Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
File:                     KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft (raw, json)
Hash identifier:          ANfXckGEZ+SKFwXh5iZv2HnYU8jFa0znN4QNfyQP5Ts=
Subject key identifier:   77:90:7B:CB:A0:59:F6:95:90:40:CA:91:56:BE:15:24:4D:B2:BA:30
Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD
Certificate issuer:       /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
Certificate serial:       1103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
Manifest number:          10EE
Signing time:             Thu 24 Sep 2026 17:16:06 +0000
Manifest this update:     Thu 24 Sep 2026 17:16:05 +0000
Manifest next update:     Thu 01 Oct 2026 17:16:05 +0000
Files and hashes:         1: KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl (hash: GwTpz5DV/thE3Kfe5tlysJ1FByDj4YNym6Bo8PwPZA8=)
                          2: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (hash: vMIdusdjtj9hlcGq2gI+hsj/mLp2lRpI2Yrz/QIdsz8=)
                          3: 2A3D8B5EA97D11EABA31B843C4F9AE02.roa (hash: xjuxHTm+G9he/JFBNF/J7ScezC0X5PCaznrRtGeATtQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl
                          rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4355 (0x1103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD
        Validity
            Not Before: Sep 24 17:16:05 2026 GMT
            Not After : Oct  1 17:16:05 2026 GMT
        Subject: CN=6ab55ad6-4d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:aa:69:1f:d4:ba:64:06:1c:02:e8:ea:a4:
                    b5:26:7a:e8:a4:d8:a9:d6:ba:1e:a5:7d:bf:90:28:
                    00:b5:5b:4e:51:1b:ba:8f:ce:8f:74:33:f1:4f:e1:
                    f2:f1:92:74:02:a5:fe:35:43:bd:a9:3c:3a:5c:40:
                    9b:00:fd:8d:8e:fb:46:19:80:6d:15:a1:e0:39:16:
                    7e:65:a9:3b:b4:8b:fc:18:c7:b8:fa:96:91:47:0e:
                    f3:82:11:42:7b:55:85:e6:5c:d9:bb:8b:f3:56:cf:
                    ae:4e:f6:7d:65:f8:19:45:30:d1:54:9b:06:2f:40:
                    87:9e:d5:83:a3:eb:4d:36:5b:14:a6:0b:20:1a:1c:
                    31:d3:c9:f5:bc:80:6c:7a:16:1e:62:68:ef:48:99:
                    fd:98:c2:68:e9:5a:8a:b9:28:0c:50:1d:1b:4b:55:
                    34:89:30:0a:63:fa:07:8d:cb:c5:f2:39:0e:dc:21:
                    36:1c:0e:a9:d5:62:e7:48:d3:54:b3:00:85:b8:d5:
                    31:50:b6:40:1e:25:90:45:9e:ee:44:1b:fb:08:e6:
                    dd:e1:15:78:21:4f:fd:05:67:ac:23:bc:57:17:13:
                    3f:56:a3:67:51:c2:49:a2:45:9b:71:40:f8:a0:8c:
                    84:c8:a0:95:af:71:e6:5a:b0:44:42:eb:eb:93:e7:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:90:7B:CB:A0:59:F6:95:90:40:CA:91:56:BE:15:24:4D:B2:BA:30
            X509v3 Authority Key Identifier:
                keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a4:3d:d4:30:e3:88:23:a7:8a:6a:cb:4b:62:06:05:be:7f:
         02:e7:54:e2:00:e5:97:71:25:9c:9a:f3:4f:24:12:a4:79:79:
         fe:90:8f:71:19:43:4c:33:c1:b8:f5:f5:59:5f:26:1a:7b:05:
         ad:fb:ae:b2:d5:73:2b:39:2a:bf:46:8c:05:c9:e7:ce:3c:a7:
         8f:be:fd:f6:a4:76:0b:25:9c:8b:ff:cc:d5:63:c3:a2:be:a2:
         bd:f5:46:a0:d5:ad:84:a5:f3:e0:7d:67:d9:d1:74:8b:5d:6e:
         ad:55:e0:43:05:67:b9:d0:76:aa:ca:7f:5b:ae:db:3b:d8:fa:
         ab:5c:34:be:1a:a8:ba:8c:cb:30:28:ea:95:7b:3d:60:39:85:
         b2:c9:ea:06:2a:b9:47:d3:fc:50:fb:7f:c5:f4:09:a5:f5:26:
         02:86:ed:63:9e:98:ee:3d:a6:d5:15:a4:28:11:cc:14:9b:4c:
         9d:cc:55:1a:55:2b:84:6e:0a:88:81:c0:f9:3d:12:a9:88:11:
         f1:1e:f5:fd:e9:79:3d:ed:59:dc:8c:72:73:8a:a4:03:63:b4:
         c7:6e:e6:8a:2d:f0:e7:64:6f:6e:ad:22:f7:1b:cc:34:09:91:
         af:a0:dd:bd:9a:b1:90:df:96:f7:f1:27:23:50:60:29:8e:15:
         88:77:45:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:23:24 2026 by rpki-client