Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
File:                     kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json)
Hash identifier:          IVqTVEZIqsCXghCvSS7FHzIrJEHIBWyBO5rnaEybQPw=
Subject key identifier:   EF:C1:21:38:97:1D:D3:4E:DD:BF:BB:90:1B:0F:38:01:83:42:68:FC
Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
Certificate issuer:       /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Certificate serial:       021A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
Manifest number:          020D
Signing time:             Wed 23 Sep 2026 03:00:49 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:49 +0000
Manifest next update:     Wed 30 Sep 2026 03:00:49 +0000
Files and hashes:         1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: qbOCiRgIVXLxxAJMR0upPzGYFsikc01qhRTNwKkEnb0=)
                          2: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: X+dqp+Ah396uKCPwR9bMS10gj/YjMNXUMTYy7soM8Zc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
                          rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
        Validity
            Not Before: Sep 23 03:00:49 2026 GMT
            Not After : Sep 30 03:00:49 2026 GMT
        Subject: CN=6ab340e1-02f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ce:9e:5b:ce:26:ae:3a:3b:58:31:4e:d8:47:
                    59:5c:73:a5:72:6e:44:b5:18:c3:ed:45:3a:60:c4:
                    6d:de:b0:9a:b9:04:4d:6d:4b:44:68:26:37:98:92:
                    1a:6d:fd:67:6b:18:a3:ff:cb:cf:98:fe:dc:89:55:
                    9c:3d:9f:25:34:5c:95:d7:78:97:72:87:fa:e0:9b:
                    e1:b5:e5:a0:2c:28:1e:bc:ef:3a:c4:1e:8c:3e:ee:
                    7c:1a:54:c4:28:7b:17:b2:d5:ef:db:4f:07:37:98:
                    59:db:90:c5:94:8e:a3:61:be:3e:cb:8a:86:2d:be:
                    43:6c:a2:3b:f4:2f:d3:b2:dc:72:ae:ed:be:fd:08:
                    0e:28:03:f1:75:f2:e2:8c:ff:04:22:10:7a:a1:69:
                    6c:e2:45:a5:d5:a7:32:3d:01:39:55:a5:9d:44:32:
                    f7:69:da:85:8e:9f:06:ce:40:7f:a6:54:56:74:79:
                    91:d5:17:3b:5c:84:94:bf:c8:06:42:6a:c0:07:6f:
                    cb:2a:b9:c1:de:69:25:18:25:4f:27:54:39:7f:b9:
                    ad:a2:07:11:7f:cb:d0:e2:a1:a1:c9:cf:0b:da:2b:
                    53:c5:ce:d4:db:67:62:51:39:8e:9d:1f:f9:1b:d2:
                    a3:4b:c1:e1:94:6e:f8:1d:9d:a4:df:9f:80:7f:a4:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C1:21:38:97:1D:D3:4E:DD:BF:BB:90:1B:0F:38:01:83:42:68:FC
            X509v3 Authority Key Identifier:
                keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:80:60:ed:37:62:7f:c4:51:08:a0:61:ac:47:28:ce:ad:01:
         14:f6:91:e2:83:e7:94:15:ea:f0:3c:1f:23:fa:e7:d4:ad:34:
         73:10:a7:d5:08:0e:fc:03:52:33:89:aa:17:67:3a:dc:d2:53:
         2e:38:de:0e:ce:e5:a6:5d:d1:ce:25:5a:f5:af:05:43:59:1c:
         05:3e:22:9f:d6:c5:06:fe:73:20:54:5f:75:65:63:49:10:41:
         66:ce:6d:b6:13:9d:2d:2b:4c:a2:a4:f8:52:5c:d7:9b:bb:b4:
         fd:d9:e8:3e:df:80:f5:f4:b1:fb:2c:96:d7:a8:fc:92:4f:44:
         1d:96:13:ce:b6:17:95:7d:78:dd:7f:75:92:e1:fa:48:87:30:
         62:fd:3c:ef:9f:c8:ad:4e:d8:bf:73:a0:cb:a4:49:ea:40:2d:
         b1:24:48:46:56:9a:7b:ae:74:63:33:86:29:8e:32:2d:3f:77:
         fd:d0:39:db:56:d9:20:47:e8:66:64:07:73:93:2d:59:ef:73:
         cc:59:83:5e:01:f3:21:fb:68:6f:70:ab:df:81:84:8b:9d:42:
         d5:47:e8:6a:af:3b:51:6f:00:57:54:fd:60:1e:8b:12:0d:20:
         46:0c:e0:1d:9d:30:fb:20:f9:ed:17:db:2a:9d:1a:cc:e0:26:
         4f:27:48:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:34:33 2026 by rpki-client