Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
File:                     k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft (raw, json)
Hash identifier:          PQT1xl0va64GxEk6FMzxV9jSmYazNGHBmxqLcZesqyo=
Subject key identifier:   39:79:FA:1B:D3:2B:75:CA:60:CF:6C:D9:CD:AA:6B:7E:3B:04:C7:60
Authority key identifier: 93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9
Certificate issuer:       /CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9
Certificate serial:       14C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
Manifest number:          14A6
Signing time:             Sat 26 Sep 2026 16:53:59 +0000
Manifest this update:     Sat 26 Sep 2026 16:53:58 +0000
Manifest next update:     Sat 03 Oct 2026 16:53:58 +0000
Files and hashes:         1: k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl (hash: xfBb84yHvKLw8u6uywD3NWZp2gkpaDpXtcysDAUW5Dk=)
                          2: A04E05E42CE911EC8F99F486C4F9AE02.roa (hash: eXdG4KSBtXeVILxvbF2EYbNiV8EJAIDXweLkMjftKrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl
                          rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 16:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5316 (0x14c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3D15, serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9
        Validity
            Not Before: Sep 26 16:53:58 2026 GMT
            Not After : Oct  3 16:53:58 2026 GMT
        Subject: CN=6ab7f8a7-add8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:9f:53:d6:f8:69:0e:77:33:35:7e:d1:86:
                    8e:5a:1e:77:f6:d3:d3:b6:99:24:93:13:35:38:cf:
                    6f:58:0d:1d:52:04:cc:ba:65:1a:36:03:9c:ba:df:
                    c2:60:f8:21:e5:9d:2d:0d:1c:d0:f6:3d:d9:11:0d:
                    6b:69:6d:3e:af:da:cb:dc:f4:b5:76:af:d4:08:52:
                    f7:e9:b2:60:23:eb:73:a2:c0:48:da:e1:f5:02:30:
                    14:41:d5:d4:b7:cf:88:f4:e4:d9:3c:bd:3a:6c:3c:
                    4a:64:d1:06:ae:ca:c9:d7:56:5c:ed:b6:6a:ec:be:
                    4d:76:c8:72:30:38:b7:6b:65:ff:ea:ef:6e:bf:49:
                    07:a3:2f:09:f5:67:d0:1a:c4:4a:9b:7b:1a:a5:d8:
                    70:35:34:43:56:a3:1a:22:91:57:46:ba:1d:45:ec:
                    a1:7f:79:dd:f0:7a:bd:93:fe:2c:f9:42:3b:13:91:
                    9c:64:08:42:ff:10:bd:d5:42:7d:a6:79:ff:7d:b9:
                    db:46:ea:3f:b7:c5:1c:1b:90:bc:34:7e:c1:70:0c:
                    bb:47:c9:f6:70:9e:a0:33:0f:e7:e1:4f:3f:ec:0c:
                    16:59:63:54:84:da:2a:87:60:a3:c1:c5:f0:17:71:
                    1d:af:39:44:64:26:9e:0e:ae:45:4a:a2:71:bd:86:
                    e1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:79:FA:1B:D3:2B:75:CA:60:CF:6C:D9:CD:AA:6B:7E:3B:04:C7:60
            X509v3 Authority Key Identifier:
                keyid:93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:20:63:69:09:95:3a:69:fa:f4:e5:25:08:48:fc:e8:28:16:
         27:a0:98:4a:b2:9e:bd:de:5e:65:00:9c:36:15:9e:50:65:7b:
         b7:79:8e:92:85:b2:04:5f:2e:0c:52:2a:02:b4:14:78:24:6b:
         0e:15:75:48:50:d7:09:19:c9:d4:55:29:79:ae:c8:6e:93:c4:
         ab:e9:e9:c4:39:6f:91:36:ad:d4:bf:f9:10:f6:7d:d0:0a:86:
         bc:c4:75:d2:59:15:a2:56:51:85:72:14:1d:34:3f:30:cb:bd:
         f3:b3:3d:bb:9f:37:3e:de:d7:27:08:75:35:d3:cf:e9:d6:89:
         ff:3d:3a:43:98:b0:86:17:15:b7:33:62:0e:79:8c:97:54:66:
         57:af:20:ed:92:1b:2a:48:8f:04:30:fc:41:1e:93:6c:58:a5:
         28:00:03:b4:44:fb:dc:a2:26:09:1b:40:30:4f:40:6f:62:74:
         77:09:d5:55:97:fd:e8:aa:47:38:4a:54:37:ba:1a:aa:d0:2b:
         34:27:ca:4e:7c:32:25:ca:39:c3:aa:27:49:29:af:7e:e3:6c:
         c7:7a:05:8f:61:c6:2c:64:89:fe:45:12:98:bf:1c:0a:7f:90:
         c4:d5:61:e6:ff:cc:fc:44:bc:3b:a3:93:80:31:42:d3:f1:0b:
         19:2c:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:35:36 2026 by rpki-client