Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
File:                     kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json)
Hash identifier:          NGJVam22gunE+MRVB0cXNLMenIshldRBd0NChoU050c=
Subject key identifier:   26:7B:80:2A:37:06:6C:E1:04:95:D2:F3:FD:55:AA:18:C7:DA:53:9F
Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50
Certificate issuer:       /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650
Certificate serial:       071B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
Manifest number:          0711
Signing time:             Sun 20 Sep 2026 20:51:14 +0000
Manifest this update:     Sun 20 Sep 2026 20:51:14 +0000
Manifest next update:     Sun 27 Sep 2026 20:51:14 +0000
Files and hashes:         1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: gJBO7DXdhRAg5eb2bPxJcFRrF/rNoxP5fgeXIbGokqQ=)
                          2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: kx0li/zw87s40T3OezyGkC+0pUIU5Rs0sCA+z6TjHX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl
                          rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1819 (0x71b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650
        Validity
            Not Before: Sep 20 20:51:14 2026 GMT
            Not After : Sep 27 20:51:14 2026 GMT
        Subject: CN=6ab04742-3278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:e0:ef:7a:cb:53:51:2e:81:7a:10:60:70:
                    1f:c4:80:4c:77:57:f7:06:da:a6:45:a2:4e:2b:d5:
                    d2:3f:82:29:b9:96:d7:4c:97:65:bc:ee:0e:e4:7a:
                    25:62:b6:97:24:5a:68:49:2b:e0:65:af:59:c3:d7:
                    55:39:10:ed:d9:cd:f0:00:30:12:32:50:81:20:05:
                    7e:b3:da:2c:58:8e:66:7a:74:47:f6:f9:00:28:6b:
                    6b:51:30:2a:b8:e5:ae:c3:69:85:60:be:5e:3a:1e:
                    9b:8c:d5:de:68:e0:65:9c:c9:40:b6:6f:3d:ca:e3:
                    2e:8d:33:e3:75:ec:a6:21:5e:4e:65:a9:13:03:46:
                    fa:81:e4:a6:c9:32:be:70:ed:ca:1e:65:43:5f:78:
                    13:ec:9a:79:ce:e0:f1:37:86:df:fc:38:01:d4:e9:
                    9c:31:75:7d:c9:5c:75:ca:72:df:35:95:54:d1:ac:
                    5c:23:70:c9:63:10:dc:5a:f6:1d:07:3b:69:24:99:
                    b2:26:09:52:d7:43:03:88:55:4d:05:a9:0a:00:44:
                    41:da:2a:17:66:73:0d:b0:d4:70:fd:08:7a:c1:42:
                    99:48:f2:f9:bb:08:88:8c:2c:4e:ac:45:e2:98:56:
                    9b:5f:b7:06:d2:b9:e8:db:1c:9d:61:74:cd:6d:34:
                    67:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7B:80:2A:37:06:6C:E1:04:95:D2:F3:FD:55:AA:18:C7:DA:53:9F
            X509v3 Authority Key Identifier:
                keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:00:10:7a:be:c5:01:26:f6:04:ac:13:d3:a4:05:3d:95:b5:
         92:92:60:75:df:ac:a2:3a:c8:60:96:83:a1:8a:44:d8:26:6a:
         fd:2c:15:29:17:ea:c9:33:dc:c5:08:e6:a6:39:22:95:53:41:
         03:71:74:eb:fb:0d:7f:9b:12:0d:4d:07:9a:11:26:dd:a1:08:
         42:70:1b:23:c8:58:ff:55:58:df:25:64:bc:67:97:35:65:5e:
         cf:cc:20:5f:d3:1f:7f:c7:76:90:d0:f9:ce:2c:86:5b:02:c5:
         e7:e3:a7:88:a4:61:1a:a6:50:1e:8e:ff:63:c9:43:e8:ea:66:
         a6:ab:e3:d1:47:85:70:67:38:7b:14:72:50:78:15:39:67:8d:
         94:99:f7:e0:d6:e4:de:45:ba:d8:a0:19:83:70:1f:b1:15:4a:
         f9:48:11:90:47:a1:53:5f:9c:a6:62:88:9e:19:3b:21:92:f2:
         d9:66:d3:c7:35:6a:f8:52:d8:0f:20:ec:08:72:e9:51:bb:15:
         ce:b5:83:df:65:a2:ad:bc:4d:78:33:fb:45:6d:78:8e:d0:20:
         a4:ba:78:76:bb:68:5b:96:83:fd:37:7a:21:df:4f:3a:fe:5f:
         92:e7:a9:17:6c:b1:2c:01:63:6c:3c:55:b1:ab:fd:39:0c:b9:
         e2:b1:36:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:27:42 2026 by rpki-client