Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
File:                     KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft (raw, json)
Hash identifier:          Qbdk8FezikUQizxeZkLOX9sZIrhW7G7q3Eaql8Am5CI=
Subject key identifier:   F1:88:AA:6D:FA:2B:04:5F:C4:F9:63:73:6D:F5:3D:3D:A2:84:10:1A
Authority key identifier: 29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38
Certificate issuer:       /CN=A91B72D6/serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
Manifest number:          69
Signing time:             Wed 23 Sep 2026 07:43:54 +0000
Manifest this update:     Wed 23 Sep 2026 07:43:54 +0000
Manifest next update:     Wed 30 Sep 2026 07:43:54 +0000
Files and hashes:         1: KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl (hash: rzdCMW/mbgq4G7lwhe1EYIeNZT5PBhedEly7iqwGcyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl
                          rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B72D6, serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438
        Validity
            Not Before: Sep 23 07:43:54 2026 GMT
            Not After : Sep 30 07:43:54 2026 GMT
        Subject: CN=6ab3833a-a88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:29:bd:08:59:ab:7f:b0:7e:c7:af:d5:0f:
                    9a:aa:af:5a:7e:32:9c:25:57:ae:30:4a:6b:e7:53:
                    c9:1d:33:6b:f7:6b:57:81:8d:51:9e:8d:16:d4:48:
                    68:e1:0d:4f:ba:d3:f7:11:ac:12:47:e6:04:d5:80:
                    27:b9:3a:0d:b7:5c:ef:b1:ac:e2:06:38:6b:84:bc:
                    78:09:67:b2:ab:e0:5b:15:d5:98:e6:fc:7d:55:af:
                    84:a9:4e:f2:ad:73:b1:3c:fc:a3:3f:fd:e8:33:5e:
                    aa:f7:aa:20:d5:a4:69:b5:12:00:cb:d4:36:55:cd:
                    0b:a6:c0:ca:3f:42:47:e5:6a:50:b7:39:3f:86:2a:
                    53:69:01:a6:3e:db:f4:c6:6a:e3:fd:d8:e1:8c:e9:
                    33:bd:8f:a5:78:9f:8d:e7:1d:26:d1:34:7a:0c:c3:
                    2e:e0:dc:1c:ad:34:0b:3b:b2:f8:58:9b:99:e3:f2:
                    c1:ca:4c:59:61:ac:a8:99:50:f3:6f:cc:68:38:9e:
                    84:ab:65:e5:74:51:86:b5:66:a3:75:6d:0c:1a:2c:
                    30:2a:45:89:6d:2b:c1:b5:22:ee:4d:4e:dc:03:6c:
                    28:15:0d:ed:26:fe:74:d1:47:e1:84:48:af:7a:56:
                    31:e9:db:57:7d:6d:17:8b:96:d9:8d:2e:18:7e:9d:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:88:AA:6D:FA:2B:04:5F:C4:F9:63:73:6D:F5:3D:3D:A2:84:10:1A
            X509v3 Authority Key Identifier:
                keyid:29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a1:53:a7:7a:ca:7c:02:53:46:1b:5b:29:16:23:47:7f:63:
         3e:9a:1e:91:6f:85:4c:88:2a:71:70:8e:7f:c7:c5:e2:2b:89:
         e0:c3:2e:49:da:f8:d1:cd:45:f0:6c:1c:20:74:9a:d6:31:9b:
         02:7c:c9:c6:aa:a0:23:57:21:25:cd:14:dd:ff:6d:35:95:b9:
         79:e0:17:64:53:aa:7b:2a:0a:d8:57:db:37:4b:13:f9:ed:c7:
         c8:50:a3:68:6a:41:d4:36:60:2b:96:bb:31:49:e3:08:c7:3f:
         d6:d9:09:21:93:81:eb:6a:39:ad:ba:ad:e1:23:63:2f:b8:61:
         35:15:dc:47:db:67:ce:d1:ad:5c:a3:3e:38:99:8c:09:e2:33:
         65:0e:04:7b:3a:a2:af:a8:81:81:b2:76:68:2c:87:e1:49:48:
         cb:7c:00:e8:e5:d3:32:8f:1c:25:c1:a8:53:d6:64:8d:d7:cc:
         80:18:0b:84:8c:29:14:b6:61:01:d0:74:07:8c:3b:6c:e7:1c:
         3b:e0:dd:ca:b0:24:aa:07:28:bd:c8:46:03:b5:1b:e8:d4:ff:
         e3:37:b9:dc:e2:ca:81:35:95:69:8f:a3:65:4f:ef:d2:97:28:
         72:81:b0:f2:9c:a1:48:f3:46:96:23:97:8a:11:d5:b6:92:e4:
         e3:28:29:8a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NzJENjExMC8GA1UEBRMoMjlFQTlEODFBMkFGNUY4Mjg1QUMwNzFCMUU2RTc5QTMw
OUM5RjQzODAeFw0yNjA5MjMwNzQzNTRaFw0yNjA5MzAwNzQzNTRaMBgxFjAUBgNV
BAMTDTZhYjM4MzNhLWE4OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCuTSm9CFmrf7B+x6/VD5qqr1p+MpwlV64wSmvnU8kdM2v3a1eBjVGejRbUSGjh
DU+60/cRrBJH5gTVgCe5Og23XO+xrOIGOGuEvHgJZ7Kr4FsV1Zjm/H1Vr4SpTvKt
c7E8/KM//egzXqr3qiDVpGm1EgDL1DZVzQumwMo/QkflalC3OT+GKlNpAaY+2/TG
auP92OGM6TO9j6V4n43nHSbRNHoMwy7g3BytNAs7svhYm5nj8sHKTFlhrKiZUPNv
zGg4noSrZeV0UYa1ZqN1bQwaLDAqRYltK8G1Iu5NTtwDbCgVDe0m/nTRR+GESK96
VjHp21d9bReLltmNLhh+nZa3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8Yiqbfor
BF/E+WNzbfU9PaKEEBowHwYDVR0jBBgwFoAUKeqdgaKvX4KFrAcbHm55ownJ9Dgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MkQ2Lzk3NDhDMDIyMTcx
RjExRjFBM0E4RjJGQjA5M0Q4QzY3L0tlcWRnYUt2WDRLRnJBY2JIbTU1b3duSjlE
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvS2VxZGdhS3ZYNEtGckFjYkhtNTVvd25KOURnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3
MkQ2Lzk3NDhDMDIyMTcxRjExRjFBM0E4RjJGQjA5M0Q4QzY3L0tlcWRnYUt2WDRL
RnJBY2JIbTU1b3duSjlEZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA+oVOnesp8AlNGG1spFiNHf2M+mh6Rb4VMiCpxcI5/x8XiK4ngwy5J2vjRzUXw
bBwgdJrWMZsCfMnGqqAjVyElzRTd/201lbl54BdkU6p7KgrYV9s3SxP57cfIUKNo
akHUNmArlrsxSeMIxz/W2Qkhk4Hrajmtuq3hI2MvuGE1FdxH22fO0a1coz44mYwJ
4jNlDgR7OqKvqIGBsnZoLIfhSUjLfADo5dMyjxwlwahT1mSN18yAGAuEjCkUtmEB
0HQHjDts5xw74N3KsCSqByi9yEYDtRvo1P/jN7nc4sqBNZVpj6NlT+/SlyhygbDy
nKFI80aWI5eKEdW2kuTjKCmK
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:51:20 2026 by rpki-client