Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
File:                     Klm5bDClX71h0iMDc864nR2wGos.mft (raw, json)
Hash identifier:          M7NGV86rChH3Ut9e7AV8MujO916E8P/oBnvhLU6cxdk=
Subject key identifier:   1F:95:94:9D:80:0F:DB:09:CF:E3:95:9F:39:60:43:20:51:AF:2A:AB
Authority key identifier: 2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
Certificate issuer:       /CN=A91F523F/serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
Manifest number:          0154
Signing time:             Wed 23 Sep 2026 05:01:29 +0000
Manifest this update:     Wed 23 Sep 2026 05:01:29 +0000
Manifest next update:     Wed 30 Sep 2026 05:01:29 +0000
Files and hashes:         1: Klm5bDClX71h0iMDc864nR2wGos.crl (hash: Mi/2fgEYxP14gdh8Xx9oNoxjDetarLf+1zZbYcHf8cY=)
                          2: 607B5F6AB05411EF84C8DC74C4F9AE02.roa (hash: FK/DlPDSG9WEqzNFstF7HVEnaAW4fzuMAjNc2Kwb/bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
                          rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F523F, serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
        Validity
            Not Before: Sep 23 05:01:29 2026 GMT
            Not After : Sep 30 05:01:29 2026 GMT
        Subject: CN=6ab35d29-54bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0f:b9:1f:88:fc:06:71:c7:8f:b5:76:ed:59:
                    ec:66:64:55:ed:2e:dc:88:5b:bf:76:dd:1b:b7:db:
                    7f:c4:dd:1f:cf:fa:c9:df:bb:c4:34:a0:ee:88:2e:
                    25:d0:98:52:27:ca:89:1c:8f:9a:57:5f:9c:a3:47:
                    4a:4a:82:cc:2d:70:f5:3a:6b:7a:31:c0:db:dc:69:
                    4a:ba:f6:54:a8:ac:80:68:6b:b1:77:e7:72:81:3d:
                    52:b0:f2:00:17:79:0e:ac:93:1e:91:df:ed:b8:e6:
                    04:cc:9f:a6:84:c4:50:09:7b:60:e8:70:fa:3a:ce:
                    9f:05:ca:23:59:58:8b:4e:48:87:35:dd:bf:dd:33:
                    f2:cb:32:29:6c:60:08:69:d7:65:8c:c4:8a:cd:49:
                    eb:ea:80:bc:4d:65:47:a4:d5:bc:af:cd:d7:67:b8:
                    b4:0b:d0:ba:f3:be:dd:13:a5:4c:ba:9b:8f:cb:c1:
                    6b:af:30:5c:a0:cf:d8:50:5e:8e:8c:6e:7d:7c:73:
                    bd:b7:d6:e3:e7:a8:ce:4c:3f:75:a8:ab:ac:37:30:
                    39:f4:32:93:90:db:2f:19:b9:05:b4:af:a5:fe:64:
                    b5:d0:8f:a5:9a:8d:72:40:2b:b4:44:25:83:3c:c8:
                    25:8b:00:ed:5b:b2:18:d8:a1:71:03:2a:df:3c:89:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:95:94:9D:80:0F:DB:09:CF:E3:95:9F:39:60:43:20:51:AF:2A:AB
            X509v3 Authority Key Identifier:
                keyid:2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1a:53:b7:3f:40:a7:4f:9b:b1:12:f7:8b:6b:37:d2:4e:29:
         43:90:30:12:dc:12:14:06:8a:17:03:88:a7:0a:f8:fe:0b:ee:
         5d:bb:bd:45:cd:37:3e:3d:7c:97:f5:dc:9b:96:14:94:f7:45:
         85:91:70:83:ed:7e:a4:54:85:96:6b:59:cf:fb:ed:11:b3:97:
         f2:e6:d3:21:4d:13:d7:76:9e:43:b8:60:1e:e4:a3:e6:69:88:
         9a:8a:d5:3a:d3:ab:ae:28:23:f2:4e:44:f8:33:40:4d:18:b9:
         f7:64:7a:cc:d2:c9:5e:7c:da:e2:a0:df:96:b1:fb:6c:af:6e:
         35:62:e4:83:a5:2d:ca:f6:77:68:52:b5:a1:04:51:40:64:aa:
         32:d1:4c:df:e4:d4:ff:dd:c7:fa:80:a3:ab:27:43:86:c8:aa:
         58:f8:66:57:1d:6f:2d:0b:62:c2:bb:59:bd:c2:38:2b:fa:79:
         bf:d8:4e:cc:ad:dc:cf:f4:3b:ec:e3:69:f4:d8:ff:18:8b:1e:
         26:63:79:81:9f:7f:0e:fc:e8:bf:2e:4a:4e:82:58:79:36:7e:
         a8:1c:98:22:71:7a:ed:7c:aa:2b:c4:82:17:b3:9d:fa:d7:e1:
         96:47:1e:63:d2:62:a7:03:af:96:38:43:f3:71:f5:60:70:ff:
         98:77:d9:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUyM0YxMTAvBgNVBAUTKDJBNTlCOTZDMzBBNTVGQkQ2MUQyMjMwMzczQ0VCODlE
MURCMDFBOEIwHhcNMjYwOTIzMDUwMTI5WhcNMjYwOTMwMDUwMTI5WjAYMRYwFAYD
VQQDEw02YWIzNWQyOS01NGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6w+5H4j8BnHHj7V27VnsZmRV7S7ciFu/dt0bt9t/xN0fz/rJ37vENKDuiC4l
0JhSJ8qJHI+aV1+co0dKSoLMLXD1Omt6McDb3GlKuvZUqKyAaGuxd+dygT1SsPIA
F3kOrJMekd/tuOYEzJ+mhMRQCXtg6HD6Os6fBcojWViLTkiHNd2/3TPyyzIpbGAI
addljMSKzUnr6oC8TWVHpNW8r83XZ7i0C9C6877dE6VMupuPy8FrrzBcoM/YUF6O
jG59fHO9t9bj56jOTD91qKusNzA59DKTkNsvGbkFtK+l/mS10I+lmo1yQCu0RCWD
PMgliwDtW7IY2KFxAyrfPInqpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB+VlJ2A
D9sJz+OVnzlgQyBRryqrMB8GA1UdIwQYMBaAFCpZuWwwpV+9YdIjA3POuJ0dsBqL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIzRi80RUJBNkIzMkIw
NTMxMUVGOUMyQjhEM0ZDNEY5QUUwMi9LbG01YkRDbFg3MWgwaU1EYzg2NG5SMndH
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0tsbTViRENsWDcxaDBpTURjODY0blIyd0dvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTIzRi80RUJBNkIzMkIwNTMxMUVGOUMyQjhEM0ZDNEY5QUUwMi9LbG01YkRDbFg3
MWgwaU1EYzg2NG5SMndHb3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXhpTtz9Ap0+bsRL3i2s30k4pQ5AwEtwSFAaKFwOIpwr4/gvuXbu9Rc03Pj18
l/Xcm5YUlPdFhZFwg+1+pFSFlmtZz/vtEbOX8ubTIU0T13aeQ7hgHuSj5mmImorV
OtOrrigj8k5E+DNATRi592R6zNLJXnza4qDflrH7bK9uNWLkg6UtyvZ3aFK1oQRR
QGSqMtFM3+TU/93H+oCjqydDhsiqWPhmVx1vLQtiwrtZvcI4K/p5v9hOzK3cz/Q7
7ONp9Nj/GIseJmN5gZ9/Dvzovy5KToJYeTZ+qByYInF67XyqK8SCF7Od+tfhlkce
Y9JipwOvljhD83H1YHD/mHfZVA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:32:31 2026 by rpki-client