Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
File:                     KWYvUTolTw218H21gZ--rkD3vxU.mft (raw, json)
Hash identifier:          pG34DjdR8EbFVSWPgC1YNCL1KRo05ll0ZfAlcEouAXg=
Subject key identifier:   9A:05:95:BA:50:EE:14:AC:2A:49:AF:06:F3:03:C2:9F:43:AE:91:75
Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
Certificate issuer:       /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Certificate serial:       03E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
Manifest number:          03C8
Signing time:             Fri 25 Sep 2026 00:22:06 +0000
Manifest this update:     Fri 25 Sep 2026 00:22:05 +0000
Manifest next update:     Fri 02 Oct 2026 00:22:05 +0000
Files and hashes:         1: KWYvUTolTw218H21gZ--rkD3vxU.crl (hash: SwbVaUqV3B8E8SNLJXoCdfB30tXx6CyCwh9zAL21pTE=)
                          2: F09C691AEBB511ECA410BF6DC4F9AE02.roa (hash: V7aBUIeHjnuFGSXcgQjlU9vZiTp/iM8MzCOM0K2/HNc=)
                          3: F123461AEBB511ECA410BF6DC4F9AE02.roa (hash: Kkc4FrDSL9TyqmO89DwT+TFSNidqWuKseH0zs4kx+8M=)
                          4: EFF97098EBB511ECA410BF6DC4F9AE02.roa (hash: oiSsK2P8HRB4FPzmPdMZC05vhJRqZjFnda/dRmDD5yE=)
                          5: EF6D9D70EBB511ECA410BF6DC4F9AE02.roa (hash: 8BhnI271pXtssKyoUU3+BWjfHdoZbJ1UUEIVs2VtNjY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
                          rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
        Validity
            Not Before: Sep 25 00:22:05 2026 GMT
            Not After : Oct  2 00:22:05 2026 GMT
        Subject: CN=6ab5beae-d251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:c2:0f:2b:7f:4e:b5:cf:7c:0f:7e:3d:37:
                    79:5f:74:ce:eb:9d:0e:7f:c0:b3:fd:f4:84:88:c8:
                    cc:5c:06:f4:b7:4e:6a:47:b7:0f:b7:41:c8:6f:48:
                    da:48:7f:32:61:3f:57:da:86:94:1a:31:aa:c5:a8:
                    ac:ba:1b:71:20:00:ed:a4:c0:b8:6d:83:ad:5a:cb:
                    82:9c:74:0b:de:23:56:75:48:ce:e3:26:f4:ca:17:
                    2e:21:4a:b7:c8:4f:2f:61:ce:f9:f9:1f:36:be:c1:
                    fb:6c:ba:d1:9e:5a:19:b5:74:51:0c:83:94:7e:bc:
                    9a:96:b4:4d:ff:31:95:b6:60:0e:36:48:16:bc:a8:
                    f1:97:32:57:83:f3:fa:7a:3e:d9:6b:30:e7:2e:98:
                    e1:99:4b:02:0d:f2:cd:27:05:28:1f:52:35:8e:22:
                    1f:5f:b7:12:9e:1b:83:d9:21:b4:16:cb:83:4c:3b:
                    8b:0f:7d:52:f4:a9:c4:b8:b7:35:dc:5f:2b:ce:56:
                    e1:94:dc:0d:88:b8:0f:91:79:97:07:df:f8:0e:b5:
                    5a:fa:8d:58:8c:04:84:1b:2d:3e:9e:30:a4:4c:f7:
                    a7:bd:b9:08:fb:98:d2:47:f2:c8:f8:ad:87:f1:e5:
                    38:7f:db:26:b9:be:d0:01:fe:d4:18:39:3c:40:57:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:05:95:BA:50:EE:14:AC:2A:49:AF:06:F3:03:C2:9F:43:AE:91:75
            X509v3 Authority Key Identifier:
                keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5f:cc:e2:58:66:4c:a8:b5:94:65:f2:fa:52:07:63:cd:9d:
         45:de:ff:12:d8:34:50:63:91:eb:4e:57:77:3a:c0:06:01:0f:
         3a:48:b2:87:87:53:08:ac:63:c2:19:6e:14:bb:a2:89:20:61:
         a2:3f:ca:6f:6c:e4:c2:e0:ab:9c:5f:26:94:24:87:b2:8a:70:
         52:e1:a3:d4:b4:01:2b:3a:c4:3b:d4:c4:05:c7:3e:81:9d:7e:
         e3:2b:82:b1:7e:d3:51:54:1f:35:9f:44:35:95:ca:53:28:b4:
         c0:3f:b3:92:f6:d0:56:15:e1:52:34:84:dd:c5:4c:b4:e0:60:
         60:d8:be:b2:e3:32:4e:d5:1b:c0:a9:3a:94:5b:8f:ec:f0:1c:
         b1:64:70:8d:28:92:65:9e:a5:d3:d0:4f:99:ec:36:ac:85:ce:
         16:44:58:c7:a1:42:03:db:f9:a0:e3:f4:e8:61:52:11:b1:5b:
         d3:47:11:91:7f:cc:1c:7b:25:61:fc:d8:a7:8b:47:19:be:87:
         31:0f:cc:db:1a:5e:ad:3f:de:08:a5:87:6b:ec:85:94:c1:08:
         be:0e:d1:9c:cf:d3:b0:da:d3:19:77:86:2c:cb:c8:14:03:bd:
         23:cf:d1:42:57:63:e6:5b:13:66:d2:4b:87:f8:74:da:73:7e:
         0c:c0:0c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:34:03 2026 by rpki-client