Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
File:                     KsCrS187tbDveb0hpknK_-f5wgo.mft (raw, json)
Hash identifier:          rCp30bZmr47jeq/jjVo4JyksJydHvRby8FUKBz5k1ZU=
Subject key identifier:   8C:4D:E1:29:76:61:79:E9:16:C3:10:91:27:95:C6:86:C5:64:EF:A5
Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
Certificate issuer:       /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Certificate serial:       0805
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
Manifest number:          1324
Signing time:             Thu 24 Sep 2026 19:12:11 +0000
Manifest this update:     Thu 24 Sep 2026 19:12:10 +0000
Manifest next update:     Thu 01 Oct 2026 19:12:10 +0000
Files and hashes:         1: KsCrS187tbDveb0hpknK_-f5wgo.crl (hash: vvpnUQpqCa9XeqdlQcORNvcAVc5vI6us04fmIqfDxaw=)
                          2: 37868F90574711EBB6BA4183C4F9AE02.roa (hash: OYV9eK2HNZwk+SVet5sg0PfolaNTvnaGC/XgX9+ge9A=)
                          3: 6243075E653411EB98060C17C4F9AE02.roa (hash: v0uC7Tgqg5Ka5gyjZsM8cExfBYnQ3ib9cJkCqTADvOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl
                          rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053 (0x805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B927E, serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
        Validity
            Not Before: Sep 24 19:12:10 2026 GMT
            Not After : Oct  1 19:12:10 2026 GMT
        Subject: CN=6ab5760b-a62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:18:52:8a:2a:35:a5:a2:e2:01:60:e3:99:0d:
                    17:af:83:07:cb:29:32:00:72:8c:c1:cb:34:0c:f6:
                    86:2a:ee:3e:27:49:7b:77:8f:0a:f1:cf:6c:69:35:
                    11:d8:91:d9:a1:fd:7b:ab:11:95:5d:80:04:c2:31:
                    54:9d:56:d7:e0:39:af:a6:6f:19:a8:4c:19:9d:02:
                    ed:36:90:05:70:db:63:17:30:86:51:e8:31:48:03:
                    2a:12:98:39:c9:3e:45:9d:af:96:97:7e:52:c4:2d:
                    42:54:5f:34:71:02:12:91:03:0c:ef:cb:20:15:0f:
                    44:92:32:5f:a3:c4:b9:97:87:83:66:79:7d:9d:8b:
                    ca:c1:9c:77:ce:c0:2a:c0:34:b4:a1:39:bc:ca:a9:
                    f9:ff:aa:66:8f:b5:75:2b:41:fa:9b:57:aa:fb:1d:
                    6c:c2:3f:30:63:be:cd:96:dc:44:96:7d:6e:e8:de:
                    32:05:ce:f1:4b:f2:9a:f8:89:66:b0:73:61:68:cc:
                    12:a2:56:69:f5:5b:2a:6a:06:79:49:ac:be:87:fa:
                    2c:ac:88:a1:50:2d:17:ea:3c:b3:df:95:c7:af:43:
                    a0:bb:b9:af:32:0f:ba:eb:8b:41:7d:d0:bf:ad:17:
                    13:13:c6:1b:a9:8b:67:a8:1e:15:72:c9:6d:52:ac:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4D:E1:29:76:61:79:E9:16:C3:10:91:27:95:C6:86:C5:64:EF:A5
            X509v3 Authority Key Identifier:
                keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f9:1e:ec:9b:90:c5:23:b2:85:46:2c:c5:4f:aa:24:d7:80:
         13:1d:9c:18:fc:71:2e:9a:d0:85:c6:ff:1a:13:b5:2c:68:f6:
         ac:0e:47:e1:c5:f2:52:5d:71:0e:8d:5d:ef:a3:27:15:b0:b6:
         ba:93:08:7c:11:a6:ed:2d:ab:35:94:33:cd:07:4c:00:d0:7d:
         f7:ee:e0:45:8e:5d:ac:42:39:bb:c0:0d:65:7b:8a:2c:61:0f:
         ba:8d:92:04:04:06:3a:eb:86:3e:e6:6d:8d:a6:4c:11:cc:f4:
         bb:5c:3a:92:39:58:85:b1:83:63:53:1d:9c:8e:4f:ab:d7:3a:
         d0:49:44:39:50:c5:e5:46:25:ed:d8:8e:37:b8:bc:79:5c:47:
         fc:fb:71:e6:2e:6f:60:45:8b:e6:85:e8:04:89:74:30:cf:7f:
         6f:52:64:82:74:92:67:6d:25:bb:44:7a:7e:22:a0:39:79:d0:
         54:46:c9:2f:99:ad:26:39:68:7e:ba:0b:46:9f:de:7f:6e:c9:
         b2:f9:43:34:74:4d:48:97:e8:1b:54:5f:0c:b7:3f:21:ae:87:
         45:4e:41:84:97:29:6e:6b:dc:5f:8f:29:45:8f:86:09:b6:a3:
         c4:d9:10:4e:cd:93:05:40:4e:b9:38:cc:d7:a9:a2:bb:36:be:
         b9:54:c2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:24:30 2026 by rpki-client