Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
File:                     kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json)
Hash identifier:          SE5lR98eNv6VCdbOIUvvFq8npd6AZI5B+IkJqo90Ni8=
Subject key identifier:   18:44:56:30:E1:D7:96:B8:13:38:D7:D0:F9:91:31:E7:9C:EB:25:7C
Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1
Certificate issuer:       /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1
Certificate serial:       064F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
Manifest number:          064F
Signing time:             Thu 24 Sep 2026 14:18:20 +0000
Manifest this update:     Thu 24 Sep 2026 14:18:19 +0000
Manifest next update:     Thu 01 Oct 2026 14:18:19 +0000
Files and hashes:         1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: e7pStVRx1OgR6uQ2SQrg7iAbC0NWxz82niOr6j9fxEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl
                          rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1615 (0x64f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1
        Validity
            Not Before: Sep 24 14:18:19 2026 GMT
            Not After : Oct  1 14:18:19 2026 GMT
        Subject: CN=6ab5312b-8021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:50:4b:9e:bc:e6:8b:cd:31:18:00:26:92:
                    1e:67:1f:7a:f2:e6:3d:10:cc:c4:fc:1a:e2:d5:c2:
                    1e:84:cd:68:4a:5c:ac:79:3d:18:0e:82:c3:9c:18:
                    52:92:c4:a2:67:03:a6:6e:2c:7d:1f:76:69:2e:47:
                    64:31:8b:0a:6b:13:70:7a:ec:85:f4:b7:39:44:19:
                    bd:97:41:1b:5d:f0:8b:2b:fb:15:c2:44:ba:56:f3:
                    85:db:67:a9:2b:e6:0b:1d:97:70:72:7c:4b:c5:9f:
                    4b:52:86:64:3d:18:7f:fb:3c:3a:62:22:e1:27:83:
                    f1:d3:63:2e:3d:65:38:d3:0a:c1:ac:90:93:11:d6:
                    46:40:5f:12:ef:5b:7f:33:fb:24:52:bd:ff:f0:23:
                    73:5c:67:e3:ab:18:79:ab:b4:81:ab:56:a2:60:31:
                    3f:a3:7d:25:10:7f:11:99:e8:e2:7d:a3:94:5f:17:
                    61:5b:fd:31:9d:cb:4f:99:42:34:92:35:b9:12:67:
                    6c:1b:d5:85:48:ef:36:5a:52:c6:9b:69:0f:f8:1b:
                    d0:6a:46:fb:e3:9d:96:1a:43:06:55:9e:1d:35:03:
                    5f:68:4c:4c:2a:de:5a:28:23:fb:f4:76:03:5c:75:
                    23:26:41:b0:bf:6b:0f:13:e0:a4:8a:f0:52:46:bc:
                    b8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:44:56:30:E1:D7:96:B8:13:38:D7:D0:F9:91:31:E7:9C:EB:25:7C
            X509v3 Authority Key Identifier:
                keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:86:e9:d2:cc:7f:a9:4e:c2:97:22:6f:3f:14:25:ab:28:42:
         a1:55:f2:de:8f:ee:0f:1c:4a:6e:91:bb:32:da:e3:73:44:6d:
         5a:92:20:ca:da:2c:bf:7c:23:bb:ae:af:a9:91:3d:57:30:8b:
         08:22:71:54:5a:08:32:7b:4e:cd:31:31:5a:82:01:11:26:31:
         81:d1:66:ec:c8:84:7f:c6:f1:f7:65:9d:0e:c1:b1:77:45:a7:
         02:48:04:b7:11:38:45:81:ba:63:7b:4a:27:9f:fe:5f:25:dc:
         76:cb:09:b4:09:6e:c3:cf:c9:3a:77:5c:d8:e8:e1:a5:86:b8:
         5e:4b:a4:c6:4c:eb:5d:e7:62:e1:b0:28:6b:3a:28:d4:1e:82:
         08:02:4c:23:7e:e7:ed:90:86:9d:a8:0c:5c:86:68:09:45:1a:
         7e:d1:2b:94:0b:da:12:14:ab:9a:f4:eb:a6:60:7b:98:6c:10:
         3b:3d:3a:80:d1:73:33:c0:fe:95:95:5e:32:36:39:b6:94:22:
         7e:dc:2e:fb:46:26:4f:51:54:b8:74:39:75:7e:48:6e:c7:7e:
         ba:c5:fc:8f:d9:68:9d:6a:08:62:1b:b5:2d:b6:d7:44:99:ac:
         a8:72:f1:e6:64:76:3c:ef:1c:7d:d2:2f:f2:96:e3:f8:1a:80:
         fd:11:94:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:34:38 2026 by rpki-client