Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
File:                     Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json)
Hash identifier:          s+85VpRBL3+zRiCjrOiDU0La2AU3N153aKTIqVXYX58=
Subject key identifier:   B7:BE:BA:1B:10:18:AB:EF:70:BA:EC:FB:81:91:4A:89:C1:8F:60:AA
Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
Certificate issuer:       /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
Manifest number:          01ED
Signing time:             Mon 21 Sep 2026 03:24:12 +0000
Manifest this update:     Mon 21 Sep 2026 03:24:11 +0000
Manifest next update:     Mon 28 Sep 2026 03:24:11 +0000
Files and hashes:         1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: EdQZNDJvnk4LdcTuvaDLGj2jCu+KytQoiHVp0GLyuHw=)
                          2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: lo4efARTvEcP2ve6/ixSUWQB1NQ99xWjC1uzkkmYqbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
                          rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:24:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
        Validity
            Not Before: Sep 21 03:24:11 2026 GMT
            Not After : Sep 28 03:24:11 2026 GMT
        Subject: CN=6ab0a35c-e081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:0e:6d:0e:89:3e:4e:c3:fa:33:14:f2:e9:
                    98:55:77:69:78:68:15:ba:34:1e:94:f1:d3:64:e0:
                    ea:b9:56:a2:6a:00:e3:fe:05:82:fd:62:b4:25:83:
                    19:cf:4f:1b:9f:2b:2e:78:44:3c:cc:2e:1d:d3:5a:
                    b7:34:9b:ec:4d:4e:13:9b:52:46:b1:ae:eb:55:36:
                    72:b4:53:35:7c:ed:7d:ab:fa:35:65:0d:82:ea:6d:
                    8e:7e:8c:0f:b7:32:f0:4f:ba:16:ed:6c:1e:6d:ec:
                    90:cb:f4:25:df:fd:24:23:a3:21:d0:05:f9:26:d5:
                    21:bd:36:19:6f:c7:43:c2:cf:aa:64:09:a2:da:b2:
                    6a:80:fc:29:82:d6:91:6e:d1:35:af:26:f1:3d:c8:
                    bc:7f:91:42:e6:cb:0e:9a:22:97:54:f1:86:5d:6a:
                    e3:46:41:c3:a3:86:18:dd:a1:df:6e:98:c1:03:ae:
                    fd:c3:86:03:00:90:3c:7e:13:72:a5:b5:b4:2f:0f:
                    d5:60:c2:ca:3f:d6:fa:88:9c:0d:1d:75:48:ac:f3:
                    cf:ad:ad:5d:7d:58:e0:46:88:29:1b:b2:b8:16:53:
                    39:2c:b8:91:29:58:77:74:cd:af:de:87:f9:a6:30:
                    17:5b:2c:ac:11:4e:f2:6c:11:19:b9:d8:9a:d2:ad:
                    a6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BE:BA:1B:10:18:AB:EF:70:BA:EC:FB:81:91:4A:89:C1:8F:60:AA
            X509v3 Authority Key Identifier:
                keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8c:c6:8e:3b:e1:d8:53:14:3e:01:31:bc:69:56:5d:ef:22:
         8b:51:07:01:cd:42:58:3a:21:72:42:2b:02:a6:e2:6a:55:5d:
         ba:67:15:4d:02:7f:da:0a:00:91:c6:74:97:00:36:cd:c2:4d:
         10:d4:dd:96:a9:e3:3c:ef:8f:56:16:8a:7a:b8:88:44:9f:af:
         1d:f5:3a:dc:f6:c9:24:b8:5d:ea:3e:e3:f1:41:2a:7c:ef:96:
         e0:fa:71:d3:4b:1a:84:4c:2b:ff:f3:3b:c1:7b:7d:26:3c:cc:
         d8:d0:27:27:13:90:c0:cb:79:99:c0:48:ff:9e:cb:52:96:8d:
         3e:21:60:2b:6e:be:d8:b1:f6:46:5a:da:3a:81:3d:1b:59:b5:
         13:fe:b7:33:bc:8a:35:ae:de:83:29:ed:ae:0a:73:c1:66:15:
         1e:b0:66:69:5e:c7:9d:38:8e:d4:f4:f6:cc:76:c7:d4:ed:da:
         97:d2:2f:e0:64:cf:f6:88:05:0d:b7:cd:a6:b8:83:63:ff:d1:
         79:cb:bf:2d:27:83:a8:82:df:f7:a0:33:e6:f6:81:7a:17:55:
         02:38:be:9d:a3:9b:97:fb:8a:fe:e7:e9:6d:62:92:a1:2c:1d:
         1d:c6:d8:cd:34:d3:0f:e6:87:49:9c:61:d7:39:a1:df:f9:c5:
         3d:5d:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:03:13 2026 by rpki-client