Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft
File:                     kwduLLXgmVQqshD-tIYBkMVFxDY.mft (raw, json)
Hash identifier:          AKI/GiPT2pxE2HFvaJXu1HxoENBI27W039K5/PO54q0=
Subject key identifier:   A2:41:B0:64:CF:F3:26:D0:94:49:F2:6D:02:F7:63:DD:6F:C5:55:EB
Authority key identifier: 93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36
Certificate issuer:       /CN=A91E9CCC/serialNumber=93076E2CB5E099542AB210FEB4860190C545C436
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft
Manifest number:          010C
Signing time:             Sun 11 Oct 2026 06:39:57 +0000
Manifest this update:     Sun 11 Oct 2026 06:39:57 +0000
Manifest next update:     Sun 18 Oct 2026 06:39:57 +0000
Files and hashes:         1: kwduLLXgmVQqshD-tIYBkMVFxDY.crl (hash: pg+/llek/An8GC6AD9OMt0ThscdOYlu+oNKicQ+/zrc=)
                          2: 5A8BA4982FDE11F0A4AB5D57C4F9AE02.roa (hash: 3mKxAZPd5sX5zROwnhKzMYcsEik7T23SK/nNnKBKWxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl
                          rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 06:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9CCC, serialNumber=93076E2CB5E099542AB210FEB4860190C545C436
        Validity
            Not Before: Oct 11 06:39:57 2026 GMT
            Not After : Oct 18 06:39:57 2026 GMT
        Subject: CN=6acb2f3d-c692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1d:a5:02:e1:40:61:ab:90:b5:95:03:13:c1:
                    10:a3:7a:aa:ed:1b:09:c1:7a:e2:ce:59:ae:cb:ce:
                    be:e8:dc:1c:f4:25:83:8b:2a:ff:ef:dc:6d:f7:ff:
                    7d:f4:4c:86:03:eb:e7:7c:a7:cb:49:d6:ed:02:21:
                    62:11:18:ec:77:76:2e:4d:75:17:96:06:5c:5d:3b:
                    08:14:5b:74:b7:2a:1a:a9:71:f4:cb:e9:f8:e1:86:
                    0d:bd:66:33:d4:0c:ae:fb:b4:ac:95:07:3d:ca:8e:
                    58:12:17:db:ef:6d:d9:cd:42:39:f3:1f:b3:20:1c:
                    f4:ef:06:5c:c9:50:41:56:7c:04:ee:95:64:68:e1:
                    70:8d:eb:e2:6c:57:5e:cc:4b:53:d7:6e:21:ec:32:
                    54:7c:10:3c:e1:fe:94:0a:c1:0c:51:5e:21:50:74:
                    1f:6a:51:03:ba:43:92:5c:52:76:65:58:58:85:f0:
                    5d:e6:45:46:bb:a0:21:6a:9b:a8:10:bd:61:02:60:
                    ee:6f:0a:90:1d:a1:12:f5:fc:18:f6:28:96:c2:fe:
                    23:cb:6a:7a:ca:85:27:b3:d4:55:2f:ce:2e:6d:3a:
                    95:0d:09:cc:05:22:77:e6:12:69:5a:22:57:ef:b7:
                    b2:f2:76:90:e8:e6:e7:e0:23:8f:01:1a:9d:69:ef:
                    c6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:41:B0:64:CF:F3:26:D0:94:49:F2:6D:02:F7:63:DD:6F:C5:55:EB
            X509v3 Authority Key Identifier:
                keyid:93:07:6E:2C:B5:E0:99:54:2A:B2:10:FE:B4:86:01:90:C5:45:C4:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwduLLXgmVQqshD-tIYBkMVFxDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CCC/758C80A22FD711F0862A6385C4F9AE02/kwduLLXgmVQqshD-tIYBkMVFxDY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:25:67:e5:ea:b0:3d:a5:e1:2e:3b:1a:b6:20:22:5c:eb:8e:
         d8:35:a9:b0:aa:70:f1:f5:02:b0:92:ba:c8:16:90:67:d2:07:
         9d:7e:53:71:bc:79:76:81:83:95:66:60:c2:74:7d:3b:85:a9:
         50:19:27:88:99:1a:97:0c:c7:32:19:eb:cf:60:61:15:79:e3:
         e9:56:1f:22:ed:85:9a:ab:a9:6e:85:de:14:71:44:52:63:ef:
         87:8b:b5:82:19:92:dd:ad:d4:ae:fa:17:e9:17:cf:23:20:67:
         84:b4:5b:73:48:9b:3f:5c:79:42:c7:be:35:d1:e1:15:94:90:
         f5:81:0c:38:68:38:4c:b7:83:9a:01:32:68:5e:5f:16:fd:35:
         65:d4:42:91:12:25:4f:ed:44:bc:52:77:d3:c6:93:c7:7a:ca:
         f7:af:f7:d1:42:78:e9:b4:5f:4b:37:e4:dc:e0:bb:4e:dd:c2:
         f4:5c:3d:6a:92:19:26:a7:c3:28:ed:75:26:29:64:66:07:90:
         ac:37:c0:c2:b5:fa:f6:04:e1:1c:93:4f:d7:36:c3:e7:f3:1c:
         aa:e4:f4:6a:8d:e4:9d:c9:2a:0b:1c:ef:71:20:3f:05:95:d5:
         cc:75:5b:15:5c:91:fc:3d:4c:8b:52:38:99:ae:b7:ee:c0:e7:
         5a:fe:59:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlDQ0MxMTAvBgNVBAUTKDkzMDc2RTJDQjVFMDk5NTQyQUIyMTBGRUI0ODYwMTkw
QzU0NUM0MzYwHhcNMjYxMDExMDYzOTU3WhcNMjYxMDE4MDYzOTU3WjAYMRYwFAYD
VQQDEw02YWNiMmYzZC1jNjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2x2lAuFAYauQtZUDE8EQo3qq7RsJwXrizlmuy86+6Nwc9CWDiyr/79xt9/99
9EyGA+vnfKfLSdbtAiFiERjsd3YuTXUXlgZcXTsIFFt0tyoaqXH0y+n44YYNvWYz
1Ayu+7SslQc9yo5YEhfb723ZzUI58x+zIBz07wZcyVBBVnwE7pVkaOFwjevibFde
zEtT124h7DJUfBA84f6UCsEMUV4hUHQfalEDukOSXFJ2ZVhYhfBd5kVGu6Ahapuo
EL1hAmDubwqQHaES9fwY9iiWwv4jy2p6yoUns9RVL84ubTqVDQnMBSJ35hJpWiJX
77ey8naQ6Obn4COPARqdae/GiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKJBsGTP
8ybQlEnybQL3Y91vxVXrMB8GA1UdIwQYMBaAFJMHbiy14JlUKrIQ/rSGAZDFRcQ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNDQy83NThDODBBMjJG
RDcxMUYwODYyQTYzODVDNEY5QUUwMi9rd2R1TExYZ21WUXFzaEQtdElZQmtNVkZ4
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t3ZHVMTFhnbVZRcXNoRC10SVlCa01WRnhEWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUNDQy83NThDODBBMjJGRDcxMUYwODYyQTYzODVDNEY5QUUwMi9rd2R1TExYZ21W
UXFzaEQtdElZQmtNVkZ4RFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUCVn5eqwPaXhLjsatiAiXOuO2DWpsKpw8fUCsJK6yBaQZ9IHnX5Tcbx5doGD
lWZgwnR9O4WpUBkniJkalwzHMhnrz2BhFXnj6VYfIu2FmqupboXeFHFEUmPvh4u1
ghmS3a3UrvoX6RfPIyBnhLRbc0ibP1x5Qse+NdHhFZSQ9YEMOGg4TLeDmgEyaF5f
Fv01ZdRCkRIlT+1EvFJ308aTx3rK96/30UJ46bRfSzfk3OC7Tt3C9Fw9apIZJqfD
KO11JilkZgeQrDfAwrX69gThHJNP1zbD5/McquT0ao3knckqCxzvcSA/BZXVzHVb
FVyR/D1Mi1I4ma637sDnWv5Z4w==
-----END CERTIFICATE-----
Generated at Tue Oct 13 09:36:09 2026 by rpki-client