Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
File:                     MkK64Aup8N9Ontpv5cCPEp-RaIE.mft (raw, json)
Hash identifier:          iIIdRtd51Y35qCB5N8cUncENJDqrhJ7FSQXXFzspwHc=
Subject key identifier:   F0:DA:00:9A:05:ED:1F:E4:B6:BA:31:0F:A7:B1:7C:E9:49:4E:0C:C1
Authority key identifier: 32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81
Certificate issuer:       /CN=A912B0A3/serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
Certificate serial:       08C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
Manifest number:          08B9
Signing time:             Sun 20 Sep 2026 20:34:00 +0000
Manifest this update:     Sun 20 Sep 2026 20:34:00 +0000
Manifest next update:     Sun 27 Sep 2026 20:34:00 +0000
Files and hashes:         1: MkK64Aup8N9Ontpv5cCPEp-RaIE.crl (hash: 87LD6+wY/1+LoxLRQZcnLv5CX3R/ipoX0trzyyzYPFY=)
                          2: F0B154E6085A11EBA6864D71C4F9AE02.roa (hash: 7lILAk4gsWPIDZdA1SJEcAGVilUIsUdUMv+Kcbhfelo=)
                          3: 73DDDA0206FF11ED8C6B565FC4F9AE02.roa (hash: e6YP5hoyPP9E+431/sCsWnlZVdwuRyAJ8acWlo4Re+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl
                          rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248 (0x8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B0A3, serialNumber=3242BAE00BA9F0DF4E9EDA6FE5C08F129F916881
        Validity
            Not Before: Sep 20 20:34:00 2026 GMT
            Not After : Sep 27 20:34:00 2026 GMT
        Subject: CN=6ab04338-b083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:c9:73:6c:56:45:c1:10:45:e1:f7:ec:0b:
                    aa:b1:20:b1:0f:be:b8:6d:16:13:b5:c6:7c:d8:3a:
                    cf:1c:9e:1c:fa:af:ed:02:54:e0:ec:17:04:d3:0b:
                    d7:cd:d7:82:c9:12:2a:19:c5:3a:c7:fd:b2:a3:7f:
                    b9:30:1a:d0:fe:de:d9:dc:5a:0f:f5:bf:bc:0f:cb:
                    a0:c7:c5:75:43:8f:0d:0c:c2:6e:f5:cd:c7:41:65:
                    2e:18:ca:74:6d:c1:8d:11:57:f9:2a:87:bd:bd:b0:
                    0a:cc:24:b1:19:c4:fd:5d:e5:87:b0:a6:d7:d1:fa:
                    ab:cc:88:94:43:f6:16:c5:52:eb:8e:19:8a:73:2d:
                    0c:ac:60:95:d1:eb:00:75:25:e2:51:75:14:e0:c5:
                    d4:01:b0:6e:f3:72:22:cf:86:57:45:0b:d2:f7:88:
                    3e:74:b3:8a:c4:fc:f8:77:a2:6d:fe:9e:3b:e8:79:
                    2c:b6:4e:b7:8a:0d:ba:80:f7:fe:6f:e4:57:92:e9:
                    34:d0:1c:84:c5:fb:59:96:42:b9:77:43:1a:df:2f:
                    3e:f3:2f:ce:5b:6b:3b:67:51:5f:8f:9a:00:70:27:
                    8c:3e:45:89:e1:88:9c:10:56:ad:2f:9e:00:a0:ec:
                    e6:31:60:8f:62:bb:36:89:cd:12:a9:fc:94:11:06:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DA:00:9A:05:ED:1F:E4:B6:BA:31:0F:A7:B1:7C:E9:49:4E:0C:C1
            X509v3 Authority Key Identifier:
                keyid:32:42:BA:E0:0B:A9:F0:DF:4E:9E:DA:6F:E5:C0:8F:12:9F:91:68:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MkK64Aup8N9Ontpv5cCPEp-RaIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B0A3/754545BC03B711EB97FBE568C4F9AE02/MkK64Aup8N9Ontpv5cCPEp-RaIE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:58:52:ee:66:dc:77:0c:03:d9:8b:ce:56:f8:5a:08:65:31:
         e5:29:3a:13:d6:d3:21:b4:45:24:74:c5:19:d1:11:48:d3:61:
         09:40:08:1b:a4:b9:4a:f2:66:9e:85:9e:2c:25:1b:04:bc:bc:
         f5:0d:32:d7:a9:48:b0:82:48:1d:f7:ee:95:e0:38:36:7a:87:
         67:ec:14:ef:75:63:2f:a4:27:19:f0:57:17:74:2a:c4:98:56:
         df:be:c8:ba:e4:2c:e2:c8:3d:b9:de:b0:a5:35:48:b4:f4:f0:
         ea:e1:1c:47:23:a6:25:80:3d:32:55:f9:66:c1:68:65:0c:b9:
         f5:d2:ae:43:45:b8:f8:22:1d:d0:8d:cb:25:1e:2c:a4:5a:99:
         ab:95:c2:a6:fc:89:e4:6f:3c:8d:9b:c1:5e:5e:0b:90:4f:29:
         cd:57:b8:01:67:cf:34:3b:be:a5:09:da:8c:9a:f5:1e:68:f2:
         ec:da:20:d9:44:da:0e:89:91:fe:e7:26:92:cc:45:3c:8b:92:
         d7:1b:3a:c5:a4:bb:05:3d:89:1b:98:2a:6a:4b:01:78:6c:9f:
         e0:8b:9c:8f:b8:7b:0c:98:bb:53:29:4b:bf:68:83:39:a7:d3:
         8b:8c:02:9a:cc:6e:90:0a:13:e7:cd:67:7a:37:0a:71:a4:2d:
         7c:30:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:28:36 2026 by rpki-client