Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
File:                     kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json)
Hash identifier:          K2ZFcXIH1rRWB+QP5D17cvmESlEi2dBEbCg8GXFZTZQ=
Subject key identifier:   14:7A:85:3A:85:46:B5:15:F3:38:18:B6:0E:90:37:44:D3:17:7B:C0
Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79
Certificate issuer:       /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
Certificate serial:       0749
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
Manifest number:          0741
Signing time:             Sat 26 Sep 2026 21:58:56 +0000
Manifest this update:     Sat 26 Sep 2026 21:58:55 +0000
Manifest next update:     Sat 03 Oct 2026 21:58:55 +0000
Files and hashes:         1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: 9ZcnpFUkhLax6QDIyoYCmh4PosVF8N4MhTQvEJTb+YE=)
                          2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: ZLw8huOg2nveXXA6ySB0lncxnJt9V0PAEh/Tv0xMDkY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl
                          rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 21:58:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1865 (0x749)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
        Validity
            Not Before: Sep 26 21:58:55 2026 GMT
            Not After : Oct  3 21:58:55 2026 GMT
        Subject: CN=6ab84020-686f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ca:0b:c4:c5:d7:c8:a2:ce:e5:54:7f:b5:e1:
                    16:45:94:b4:9a:17:aa:7a:5b:2b:ae:f1:58:42:d8:
                    0f:93:74:1b:ea:b0:ba:c6:9b:7f:7c:87:2d:1f:2e:
                    06:0e:b8:6b:44:37:8f:65:26:e4:6d:c5:73:64:c3:
                    b9:46:dc:99:8f:de:49:6b:0a:ee:a9:39:11:14:87:
                    39:b7:53:3a:e9:3a:46:3a:5c:89:4c:39:e5:70:4d:
                    83:26:61:63:8b:6c:58:47:2b:58:1b:e7:84:2d:49:
                    a9:98:25:2c:ba:cb:fd:91:6b:a9:df:ad:fc:24:b1:
                    08:a0:43:cd:ab:57:2a:51:ba:bd:a4:88:ad:9e:8e:
                    67:aa:57:87:1c:00:0b:fb:8f:26:41:e6:ad:92:4e:
                    a8:d5:ee:87:05:97:47:3d:7c:85:40:10:2f:68:de:
                    cf:92:4c:42:f3:7f:6e:0c:63:cb:59:00:c8:33:c3:
                    82:a0:4f:c6:df:94:b2:65:5b:1e:45:65:12:78:19:
                    80:14:0e:2e:cf:5e:5f:da:4a:7c:f2:43:96:4a:20:
                    59:0e:10:c7:4d:ad:78:29:c1:4c:a0:44:00:07:67:
                    b0:f2:f2:a9:6b:80:2d:c9:6c:c5:53:d9:72:72:02:
                    47:be:f3:10:72:58:cb:d8:8a:a6:4f:58:fd:5a:59:
                    40:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7A:85:3A:85:46:B5:15:F3:38:18:B6:0E:90:37:44:D3:17:7B:C0
            X509v3 Authority Key Identifier:
                keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:16:f8:38:12:90:42:d2:5f:e5:b9:06:06:87:7a:2f:49:1b:
         1a:64:11:bd:53:7f:a6:6a:d5:62:ef:a9:14:56:63:35:8b:e8:
         0d:7d:68:07:54:3b:cd:72:01:09:a1:83:fb:c6:27:3b:67:f1:
         91:fd:5f:ba:80:33:e1:1e:9d:ed:22:ec:57:43:49:e3:42:6c:
         9a:ef:29:eb:42:0f:49:ac:8d:ce:8a:46:42:e7:f5:12:d9:e7:
         4f:51:f7:74:eb:36:8b:70:b3:a1:b3:c5:9d:be:77:37:74:51:
         e2:e6:80:b5:46:21:f3:90:56:75:44:ea:23:9c:c0:a4:fb:72:
         08:44:94:72:87:60:c0:c1:bf:3e:e2:96:e4:07:b0:de:d4:d2:
         af:3b:6f:0b:ad:d1:92:1f:ed:e5:9e:c6:60:dd:36:d6:39:59:
         cb:2c:65:b2:96:cf:e3:d6:9a:98:46:97:12:b0:1a:1b:fb:70:
         33:97:88:a0:ca:c7:46:dd:10:c8:77:e8:6a:10:ed:bb:9d:ac:
         4e:ab:68:85:b4:65:da:72:01:9a:a2:61:2c:d5:3d:93:78:10:
         51:07:8b:02:56:e1:27:c5:78:69:e5:d1:2b:29:7c:e5:1b:1f:
         19:83:1a:04:56:5a:88:5b:02:e6:6f:2e:51:c4:c4:88:6f:15:
         18:89:49:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:45:39 2026 by rpki-client