Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
File:                     _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json)
Hash identifier:          yFHPuy9Qag3hufGIcEP5XkuiWvRfQU6EX5TFPBDnLyg=
Subject key identifier:   3A:98:E0:51:03:20:25:98:BD:F4:EF:8A:E7:2E:13:BE:37:44:09:FA
Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
Certificate issuer:       /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
Manifest number:          DE
Signing time:             Fri 25 Sep 2026 06:41:30 +0000
Manifest this update:     Fri 25 Sep 2026 06:41:29 +0000
Manifest next update:     Fri 02 Oct 2026 06:41:29 +0000
Files and hashes:         1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: EbbF1Aftc8rZO6Vv0swoVUdL/DJbWY7bhhvSvI9vXQU=)
                          2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: 35lOaTv4zBGYaOAS37dvampCpt9ct0765AjmpO5yqTQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl
                          rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
        Validity
            Not Before: Sep 25 06:41:29 2026 GMT
            Not After : Oct  2 06:41:29 2026 GMT
        Subject: CN=6ab6179a-db5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:07:b8:6a:23:9a:db:c0:84:a2:42:ed:7d:
                    10:8d:15:39:73:45:f3:4d:98:60:38:59:28:0f:f8:
                    e7:42:f4:8c:52:70:82:1b:78:e0:31:7a:ee:40:70:
                    d8:75:38:20:82:19:e3:e5:67:bf:db:e9:ae:b2:4a:
                    21:04:10:95:d6:fd:b2:af:d3:88:ba:4e:85:ef:e2:
                    4e:43:d4:f5:03:b7:6f:91:9c:c1:15:6f:99:39:05:
                    20:ab:5b:aa:e7:8d:d5:17:72:0a:20:84:98:7d:c0:
                    0e:5c:a6:c0:17:a4:8f:27:c4:3b:2e:58:ec:2c:dc:
                    9b:30:1c:db:9e:ca:9f:48:f5:68:ea:20:09:18:ed:
                    a6:18:ec:d7:97:ee:1c:38:58:01:0a:e2:87:63:98:
                    8b:7c:32:33:a9:41:19:00:6b:8e:b9:34:7c:a5:69:
                    76:0d:f0:6b:c5:f9:af:58:2b:b1:b9:9a:0e:06:35:
                    df:40:7f:02:3e:71:4f:23:1f:20:f4:60:de:30:8f:
                    2c:5b:2e:56:28:2d:61:de:b9:93:e1:fd:b4:21:3c:
                    90:3d:ef:c4:e1:8f:86:dc:2b:51:e5:5f:16:33:44:
                    5a:0a:89:86:c9:17:2f:bf:22:35:48:9b:e1:8c:6c:
                    ab:d3:3a:b0:6f:f0:29:1c:b7:69:3e:23:0c:90:47:
                    98:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:98:E0:51:03:20:25:98:BD:F4:EF:8A:E7:2E:13:BE:37:44:09:FA
            X509v3 Authority Key Identifier:
                keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ae:3c:73:6b:f6:e8:d1:69:f3:80:04:35:db:af:4b:80:5c:
         d0:92:10:fa:58:43:05:ff:3c:c8:c4:b2:03:b9:0d:39:1d:42:
         72:38:4b:8c:a0:d7:ac:8d:3f:4a:5f:c8:f9:9b:72:d5:e9:a6:
         8a:ee:10:8c:80:75:4f:60:92:18:17:e4:4a:e5:15:9e:63:bc:
         80:50:00:52:ad:71:38:31:58:74:0d:a4:3a:5c:9f:a1:19:f1:
         fd:7e:b8:c1:3d:1e:3f:c7:c8:82:6d:cd:ef:0e:44:a6:1e:56:
         01:3f:61:c2:68:c1:e5:22:4d:bf:21:41:8d:df:19:91:c7:f9:
         2b:41:2a:1d:a3:bd:49:97:a5:a1:0b:38:1f:c8:b9:e1:a0:0d:
         9e:6c:d3:c1:12:b4:34:ad:be:5e:3a:cf:d7:22:7f:7a:62:74:
         bc:ae:2f:6d:c7:4e:2e:21:61:66:09:91:49:8d:f5:1a:9d:d1:
         fe:8a:4f:04:eb:0d:b7:e0:7d:65:6e:dc:65:5d:5a:9f:02:73:
         2e:71:74:93:9e:60:bb:b2:11:ac:a8:87:ec:69:b0:3f:78:b9:
         f2:c9:aa:28:e7:fd:47:dd:97:ea:44:ac:79:46:9d:08:df:cd:
         3e:db:93:a3:a5:fc:30:09:15:46:57:36:a0:8e:c3:b5:b1:4e:
         21:23:98:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:56:52 2026 by rpki-client