Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
File:                     KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json)
Hash identifier:          MnN9EHcd+fGbDDzYGU7AfpbDCohWXNpQcVIrEj51j58=
Subject key identifier:   69:D7:AA:7A:E2:0E:A1:DE:22:45:69:09:C1:B8:0B:A8:92:DE:EE:17
Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
Certificate issuer:       /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Certificate serial:       0B2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
Manifest number:          0B20
Signing time:             Thu 24 Sep 2026 19:15:12 +0000
Manifest this update:     Thu 24 Sep 2026 19:15:12 +0000
Manifest next update:     Thu 01 Oct 2026 19:15:12 +0000
Files and hashes:         1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: Pcr9hkRdkjzlg8GIxb1vpdJThK5Zol4VdxZx6tcWbzA=)
                          2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: +6MnWixCvzMt3rLSJSp2YvtRQcWH4ISzu9SV3GhK8Pw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
                          rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2859 (0xb2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
        Validity
            Not Before: Sep 24 19:15:12 2026 GMT
            Not After : Oct  1 19:15:12 2026 GMT
        Subject: CN=6ab576c0-fcef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:c3:85:b3:7a:33:fe:95:c3:3f:c3:8b:31:
                    a3:99:4c:47:4b:da:2f:71:6a:fb:f6:9b:64:a2:32:
                    9c:55:3f:56:ac:00:c8:a9:0c:88:7b:9d:d6:9e:63:
                    d3:f9:0f:73:8c:67:85:d7:85:d7:0a:2c:2c:54:91:
                    3e:62:36:56:78:31:75:f2:c4:59:f3:b6:21:b0:88:
                    ba:70:0d:d3:2a:86:c7:19:29:0b:c0:ee:29:6e:48:
                    34:a3:16:65:d0:44:fc:a9:8e:dc:94:e8:6b:8f:8e:
                    59:4d:1a:a5:fa:e0:cc:67:11:13:d8:e6:ff:4e:16:
                    4e:99:b1:7a:b1:36:29:a3:d2:96:44:d2:46:da:dc:
                    2f:98:8d:2f:45:54:47:f5:c8:73:13:0e:0b:9d:d8:
                    56:84:1f:76:8e:84:45:54:d7:c6:fc:33:68:42:24:
                    17:25:10:9d:c1:89:71:3e:52:da:41:bf:df:2b:a6:
                    99:8a:79:3d:30:da:8a:c8:31:b0:32:28:27:f9:63:
                    c3:7f:75:8e:ab:8e:e5:03:ab:6a:81:76:53:bf:75:
                    4d:3d:8c:7b:69:87:b8:95:09:ff:f2:75:d6:40:1f:
                    bf:6f:e2:ba:ce:c5:30:98:34:20:25:c8:37:20:64:
                    8a:3e:86:c3:bc:37:a5:85:69:76:91:b8:27:da:08:
                    b8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D7:AA:7A:E2:0E:A1:DE:22:45:69:09:C1:B8:0B:A8:92:DE:EE:17
            X509v3 Authority Key Identifier:
                keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:26:81:fc:f4:a9:44:8e:19:36:79:db:03:02:7a:5d:f4:5f:
         ed:82:45:74:45:ce:e6:9e:8f:25:bf:9b:10:ba:e3:dd:50:ab:
         f4:4f:04:dd:c5:0d:33:f7:dc:02:50:ca:6f:0a:bd:15:c8:9e:
         50:31:59:43:c0:7c:29:ca:d7:2c:c8:65:bf:53:bd:f4:83:99:
         08:44:53:c5:40:57:4e:10:19:57:df:92:c7:c5:6a:09:8e:bf:
         ed:03:74:48:0e:51:fa:54:a7:d9:af:ee:bd:6c:d0:b3:4b:5d:
         5f:f7:a2:67:49:8a:77:dd:7d:42:7d:5c:5c:a3:7e:1f:2c:91:
         6c:44:ad:28:c1:33:f8:a1:85:35:b8:54:46:46:1c:fc:fd:3d:
         78:70:60:b3:99:af:dc:73:c7:20:81:6f:45:46:8c:bb:ff:b6:
         98:8a:15:84:8f:f6:5b:5e:bd:d5:d2:ae:7c:f2:44:09:ad:40:
         8d:31:f2:e2:36:ba:42:bc:67:a4:7a:b6:4a:5a:c2:9b:00:10:
         ef:5d:ce:41:ac:2d:e3:43:9d:12:df:ae:83:8d:27:76:29:ab:
         15:86:f7:9a:02:f5:20:30:8c:37:58:2d:43:6c:bc:46:9a:d0:
         2f:fe:2e:7c:22:e4:94:7c:81:89:d4:a7:31:84:00:49:a7:b1:
         4e:fa:ab:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:37:36 2026 by rpki-client