Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
File:                     k-bMnLyUxrTox9mGQYMN5mORud8.mft (raw, json)
Hash identifier:          mckaccUEq+eSqh6nfINURKmYYatii26PfBggs685IYQ=
Subject key identifier:   8B:F9:A9:40:FD:3F:B1:BD:7D:5B:67:67:03:3A:1F:D0:9C:1D:6E:30
Authority key identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF
Certificate issuer:       /CN=A91357FC/serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
Manifest number:          A3
Signing time:             Wed 23 Sep 2026 06:57:33 +0000
Manifest this update:     Wed 23 Sep 2026 06:57:32 +0000
Manifest next update:     Wed 30 Sep 2026 06:57:32 +0000
Files and hashes:         1: k-bMnLyUxrTox9mGQYMN5mORud8.crl (hash: 5OToxaaSHtOMFDKFR7/Mn/cDW02jzDx6luPAkNw1g1A=)
                          2: 115DA80CBDFA11F0AC07856DC4F9AE02.roa (hash: W13G9UJDUOXNhE35H+xQmcCjaFGO3pjeXgy05QF6k+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl
                          rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91357FC, serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
        Validity
            Not Before: Sep 23 06:57:32 2026 GMT
            Not After : Sep 30 06:57:32 2026 GMT
        Subject: CN=6ab3785c-abb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:30:84:5c:49:43:12:42:10:18:a2:fe:52:
                    c5:0f:38:ec:96:b2:9d:f2:24:4d:53:2b:06:df:b1:
                    ad:f2:a2:72:52:b0:f7:09:73:53:bf:b0:6a:7e:58:
                    f9:60:b9:d8:fc:87:72:b0:d7:1a:e7:30:67:cb:57:
                    ec:bd:cf:84:59:21:bf:a8:f1:fc:e4:6e:dc:b6:07:
                    b3:7a:31:64:79:25:d2:b7:ff:08:06:a0:86:db:e7:
                    5d:db:89:13:f9:4d:73:04:76:aa:36:21:16:7d:31:
                    d4:48:6d:92:23:15:9d:be:48:2d:b1:a9:17:e6:df:
                    1d:ca:c2:cf:1b:4d:ec:46:44:ef:00:2a:02:48:a5:
                    66:aa:dc:21:29:6f:de:2b:76:2e:28:92:70:95:f8:
                    57:ec:06:91:53:42:c7:ea:41:be:f1:7e:70:50:24:
                    4d:96:d4:7d:ef:fb:f6:be:62:e4:89:94:e3:1f:81:
                    92:67:2a:3b:fc:66:1c:a3:ad:c2:be:31:6b:7d:e1:
                    7f:be:d9:c0:8e:0f:dd:cb:4b:38:dc:12:28:e6:ad:
                    73:0c:d5:d8:29:e0:77:e6:88:a3:e9:48:02:e8:78:
                    d1:db:d9:d6:eb:09:f0:2e:49:11:43:4a:48:ca:79:
                    ca:fc:34:2b:ec:c7:3e:fe:75:17:bf:fe:ea:e3:68:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F9:A9:40:FD:3F:B1:BD:7D:5B:67:67:03:3A:1F:D0:9C:1D:6E:30
            X509v3 Authority Key Identifier:
                keyid:93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:67:03:fa:26:7c:62:4d:09:f2:da:ca:13:18:04:06:0f:ac:
         0e:0e:5e:df:83:6a:e5:4b:c3:73:ce:f4:5f:7b:df:3e:10:17:
         61:57:08:b9:ee:b1:34:7c:cd:20:e2:d2:f0:2e:a8:4a:5d:05:
         e0:c2:09:e5:aa:e2:9a:e9:2b:74:18:9f:a0:fc:2d:fb:5f:da:
         fb:c6:a7:b2:f8:5c:3a:1b:9e:90:49:fc:5b:04:2b:03:92:03:
         b3:78:00:c7:d5:0d:56:11:74:f4:9f:d8:e9:de:07:a8:13:c8:
         53:32:76:a5:65:1f:71:14:3c:24:c6:0b:74:7d:71:65:95:9d:
         ba:73:ce:90:2a:31:6a:25:7e:c0:39:32:e7:14:ae:00:4d:5e:
         a1:08:45:6a:3f:c2:8e:ac:e7:5a:90:01:d9:c0:83:48:06:99:
         8a:b0:f3:94:92:ee:40:d1:5c:95:36:a8:b7:ba:3a:36:be:90:
         46:77:ca:a2:bd:f3:07:ee:3e:43:b5:1f:1a:11:25:90:26:2b:
         da:fd:de:1d:66:18:3e:d5:49:29:ad:b1:c9:0f:0c:ea:aa:86:
         65:35:16:a0:1d:e1:b4:a0:c2:b8:75:ba:33:c6:4d:da:b0:5d:
         38:73:91:24:6a:b6:a2:3a:19:88:2d:8d:70:52:55:e0:c1:ea:
         5a:64:4a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:29:53 2026 by rpki-client