Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
File:                     kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json)
Hash identifier:          2Ykab6y9pM/iPYMS5wolaRgkjm0t6RrKKpwHJqTU/Ys=
Subject key identifier:   A3:59:CE:F2:E9:FA:88:FC:44:32:70:D5:99:AF:CA:75:A7:B0:D5:CB
Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Certificate issuer:       /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Certificate serial:       049D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
Manifest number:          0495
Signing time:             Thu 24 Sep 2026 23:49:06 +0000
Manifest this update:     Thu 24 Sep 2026 23:49:05 +0000
Manifest next update:     Thu 01 Oct 2026 23:49:05 +0000
Files and hashes:         1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: n3+NPR4EHoJTBQUJIpKEbConU6dF/04k4DClx7huZ+g=)
                          2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: BDMTldlOhtRE8fdsa/Kig0BEI477q3hDk2bU8o4N/Fo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1181 (0x49d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
        Validity
            Not Before: Sep 24 23:49:05 2026 GMT
            Not After : Oct  1 23:49:05 2026 GMT
        Subject: CN=6ab5b6f2-3ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f7:01:b7:1f:2f:5a:43:5e:00:91:90:da:06:
                    bc:ef:c7:71:3a:b8:50:0a:bf:57:c2:3d:7a:66:19:
                    e7:ab:3f:e4:28:d4:15:04:2c:0a:9c:da:9a:36:7e:
                    bb:1f:6d:f9:c5:b7:9b:c7:1f:f2:0c:c5:2b:d9:4a:
                    26:5e:2e:99:65:a7:2d:84:bd:2a:08:f4:15:38:31:
                    4a:76:56:bd:84:aa:53:55:6d:79:a1:47:b3:fb:2a:
                    47:fa:a8:b9:ab:55:88:e8:e7:26:26:4b:ed:14:e1:
                    98:79:ed:af:4b:38:08:f2:77:01:8c:24:3a:a6:3c:
                    94:c6:bb:cc:56:2c:10:5c:ae:04:9b:50:07:bf:28:
                    f9:22:77:a3:5b:36:0f:42:a4:28:9d:cd:9f:53:8d:
                    d7:47:4e:e0:a4:d2:e6:3b:cb:f0:76:e6:49:97:25:
                    11:fe:9e:b7:d0:43:6b:b0:ba:b7:eb:46:32:0c:d3:
                    8e:bb:39:60:70:ca:19:bc:b6:b4:58:48:50:57:5a:
                    9e:c1:fa:7f:69:b4:be:54:53:e2:d1:cf:c3:4c:3d:
                    b8:d6:cc:6b:04:f9:0b:07:7c:22:c0:31:21:99:af:
                    d5:4b:6b:ac:56:31:06:28:41:91:a1:75:b2:d6:1d:
                    4f:1f:33:c0:e7:58:dc:e2:cc:9a:fa:d0:13:1d:39:
                    3e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:59:CE:F2:E9:FA:88:FC:44:32:70:D5:99:AF:CA:75:A7:B0:D5:CB
            X509v3 Authority Key Identifier:
                keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0c:3f:fb:54:e1:69:15:af:c7:84:c8:b8:84:8f:40:06:aa:
         a6:c8:33:f8:4b:67:f3:a9:8f:11:17:e4:6f:a8:92:78:d6:81:
         26:43:bb:06:8f:77:13:5b:09:52:1b:68:2f:07:a5:3e:bb:6e:
         9b:82:48:62:7d:fa:19:e2:a0:9e:f1:a6:2d:73:91:de:81:50:
         a3:54:2e:52:51:a2:6f:c2:85:55:3c:a2:d7:0a:e1:46:42:7b:
         55:98:0a:69:54:b3:c9:98:f0:60:7a:dc:99:1c:ec:56:73:c9:
         80:97:28:20:02:3d:ad:60:67:c8:38:95:45:82:32:46:1d:78:
         f9:2b:b9:90:36:1e:bd:b1:2b:1c:b8:1c:13:af:a6:e6:3f:77:
         77:3a:ad:73:a6:99:d0:47:8e:3c:ed:a5:ed:88:87:ab:d2:47:
         fa:1a:94:9b:45:c0:41:0b:9b:35:a7:b7:b9:17:e0:aa:b9:22:
         00:cb:e2:88:0b:20:5b:f5:a4:48:47:4a:cb:48:1a:96:50:aa:
         e1:8d:a3:93:78:9d:fe:09:2a:05:fd:f1:24:5e:33:a2:bb:ee:
         04:62:a2:75:6d:da:46:9f:3f:ed:9a:57:43:7f:c8:78:af:7b:
         50:fb:d7:84:64:d0:57:7e:6b:59:0b:1f:be:59:aa:a6:a1:f0:
         bd:b9:0f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:20:55 2026 by rpki-client