Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
File:                     kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft (raw, json)
Hash identifier:          8btsbpIhNfobKRNsh/h0uknbADdfqeyZtQgZkijKlkI=
Subject key identifier:   71:24:E4:69:4D:E7:EF:1E:39:59:52:73:BA:8B:AD:DC:E1:67:99:3C
Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA
Certificate issuer:       /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
Certificate serial:       08E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
Manifest number:          08D8
Signing time:             Mon 28 Sep 2026 20:33:25 +0000
Manifest this update:     Mon 28 Sep 2026 20:33:24 +0000
Manifest next update:     Mon 05 Oct 2026 20:33:24 +0000
Files and hashes:         1: kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl (hash: k2aYRTpwOpPQuyM9EBjPQc3YQqqxaasoJUtFninaFrI=)
                          2: 3CC77D02EE8811EA9225690DC4F9AE02.roa (hash: Zu7ovE1EUW36D/gzrtGv9a6ZOHHzmdXPGruHnQFEs4E=)
                          3: 457AD2DC859F11F1866C76AF58A30FBC.roa (hash: vV14M1DlmGoMEdIGjicSFzvlLxO/tuGgfyXG0UkDhf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl
                          rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 20:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2274 (0x8e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6503, serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
        Validity
            Not Before: Sep 28 20:33:24 2026 GMT
            Not After : Oct  5 20:33:24 2026 GMT
        Subject: CN=6abacf15-06c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:93:fa:f3:1f:01:48:5a:6f:46:30:a8:d6:c2:
                    ae:78:f3:b6:9b:e1:b1:f3:e3:14:62:f7:41:44:c2:
                    ff:0a:7f:35:5e:14:38:c2:97:94:f6:94:a0:f9:85:
                    44:97:8a:f3:b6:a1:4b:e8:e8:6c:e7:90:7e:43:ed:
                    75:6b:01:00:fb:2f:47:d0:86:3f:d0:fa:db:9a:33:
                    a6:46:d3:4a:19:ea:a8:98:6a:e4:a2:80:96:9e:cf:
                    07:1d:98:95:97:80:b6:a6:d6:d1:7a:fb:5b:0a:2a:
                    e9:22:00:5e:9b:26:49:9b:f5:be:91:14:3a:cc:2b:
                    c7:a2:d8:b0:f2:21:5f:08:b6:34:cd:29:16:80:e7:
                    9f:c9:46:6c:65:4a:f2:ba:14:0c:c0:f9:00:89:91:
                    cc:75:a2:80:7c:97:fd:bb:a8:86:df:8f:0e:92:8c:
                    89:52:2d:4c:29:31:d5:58:39:13:27:a2:87:c4:74:
                    91:c2:84:fa:a4:78:7f:d4:b6:dc:3e:ea:65:80:d5:
                    fc:ce:c0:e4:e1:5d:b4:b0:e4:c7:28:0f:29:7c:95:
                    58:89:c9:77:4b:40:e4:14:a8:a4:b0:5f:2d:cd:ae:
                    e2:84:89:73:f2:ac:7c:35:da:ea:32:8a:11:45:85:
                    4e:ea:5f:21:91:b3:65:32:46:1c:36:b9:67:c0:d4:
                    fe:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:24:E4:69:4D:E7:EF:1E:39:59:52:73:BA:8B:AD:DC:E1:67:99:3C
            X509v3 Authority Key Identifier:
                keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:91:5d:e6:21:f1:88:0b:23:15:4c:34:6d:fa:85:1e:e0:b1:
         c3:79:76:6f:01:7c:e2:4b:52:f7:87:20:c8:f9:34:cb:b3:0e:
         ee:6d:09:5b:b2:c8:1c:56:a2:86:dc:13:c3:16:8d:51:3a:15:
         dd:4f:bb:a6:a0:bd:51:2d:d3:5e:2f:df:31:d2:74:6b:5a:9e:
         29:4e:11:34:f3:4b:ee:51:d8:9b:b6:51:5d:fa:c7:4d:ed:b3:
         0d:af:e0:4d:0d:b0:9c:df:6f:f1:39:20:ee:62:52:1a:e7:a6:
         ee:77:2c:f9:6e:81:54:62:ac:9c:f5:29:b1:fe:39:6a:b6:45:
         d6:cb:91:7c:c2:4c:6c:2e:0c:6d:65:27:7d:3f:da:ad:95:8a:
         ab:8e:72:f9:f5:12:42:04:37:27:b7:82:0e:d2:9a:24:aa:de:
         e9:9f:34:32:58:5d:50:24:73:bd:1e:2f:0f:7b:3b:38:62:62:
         f6:52:b4:94:8c:b6:39:15:65:bb:2e:19:3d:79:ea:c1:a5:e2:
         90:65:31:f4:8d:8b:42:3f:ac:f4:c1:f0:72:91:ce:c1:3e:44:
         6e:74:ce:d2:cd:ce:b6:38:ab:98:a6:dd:2b:ee:d8:c0:c0:86:
         3d:56:8d:cb:54:88:f7:2a:e5:b3:98:b3:e3:b9:bb:2b:ec:27:
         01:ff:04:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:41:56 2026 by rpki-client