Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
File:                     KYEeHbBovbur-3q2lfhYmL1hjGk.mft (raw, json)
Hash identifier:          aAO9vjluKE34WGiuTAncZs1vRx6P4z51AA0s0B5LObA=
Subject key identifier:   74:86:D3:87:0C:18:DF:4F:18:67:05:74:7B:24:94:06:D0:FD:AD:DB
Authority key identifier: 29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
Certificate issuer:       /CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Certificate serial:       0231
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
Manifest number:          022B
Signing time:             Fri 25 Sep 2026 02:47:05 +0000
Manifest this update:     Fri 25 Sep 2026 02:47:05 +0000
Manifest next update:     Fri 02 Oct 2026 02:47:05 +0000
Files and hashes:         1: KYEeHbBovbur-3q2lfhYmL1hjGk.crl (hash: ZJn/rRLQgW6QZ3eH5bCs9zJ3Iz+HnyVUMgboXxtuagU=)
                          2: 0B2052EA6D0D11EEA65D7522C4F9AE02.roa (hash: JE3YkqQWW9mSMDDOp1/CYkJud9Wxp8btHEMRgajpDV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl
                          rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0CAE, serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
        Validity
            Not Before: Sep 25 02:47:05 2026 GMT
            Not After : Oct  2 02:47:05 2026 GMT
        Subject: CN=6ab5e0a9-a38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:be:9b:75:b0:f4:b2:fb:7e:ee:bc:2e:46:3f:
                    f7:9d:99:2a:2f:6e:f3:61:d8:e2:d9:4e:6b:d7:9a:
                    e9:b2:32:d2:df:e6:22:f6:30:dc:af:29:d0:c0:f0:
                    a8:1d:d3:d9:72:21:c3:bd:6a:4d:40:b6:ab:91:7a:
                    51:57:41:95:42:a7:5d:97:3f:4f:1f:d4:58:fa:46:
                    20:a0:07:50:35:71:47:be:2a:61:75:e5:76:67:d1:
                    bc:06:84:42:c1:d0:91:55:7c:d9:8a:d5:23:6d:02:
                    c8:02:4e:54:4a:8b:da:26:fa:cd:40:b9:79:5b:1a:
                    a5:8a:ba:c2:2b:84:86:69:ac:f6:5d:e0:a4:db:29:
                    90:0f:ea:6d:a1:8c:43:6c:00:2c:e4:87:31:0d:e8:
                    7d:42:73:6f:d5:84:a0:e8:37:eb:dd:53:77:42:e6:
                    22:85:05:af:2a:39:0f:37:35:c4:2f:be:fa:23:be:
                    cd:02:f6:6c:37:ad:2e:60:8f:92:62:c5:e1:91:68:
                    cb:c7:8a:21:e3:e6:d2:f8:14:f0:f9:8b:21:64:a9:
                    37:3b:95:70:8b:f2:7c:22:d5:93:d5:bb:3f:f2:1f:
                    44:a4:7c:51:bd:87:bd:d1:b1:37:cd:f3:3c:2d:5a:
                    09:2c:98:53:11:42:cc:a1:f5:7d:e7:69:57:62:1f:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:86:D3:87:0C:18:DF:4F:18:67:05:74:7B:24:94:06:D0:FD:AD:DB
            X509v3 Authority Key Identifier:
                keyid:29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:8b:5e:3d:ac:c9:b8:7f:bf:43:19:c8:ea:4c:20:97:76:31:
         a5:a7:12:1f:c9:e6:16:95:be:8e:fc:63:72:72:34:8a:86:5e:
         37:9a:0d:9a:fb:0c:96:f6:69:1c:a4:b2:b8:2f:fc:e0:d9:1b:
         4a:f3:66:96:af:9f:cd:51:36:e8:73:ab:13:e3:f4:7c:7c:8e:
         87:90:21:6b:52:d2:5c:31:81:95:73:45:4d:8c:37:68:a1:0f:
         32:0d:ba:ae:fa:04:5e:8d:ef:cc:5c:0e:97:b3:6a:ed:61:cc:
         ca:ca:1d:05:fd:be:c1:ad:a2:85:d2:16:21:36:0d:66:d9:f0:
         b1:65:91:41:08:d0:0c:01:ed:ef:01:13:1b:ee:19:3d:08:00:
         5f:cf:a0:8c:19:5f:58:6e:cc:0c:c0:0a:e4:5c:70:01:09:28:
         96:0b:10:fc:d6:5c:90:a8:b8:96:93:b8:50:85:30:41:ec:6e:
         33:56:af:84:50:09:27:d7:64:4d:78:d0:2d:69:66:a9:74:db:
         b8:7b:d9:9d:3c:c5:f0:e9:0c:89:8c:2e:6b:7a:1d:84:af:97:
         ca:85:52:08:71:de:4d:f0:5d:54:ef:d7:1d:7d:e6:48:ac:7f:
         77:12:61:74:ea:82:b3:32:73:f6:ff:f5:af:bf:00:ef:a0:d6:
         29:61:61:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:28:33 2026 by rpki-client