Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
File:                     kXqfeqIoGxn5R0I-mGErH2PRfg4.mft (raw, json)
Hash identifier:          N80Zk3aEiqul+q0UXiDPz6QMkkBTIQo1F2txNtvUAnA=
Subject key identifier:   69:20:57:BD:5E:23:26:64:AE:38:87:E5:29:18:E9:EA:71:41:A5:99
Authority key identifier: 91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E
Certificate issuer:       /CN=A91135FB/serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E
Certificate serial:       07C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
Manifest number:          07B5
Signing time:             Sun 20 Sep 2026 21:22:37 +0000
Manifest this update:     Sun 20 Sep 2026 21:22:37 +0000
Manifest next update:     Sun 27 Sep 2026 21:22:37 +0000
Files and hashes:         1: kXqfeqIoGxn5R0I-mGErH2PRfg4.crl (hash: i1i0XTBdqHSaUgsOSWPOovGrVtgIG6YK+sXVeO9gnIA=)
                          2: ED052FEC614311EB9DCDF560C4F9AE02.roa (hash: vHORlkoJ6Ru5YMWSWLfbW4NJ8zoTLLXavRd5Bn2PcOc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl
                          rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988 (0x7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91135FB, serialNumber=917A9F7AA2281B19F947423E98612B1F63D17E0E
        Validity
            Not Before: Sep 20 21:22:37 2026 GMT
            Not After : Sep 27 21:22:37 2026 GMT
        Subject: CN=6ab04e9d-f69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:58:e9:6d:14:fb:cb:79:ec:35:3e:2e:ee:
                    6d:63:24:24:9e:9d:99:a9:a3:b9:e7:78:3e:77:f3:
                    ee:9b:b1:5b:8f:ed:31:67:73:91:9b:ef:1e:16:c7:
                    8c:3c:cc:3a:05:cc:77:e3:ef:03:52:90:b4:95:c1:
                    88:5f:b7:c2:7f:7b:72:ca:84:ee:f7:47:aa:b2:02:
                    26:3f:08:82:c5:a4:26:76:47:24:ab:11:36:be:56:
                    10:0d:47:c3:a1:6c:e4:98:dd:db:e3:bd:91:c0:ac:
                    77:4f:4b:5d:0d:ce:77:d4:37:4a:bf:cf:77:09:73:
                    8d:a7:7c:05:e1:76:95:88:80:5d:12:72:24:cc:64:
                    10:a4:38:bb:00:4c:c6:d8:d8:5f:6c:f0:73:fb:d9:
                    ce:f2:00:21:ba:d6:e8:d5:74:b5:0f:dd:31:1d:ca:
                    fe:d1:b4:13:fd:e9:8c:bd:12:fd:f0:33:6b:d1:91:
                    36:a9:9b:7f:ec:5d:8b:bc:a5:e3:f5:a9:c1:22:d1:
                    76:fe:9e:ba:b7:b0:3b:89:14:43:79:ab:4e:27:c0:
                    b3:b3:37:43:db:d3:e9:d1:b8:59:2c:5e:3d:ef:52:
                    32:6d:35:9f:88:cf:76:5e:f8:b3:d8:3a:8b:b2:25:
                    ff:62:fd:f2:d2:eb:7c:54:5d:4d:3e:1a:6c:ce:2e:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:20:57:BD:5E:23:26:64:AE:38:87:E5:29:18:E9:EA:71:41:A5:99
            X509v3 Authority Key Identifier:
                keyid:91:7A:9F:7A:A2:28:1B:19:F9:47:42:3E:98:61:2B:1F:63:D1:7E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kXqfeqIoGxn5R0I-mGErH2PRfg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91135FB/6C296D3A614211EB990BA55FC4F9AE02/kXqfeqIoGxn5R0I-mGErH2PRfg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:bc:89:f9:88:9d:65:ca:98:96:3e:f4:b0:df:e4:e2:2e:1b:
         15:2a:1b:63:b0:18:fc:b9:47:63:d2:d8:33:54:12:52:29:3e:
         98:9b:f5:b4:9b:6b:80:0a:9c:ae:70:63:47:36:71:88:61:01:
         64:f8:22:59:a9:fa:a1:d7:aa:2e:8f:9e:f6:bb:c6:ec:47:33:
         34:85:cb:e9:a4:2a:7a:53:73:2e:4e:7c:dd:dd:b2:45:ab:a0:
         82:44:9e:83:44:c7:72:fe:00:14:43:65:c5:25:bf:fb:e0:5e:
         bf:d7:ab:69:7f:7d:75:d7:f0:93:94:19:33:30:3e:92:36:36:
         df:e1:63:7c:9a:42:ea:84:41:af:3f:ce:9e:97:15:04:4e:f9:
         2c:1b:a7:22:9f:b0:16:ee:13:86:a7:3a:ed:bc:d7:34:16:c3:
         e1:49:47:33:1d:54:08:bb:54:ea:cd:ec:73:be:ef:b4:40:c3:
         91:60:7c:3a:89:e2:5d:e9:6d:7e:fe:9c:6a:a0:7e:2b:c7:07:
         a8:d0:eb:98:17:41:a0:83:dd:6c:4f:8e:d6:d1:b6:08:28:ef:
         72:d7:45:3f:af:d0:5b:9d:c9:8b:dd:7e:f4:5c:a9:21:be:0d:
         33:1a:59:12:a8:73:58:93:6e:26:93:5b:36:89:be:90:5c:26:
         c9:96:ff:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:11:39 2026 by rpki-client