Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
File:                     kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json)
Hash identifier:          q8/GKmN4RHcZ8gwpAPxc3C07IKEHH4pu6cg9YStbfDk=
Subject key identifier:   F1:5B:BE:B3:B7:1D:E3:20:D3:48:95:47:B5:5A:19:35:D9:2C:F5:89
Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
Certificate issuer:       /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Certificate serial:       0535
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
Manifest number:          052E
Signing time:             Thu 24 Sep 2026 23:25:11 +0000
Manifest this update:     Thu 24 Sep 2026 23:25:11 +0000
Manifest next update:     Thu 01 Oct 2026 23:25:11 +0000
Files and hashes:         1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: zW7Vr6ZP+ne7PgVa24JrC05mnC5RrYjbtwEmgKJ3msA=)
                          2: 02D13C94D4B211F093413921C4F9AE02.roa (hash: 5S6cmEeP7M2EZTlTeoJaoR5wTUKBQoK3xjSaXGSNves=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1333 (0x535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
        Validity
            Not Before: Sep 24 23:25:11 2026 GMT
            Not After : Oct  1 23:25:11 2026 GMT
        Subject: CN=6ab5b157-fc2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:09:f3:2e:4a:25:db:84:a4:65:e6:35:80:
                    6a:0b:bd:54:25:90:3b:a2:49:a1:63:2c:50:93:ca:
                    1a:ad:a2:19:6d:f3:83:3f:d0:09:56:b9:fc:3c:05:
                    f2:79:ae:f3:b5:df:31:fe:7b:31:fb:a9:3c:5c:00:
                    73:89:32:01:b0:c2:15:3a:e3:3d:ec:db:5c:4c:cf:
                    ba:a7:60:4e:d1:47:82:79:f0:ee:a9:fb:ea:ba:a0:
                    b9:f1:15:2c:4c:19:3c:68:b7:08:00:7b:6e:2c:d1:
                    52:26:39:da:bb:24:34:78:09:c8:d7:58:9e:c1:ee:
                    0c:2d:aa:9b:4a:6b:1c:18:42:0e:38:77:63:de:62:
                    ab:1a:b7:dc:14:16:a8:9a:5b:4a:8c:a1:75:33:0d:
                    a3:33:21:37:73:f0:4e:f2:24:2c:1d:7c:47:ca:59:
                    e3:75:69:b8:89:94:c2:71:51:8f:e7:f4:5b:43:6e:
                    38:0c:ef:b6:27:bf:dc:3b:e4:bd:aa:79:84:a0:73:
                    dd:82:87:89:4e:e3:dd:64:5e:12:39:15:b8:2c:23:
                    00:12:dc:93:b8:db:27:bf:57:75:e0:a3:e0:e6:ec:
                    4b:b0:69:6f:e9:20:10:ae:79:98:4c:87:fa:d4:98:
                    45:37:6f:6f:5b:de:29:93:7a:e0:5a:d3:9c:ff:c7:
                    a1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5B:BE:B3:B7:1D:E3:20:D3:48:95:47:B5:5A:19:35:D9:2C:F5:89
            X509v3 Authority Key Identifier:
                keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:22:36:a8:f2:c4:e4:b8:3c:ca:b5:83:11:19:61:aa:b3:38:
         c0:38:81:91:f7:71:cb:1c:a4:a6:87:70:b9:1d:b9:d7:56:5e:
         cd:24:2c:7f:1f:7d:a8:3a:44:23:17:7d:2b:7e:55:22:9e:d1:
         5b:57:f7:58:b0:a0:7b:e0:79:49:b5:6e:3f:62:80:d4:8f:d9:
         36:d6:f0:e0:6d:a6:59:0a:6e:98:91:56:5e:77:96:69:06:fb:
         fd:58:f1:b1:81:02:61:fa:02:d5:45:db:0a:54:9b:8e:da:2c:
         94:4a:57:5d:30:6b:59:9d:68:be:e6:ac:9c:cf:68:16:10:81:
         ab:d0:2e:2f:e6:60:c5:c9:47:56:b9:ac:96:09:72:23:b0:59:
         86:65:f2:53:13:c4:0f:12:3d:5a:59:86:33:ed:32:a6:fc:d7:
         7c:14:26:48:f8:17:a3:7b:41:1f:e2:ab:ed:d5:e4:ef:0e:9d:
         b9:ff:19:a4:23:08:cf:f6:aa:cc:8b:92:1a:96:31:e4:a7:fa:
         3f:30:7b:0c:ea:53:85:30:6a:6e:c0:e2:22:61:5e:b7:7b:d6:
         43:5b:44:83:65:9b:7c:7b:92:67:91:57:ae:a4:69:7f:01:bc:
         bb:22:5b:69:9e:fa:01:04:8c:8f:a1:8f:21:bb:b7:e3:d8:f8:
         21:ef:9f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:51:22 2026 by rpki-client