Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
File:                     kuuO8sbiYWmIqY_VsT7io2siHEM.mft (raw, json)
Hash identifier:          c2ou42n//hCzlkEyoDJGDk5Ajqi0/aYs6zAyT3FxwYg=
Subject key identifier:   28:A5:76:1A:C9:9A:53:1D:15:89:69:00:37:FB:2F:BC:25:46:4A:22
Authority key identifier: 92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43
Certificate issuer:       /CN=A91A15FB/serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
Certificate serial:       01AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
Manifest number:          01A9
Signing time:             Mon 21 Sep 2026 04:05:57 +0000
Manifest this update:     Mon 21 Sep 2026 04:05:56 +0000
Manifest next update:     Mon 28 Sep 2026 04:05:56 +0000
Files and hashes:         1: kuuO8sbiYWmIqY_VsT7io2siHEM.crl (hash: G5G1lW7MJ8NtggiVOSKcz7conhX61HDfYVGA70TPQFI=)
                          2: E61BEE5C605711EF9150403FC4F9AE02.roa (hash: D+iJuzDvMhnCI8UyvsE+qUDuWTu3WwuRDsjoFGIlBpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB, serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
        Validity
            Not Before: Sep 21 04:05:56 2026 GMT
            Not After : Sep 28 04:05:56 2026 GMT
        Subject: CN=6ab0ad25-a7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:51:ad:fb:d0:f3:3b:65:4a:2e:2f:53:88:
                    34:c5:7b:18:9d:91:87:22:6a:e1:db:15:d5:26:fc:
                    44:e6:29:e9:5e:ca:2a:15:73:dc:1f:7e:1e:0a:69:
                    b0:d6:37:bf:86:9e:01:51:93:4b:25:4d:59:0d:f2:
                    61:78:63:76:b2:e4:76:8f:45:f2:a5:62:ab:7d:36:
                    18:95:43:1f:f3:51:a0:f8:23:b5:d7:5c:08:49:ce:
                    d5:71:9f:4f:c4:69:ab:c8:52:93:92:51:df:4d:e2:
                    95:c4:0f:82:61:f5:f1:a4:47:c8:d2:52:8a:cb:45:
                    70:13:1f:d8:99:26:0c:8d:24:41:eb:80:4d:6a:22:
                    52:21:3c:32:1e:b4:2b:cc:ff:73:d2:56:ad:82:44:
                    b2:ce:f5:17:19:5f:0a:12:7b:b2:f0:b1:4d:ce:88:
                    17:38:d4:50:c5:7a:65:cc:32:a4:37:72:72:bd:91:
                    b5:f0:c2:c4:d0:33:ee:c9:e9:45:37:e0:1a:58:96:
                    e8:b3:2e:81:1c:3f:45:94:87:7c:d8:df:8f:fa:70:
                    9b:f4:95:0a:c4:23:7d:c7:14:3e:80:9d:19:01:d0:
                    5b:42:a6:fc:e1:dc:f0:b7:ca:56:6a:27:17:26:ca:
                    82:5c:18:17:7c:3b:1a:dd:db:3e:43:f8:98:f7:94:
                    df:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A5:76:1A:C9:9A:53:1D:15:89:69:00:37:FB:2F:BC:25:46:4A:22
            X509v3 Authority Key Identifier:
                keyid:92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9b:4e:38:4c:2e:20:35:c5:08:61:1b:24:02:30:57:17:52:
         35:a0:33:83:dc:5e:91:da:08:cc:ce:5a:53:5f:bd:10:9d:e6:
         f4:54:e2:c3:67:73:08:d2:5d:41:f2:6e:71:9f:7b:6f:cc:b4:
         b6:88:d5:39:c2:63:fd:16:35:06:42:5a:c4:bb:33:c8:9d:ab:
         d6:b6:83:ab:5c:85:b3:0b:a8:32:8e:20:7d:f6:71:a4:9c:2b:
         7b:79:43:65:6d:95:44:a6:fe:fb:94:ee:92:b8:c5:4d:10:0d:
         90:b4:50:71:ad:8e:27:40:5c:5a:96:97:1d:07:50:15:fd:ef:
         a8:b9:80:91:0a:04:76:66:1a:f0:f5:95:f5:4d:ee:75:af:b6:
         ca:2c:d8:5f:47:d6:a8:df:01:ee:49:a2:8a:e4:ec:51:ae:bb:
         c8:04:3a:53:ca:b9:a6:3c:7e:78:24:1e:b4:d9:45:00:6b:4e:
         19:1d:ca:59:e3:37:81:63:4f:77:1f:62:9a:33:56:f0:c9:63:
         ae:9a:7c:b6:59:32:a5:e8:16:ee:58:46:63:ae:7c:1d:c0:45:
         43:4e:ad:60:06:8f:58:2a:ec:84:6a:ee:72:32:5e:b1:f5:27:
         26:73:2d:ee:d5:df:ec:75:e0:8b:2b:ec:f9:a3:02:3c:c3:e6:
         a2:53:d1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:47:38 2026 by rpki-client