Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft
File:                     KiZlwxQeS_P9LwBKrimlmHETod8.mft (raw, json)
Hash identifier:          mW5GLtAHt7YSd2WR/xJyCRrgi+yhHpFbQAAHgwSRlx4=
Subject key identifier:   74:9E:82:4C:8A:4F:A9:4A:4F:9E:33:53:A5:F8:A2:E4:16:C4:AB:5D
Authority key identifier: 2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF
Certificate issuer:       /CN=A911972D/serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF
Certificate serial:       0483
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft
Manifest number:          047A
Signing time:             Sun 20 Sep 2026 23:54:10 +0000
Manifest this update:     Sun 20 Sep 2026 23:54:09 +0000
Manifest next update:     Sun 27 Sep 2026 23:54:09 +0000
Files and hashes:         1: KiZlwxQeS_P9LwBKrimlmHETod8.crl (hash: 3QzNW/gYWjjT/7zl8XJS8kwy8gXdMz+C5UbPVws0uxk=)
                          2: B067CCDCA8C511EC8F560C42C4F9AE02.roa (hash: F/PceWhaRg2ZCivw+2tjUeII0KHSV3l33JEM7j1Q1Qg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl
                          rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155 (0x483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911972D, serialNumber=2A2665C3141E4BF3FD2F004AAE29A5987113A1DF
        Validity
            Not Before: Sep 20 23:54:09 2026 GMT
            Not After : Sep 27 23:54:09 2026 GMT
        Subject: CN=6ab07221-3122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:52:09:4f:28:4f:7e:e6:87:9b:2a:0f:76:
                    b1:06:40:e9:e7:f8:77:27:f1:c1:ec:0c:09:b5:76:
                    53:3f:f6:fb:f8:b1:f8:aa:67:86:d9:59:21:34:87:
                    d2:bb:25:d6:2a:8a:6a:1e:b9:79:81:de:76:d9:64:
                    d3:66:9d:8c:b4:c2:99:c8:4e:f9:1c:ec:e2:0d:5f:
                    7d:4c:41:7c:54:49:f0:79:4a:f9:b9:41:cb:30:64:
                    ca:68:0e:d8:b8:6e:64:34:76:f2:17:d4:34:56:7a:
                    f5:57:81:d9:39:44:88:65:da:60:68:0a:be:86:e3:
                    7b:a6:d0:c5:8e:cf:b1:dc:b8:4c:f1:83:ee:ba:ac:
                    52:e8:8e:b6:79:eb:0e:f5:c3:eb:e8:ca:39:9c:2b:
                    cb:44:04:f8:b5:b1:3a:21:8d:b7:2c:53:bd:1c:fe:
                    d6:9b:d8:6a:d6:87:e2:20:0a:0d:cb:fb:9a:ae:3e:
                    c3:53:91:5d:af:aa:10:33:0d:fb:31:42:f0:74:ba:
                    ec:7e:51:13:1d:fc:29:48:37:42:44:ae:b3:ab:d0:
                    c1:3a:b3:9b:fc:48:da:97:fe:a2:e5:cd:66:4d:a6:
                    05:72:b2:af:98:c2:cf:9d:4a:b6:7e:45:7a:4b:1d:
                    5b:4b:bf:05:ce:d8:a8:7a:8a:6d:c2:99:ed:bf:5c:
                    e2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9E:82:4C:8A:4F:A9:4A:4F:9E:33:53:A5:F8:A2:E4:16:C4:AB:5D
            X509v3 Authority Key Identifier:
                keyid:2A:26:65:C3:14:1E:4B:F3:FD:2F:00:4A:AE:29:A5:98:71:13:A1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KiZlwxQeS_P9LwBKrimlmHETod8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911972D/99EE950CA68211ECB4E3EC3AC4F9AE02/KiZlwxQeS_P9LwBKrimlmHETod8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d9:96:8a:0d:c1:32:2e:13:10:fb:28:d9:12:a2:87:94:b6:
         c2:ef:9a:23:3a:8c:d9:68:34:40:6f:55:7c:e0:78:75:c1:23:
         25:73:f4:e8:0c:0d:a3:98:0c:5b:83:a8:81:7d:b5:65:13:f7:
         80:24:7c:e2:47:23:7c:2e:e0:b3:95:89:00:d0:2f:0e:47:4a:
         51:7b:f5:13:2c:ce:5f:f6:20:fd:bc:f3:5e:a5:f7:d3:f6:41:
         89:3e:5d:70:41:bc:b8:40:6b:b8:20:7a:1c:79:df:60:f5:9c:
         dc:4a:15:a8:0c:77:47:bd:c5:ac:d9:fd:13:1b:ab:c4:8f:0d:
         56:9e:2d:6c:a9:62:d1:ea:3f:31:03:8f:2c:6f:81:38:4e:f2:
         66:56:9c:8e:8c:14:26:54:af:4e:bd:34:99:1f:42:0c:36:0a:
         ab:b8:fd:a8:b4:5e:70:32:5a:79:48:a3:e0:0e:94:e0:f6:68:
         a4:12:73:9b:5b:e4:5e:2a:67:91:7a:c7:15:dd:9e:14:87:3a:
         fb:ab:e0:1c:74:0b:cc:a1:66:66:3f:2b:67:0d:5e:fc:20:0f:
         d5:96:ae:09:7e:93:52:3d:62:71:1e:2b:72:b4:1d:95:61:c3:
         8e:b5:42:07:0c:48:9c:72:64:8d:f9:85:bc:b1:de:80:ea:da:
         83:ab:cb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:41:09 2026 by rpki-client