Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
File:                     0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft (raw, json)
Hash identifier:          YTAHwHhtMaLnuZ68kLEvWPguLG74sxTnQPqxWZds1Ww=
Subject key identifier:   6F:F7:34:0A:0D:D7:E0:4A:08:6C:C4:0A:08:C0:43:02:BF:20:A9:BA
Authority key identifier: D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51
Certificate issuer:       /CN=A91DA8C2/serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
Manifest number:          0121
Signing time:             Fri 25 Sep 2026 05:54:08 +0000
Manifest this update:     Fri 25 Sep 2026 05:54:08 +0000
Manifest next update:     Fri 02 Oct 2026 05:54:08 +0000
Files and hashes:         1: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl (hash: 5eyJyg/ilQQp3eyaa6P/p8PwrGPtpB7zQIMM1sUEFV0=)
                          2: 32EE2B68005411F08A6FEB4BC4F9AE02.roa (hash: G7QqbuS3t/iTX6LomgThshVcOQtAVpBN0imWLjN0zDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl
                          rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:54:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA8C2, serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51
        Validity
            Not Before: Sep 25 05:54:08 2026 GMT
            Not After : Oct  2 05:54:08 2026 GMT
        Subject: CN=6ab60c80-8634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:69:99:e0:58:fe:c3:c5:7a:7c:10:62:f9:e8:
                    9f:15:fb:03:96:fe:11:5c:0b:ff:f8:0b:36:07:a6:
                    30:c0:2f:fc:4e:6b:35:cf:9a:62:b7:8b:a1:0f:e6:
                    26:0f:69:c1:f9:10:f6:f0:38:0a:2f:9e:ac:f2:a9:
                    60:a8:f3:b8:b6:14:55:53:b7:f8:16:9d:14:eb:73:
                    b4:70:8e:59:d3:30:61:a1:71:d8:e1:b5:d2:bd:76:
                    ed:b7:a7:fc:54:9f:ea:04:fc:60:48:12:e4:cc:df:
                    e0:cf:22:7d:cf:79:ee:bc:b6:3d:a3:cb:89:d1:2e:
                    cf:f9:a0:7e:c2:97:aa:66:67:c1:a9:4f:cf:9b:c0:
                    a8:c9:cf:f3:af:c2:5e:e8:78:ae:ee:6e:25:6f:af:
                    e8:09:54:0b:4d:82:ec:fb:94:79:e2:58:28:9f:16:
                    c6:09:38:33:e3:8a:01:a6:d8:c7:87:aa:a2:a0:58:
                    50:17:40:eb:a4:51:ff:5f:0f:ba:a2:80:3b:35:dc:
                    53:1e:9e:14:e6:b3:5f:2c:b1:be:26:d5:e3:7f:3e:
                    0c:df:2d:93:e8:1a:cc:9d:e2:ea:ba:fc:6a:59:a1:
                    31:0f:f8:4b:88:53:6d:e4:5b:14:57:85:4a:7c:cb:
                    c4:a4:64:8b:cf:c1:b9:52:f1:a0:05:28:2a:c9:d2:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F7:34:0A:0D:D7:E0:4A:08:6C:C4:0A:08:C0:43:02:BF:20:A9:BA
            X509v3 Authority Key Identifier:
                keyid:D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fb:9a:5f:e1:93:52:dd:de:22:ae:8e:d2:3b:3b:6b:f8:0f:
         9e:8c:76:dd:1d:fc:80:99:a4:01:7c:d1:24:88:1a:48:1f:e4:
         4a:8a:5b:92:7b:b0:9a:f3:fb:07:fb:37:c4:85:fd:96:35:eb:
         20:42:ee:3c:53:65:73:09:0a:92:b2:39:bb:ef:7f:00:31:f1:
         ff:8c:d6:2f:dc:eb:bb:34:fc:eb:1e:cc:f0:3b:b3:3e:b8:7d:
         d4:94:c7:88:6e:a9:3d:19:e0:38:9a:e7:98:cc:85:0d:d5:e9:
         49:ff:1e:cd:4a:7f:98:e6:08:c6:d2:10:07:8f:d6:59:a5:35:
         2b:c2:14:0d:01:68:53:8e:00:9d:14:1c:83:46:69:02:9e:a9:
         9f:aa:29:3c:f6:8d:9a:bc:90:1c:fe:25:9f:e7:e5:e7:10:87:
         08:d6:c1:ae:16:56:91:8d:48:b9:45:8b:e7:64:4e:a8:d5:1e:
         6b:07:88:53:7f:01:03:46:85:99:fa:89:f5:93:61:46:74:60:
         79:03:59:90:53:35:59:ea:3f:0c:bf:55:fa:e4:b0:aa:2c:e6:
         86:39:b2:5f:11:d0:32:cd:8a:15:0b:a8:78:92:1c:4d:e3:f3:
         9e:ac:08:4b:30:d8:d0:68:46:21:0a:96:c2:fa:11:c3:3f:6a:
         b8:e9:97:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:51:12 2026 by rpki-client