Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
File:                     kcPJZndvAR_FNQIdhfWue_utpX4.mft (raw, json)
Hash identifier:          6UsHftonj+WYMD7EtrC6CFH8drrRanxuuIGlZKfUOuE=
Subject key identifier:   40:83:CB:CC:A7:4D:55:D5:D8:05:AA:B8:A3:56:65:20:44:98:42:15
Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
Certificate issuer:       /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Certificate serial:       0C9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
Manifest number:          0C63
Signing time:             Tue 22 Sep 2026 18:36:28 +0000
Manifest this update:     Tue 22 Sep 2026 18:36:28 +0000
Manifest next update:     Tue 29 Sep 2026 18:36:28 +0000
Files and hashes:         1: kcPJZndvAR_FNQIdhfWue_utpX4.crl (hash: gDOIO+SqvkJADP5yQX1wDAF9mYiVJ5KGohYpuK1+hhs=)
                          2: ACE4FD2C6D1711F085288D45C4F9AE02.roa (hash: GS1ZWCrOmI/wzMrtSy23rOps4nyG5A3UiWlzO5POe50=)
                          3: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (hash: j5PopsmOwZFXKKisotFRY1R3qhxNhXf+mgbfOulCpEE=)
                          4: AD4CF94A6D1711F085288D45C4F9AE02.roa (hash: nim0r8cX0AWo+u+y8biXKnG294pD1aj3IrEpuP3v1ew=)
                          5: 41B2F448ECE611EA882BEA79C4F9AE02.roa (hash: nI/6MDunIRDvmHBfJBx95Y0vV2wSohzwNZEZUy5WKGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
                          rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3229 (0xc9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
        Validity
            Not Before: Sep 22 18:36:28 2026 GMT
            Not After : Sep 29 18:36:28 2026 GMT
        Subject: CN=6ab2caac-8327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:cf:79:c0:e9:7d:d7:f1:61:cb:10:01:b8:
                    ee:8a:ba:39:76:90:96:4d:ea:5d:be:8e:94:1a:fd:
                    5e:2f:f0:d6:61:1d:47:e3:6d:ce:2c:4b:fd:12:50:
                    ac:5d:0e:1f:eb:a8:78:a6:a2:55:d2:46:9c:fd:a9:
                    74:4d:c7:bd:87:dc:9a:20:31:e1:c0:c4:bd:e3:f1:
                    50:f2:10:f5:06:80:e7:6b:e9:3f:44:0a:24:6e:66:
                    62:d3:35:9a:f2:37:c6:60:8d:77:42:89:be:73:58:
                    45:de:97:84:c7:f1:d5:e1:fd:c5:e6:07:de:54:8f:
                    61:b9:1a:a2:83:52:e0:5b:d1:69:d0:83:fb:60:9f:
                    33:31:0c:a6:30:c5:30:98:4d:eb:22:c6:b1:df:3b:
                    ee:ef:12:af:7b:a9:f3:c7:cf:c3:d8:cb:73:7c:8c:
                    df:96:93:96:f2:51:e8:34:21:7f:b6:dd:8d:c0:2d:
                    71:45:bd:7e:91:b0:48:7a:7f:db:04:cb:b2:e2:b2:
                    e5:3d:8d:fd:76:75:90:d2:dd:57:54:87:8f:50:27:
                    72:3b:22:bd:ae:15:f0:e1:56:4a:cc:0d:65:12:e8:
                    ee:d9:df:ad:c3:2d:4c:4b:48:5f:dc:f4:5b:e3:39:
                    fd:5f:74:f2:64:29:de:e6:82:48:ea:d1:55:92:1c:
                    ef:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:83:CB:CC:A7:4D:55:D5:D8:05:AA:B8:A3:56:65:20:44:98:42:15
            X509v3 Authority Key Identifier:
                keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:1e:88:02:b1:31:26:bf:8a:ca:f0:37:0b:03:29:35:05:b4:
         6e:6e:1f:e8:9e:17:76:65:ac:55:f3:93:c9:04:55:6e:d1:2a:
         f3:18:1a:4d:fd:1a:5b:03:59:76:de:03:91:d9:f4:6a:a9:06:
         21:9f:54:18:8c:70:54:be:37:6a:0a:81:fb:80:ce:95:79:29:
         f7:18:85:21:c5:ed:2e:72:c2:95:e2:1c:45:3c:b2:32:89:d7:
         90:32:ec:c8:25:84:a0:5f:32:91:68:83:61:4b:b7:17:b3:36:
         80:c1:44:9b:e9:48:e2:51:fa:ec:50:a3:22:a7:9b:20:b1:aa:
         86:fb:0f:60:c8:de:e4:72:f6:f8:c0:b8:41:1f:fb:e3:e4:3f:
         10:dc:14:d2:c2:81:07:56:9c:9a:37:e0:a9:50:dc:95:e3:f7:
         99:ec:11:4b:aa:7d:fa:4c:35:a1:24:7c:02:7f:3f:14:7d:52:
         d3:5d:95:fe:a5:fd:f8:ab:f2:2e:ec:2a:61:dc:5a:3f:1d:f8:
         21:b6:1a:a5:bf:14:eb:ed:8f:3b:f4:73:44:33:01:ff:5a:12:
         32:23:41:4a:20:42:9b:7b:7c:f7:3c:38:cf:1a:85:68:c4:79:
         7d:21:68:38:6d:c8:cf:b4:de:95:9a:07:e3:c2:13:cc:2b:af:
         f5:55:bc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:27:15 2026 by rpki-client