Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
File:                     kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json)
Hash identifier:          lNzJ40lT31wFPUViS5kHFyU+1AR8uWaP0JtIMmFQ1RQ=
Subject key identifier:   2D:C9:47:EC:CF:81:84:4B:9B:30:5E:16:8E:8F:05:EE:A9:FB:F9:B1
Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
Certificate issuer:       /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Certificate serial:       0124
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
Manifest number:          0124
Signing time:             Wed 07 Oct 2026 06:20:27 +0000
Manifest this update:     Wed 07 Oct 2026 06:20:26 +0000
Manifest next update:     Wed 14 Oct 2026 06:20:26 +0000
Files and hashes:         1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: /XGaYAfdkdcqXCMA00rtvAk3tIDLYvsLLNqRINAqxG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
        Validity
            Not Before: Oct  7 06:20:26 2026 GMT
            Not After : Oct 14 06:20:26 2026 GMT
        Subject: CN=6ac5e4ab-ef82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:05:6f:6d:15:bd:6c:8a:cd:1d:47:6c:57:
                    60:57:1e:64:76:4f:b6:c0:f7:1f:b3:87:99:f3:27:
                    ac:4e:3e:a3:be:56:46:89:ea:95:28:ac:35:5a:95:
                    b8:b1:47:c0:30:5c:f1:0a:41:2e:bc:11:cf:1d:ab:
                    a1:99:fe:84:81:dc:aa:20:20:7a:0f:6c:87:b6:37:
                    18:ea:10:60:05:c7:06:6d:eb:3b:1e:1f:d9:8a:38:
                    83:52:2d:94:14:2e:07:8d:d1:a8:72:2f:fd:e0:be:
                    41:fc:30:16:83:1e:f9:15:b7:cc:98:2a:57:a7:78:
                    7d:38:0b:18:f4:22:c0:12:dc:f9:b9:b2:a5:35:21:
                    b1:5a:a6:34:37:0a:44:3a:41:5c:21:42:89:6b:3e:
                    d5:db:33:05:da:6c:f5:74:c6:3c:aa:91:f0:f0:be:
                    b0:06:28:ff:47:7e:94:93:8e:d9:b6:68:06:68:92:
                    8d:63:d5:8e:b4:38:7d:dd:57:28:d2:b0:fa:db:6c:
                    bf:35:bf:8c:24:ef:8f:b9:32:a6:9d:82:28:ad:49:
                    d3:1d:3b:78:41:98:5a:0d:da:b1:e2:13:a2:99:30:
                    e7:8b:d3:08:f6:2f:12:39:3e:71:06:fb:5d:49:d5:
                    ea:ba:02:ca:82:54:a6:c1:08:26:be:29:06:fc:28:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C9:47:EC:CF:81:84:4B:9B:30:5E:16:8E:8F:05:EE:A9:FB:F9:B1
            X509v3 Authority Key Identifier:
                keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9a:ff:cb:90:16:90:37:8f:0a:d4:c6:7c:14:4a:49:25:6f:
         10:aa:93:53:55:3d:c8:16:7d:c9:48:d0:56:a2:69:85:a9:bd:
         e5:c1:ca:44:c0:36:31:df:67:21:fe:49:7d:fa:39:5e:20:e2:
         9a:3a:fd:e7:9c:12:bc:cf:95:d1:7a:b6:10:9f:9a:6a:9c:06:
         e6:41:66:4a:b0:4a:69:f9:3e:05:c1:c3:3b:49:04:39:97:96:
         b0:f4:b3:11:92:84:1b:f0:c1:ea:8f:29:8f:7e:c1:51:c8:11:
         02:18:d0:fe:39:13:d0:c1:9f:a7:0d:36:f7:2f:12:fe:72:63:
         14:71:ef:51:44:ae:fc:87:85:49:29:08:6d:02:20:15:e3:2a:
         a3:0f:34:da:11:5b:83:c7:74:a2:7d:cf:7b:3e:40:56:33:cf:
         f9:07:d3:fc:6e:5d:c8:b8:35:5a:32:97:4d:78:0d:6f:6a:5f:
         31:c3:46:af:15:99:2c:e8:dc:55:a5:17:8d:db:94:5a:61:bf:
         14:0d:a7:ab:c9:58:e7:16:4f:8c:ac:86:04:dc:9f:50:99:63:
         f8:97:92:ce:91:55:52:06:6b:a9:f9:79:f4:0c:7c:43:3d:30:
         ef:d0:1c:ab:39:c7:33:b1:43:43:4f:d1:1b:5b:ff:03:3b:ac:
         41:5d:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:25:10 2026 by rpki-client