae:21:db:50:92:
         c4:54:30:b7:1e:58:c1:bf:32:aa:07:ec:2b:5c:f2:30:d8:e5:
         e3:15:d5:d5:f4:d0:9f:4b:f9:42:6c:54:32:ea:b2:88:76:12:
         e9:28:bf:e8:1f:75:98:a1:69:32:76:b8:2b:c1:de:a8:68:af:
         ea:a3:18:0e:41:dc:e4:fa:db:21:e4:67:b6:ef:84:3d:fa:89:
         7a:ee:13:89:57:e2:2c:cf:a9:73:76:02:f1:c6:70:18:9b:81:
         ef:14:16:c3:aa:1a:04:3e:14:09:1f:a5:db:d7:75:4c:6d:75:
         f8:c6:1a:5c:a8:e4:71:3f:cb:9b:46:e7:3c:df:60:ce:df:3f:
         f1:ed:21:1e:76:16:f1:b4:61:71:4a:84:68:00:9c:46:64:7a:
         aa:3b:2c:b5:b6:f6:ef:e2:6b:05:11:ac:27:2a:d7:3b:e1:86:
         43:8f:2f:e2:58:4c:69:4e:1c:d0:aa:d1:14:aa:08:8f:b9:7e:
         f6:54:d1:58:da:0d:bc:24:df:94:3d:27:17:8d:0c:65:cc:ce:
         e5:94:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:58:12 2026 by rpki-client