Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
File:                     kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json)
Hash identifier:          kbpmKJ7bOkNtRDPFUVdeVAjj3ieNRdoIRoq5kiza4g0=
Subject key identifier:   40:20:2A:27:9C:34:E6:71:00:9A:6E:08:21:EC:6A:81:AC:F6:18:22
Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
Certificate issuer:       /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
Manifest number:          012E
Signing time:             Sun 11 Oct 2026 06:18:13 +0000
Manifest this update:     Sun 11 Oct 2026 06:18:13 +0000
Manifest next update:     Sun 18 Oct 2026 06:18:13 +0000
Files and hashes:         1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: dFn0PXwW5nbFQNgn5KRCtAf95AQWpiWmWZl53QH70eE=)
                          2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: pFG5/WCaL+yt9ghGi9neBn3ryCri7CWT6hIptpI2Hyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
                          rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 06:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
        Validity
            Not Before: Oct 11 06:18:13 2026 GMT
            Not After : Oct 18 06:18:13 2026 GMT
        Subject: CN=6acb2a25-3aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:db:cd:78:5f:56:5f:70:ad:fd:2c:02:b8:ea:
                    d7:7e:69:4e:c4:39:4c:95:cc:80:94:80:16:4f:1d:
                    bd:8c:30:b5:4b:a4:a9:61:06:07:6d:05:06:d4:9f:
                    02:fa:4d:8c:bf:b5:22:bc:86:3d:36:0a:9c:03:fc:
                    69:b7:bb:33:9b:6e:b2:45:0e:61:65:07:ff:84:a7:
                    5d:36:bf:28:c4:8e:9e:b2:b8:29:55:68:2d:ae:88:
                    bb:44:45:bd:13:58:f8:d9:5b:01:75:fe:60:35:b5:
                    94:ed:e4:67:ea:de:98:12:eb:66:e4:d7:cc:7f:6f:
                    4e:9f:7a:40:03:8b:8c:3b:aa:68:b7:f4:e4:99:66:
                    eb:02:57:72:c4:c2:c2:da:b5:74:77:c0:d9:1d:3f:
                    a8:09:91:bf:b6:01:04:01:93:ec:94:bb:80:82:86:
                    da:88:a4:fc:6c:e8:b3:80:2c:79:a2:d9:33:86:f0:
                    e8:ec:7b:50:ce:8b:f8:4d:72:df:c8:42:48:41:6f:
                    69:bd:ba:d8:cd:6f:4b:06:e5:cc:5d:51:52:37:26:
                    d8:34:0c:8c:55:24:64:91:5e:0f:bb:70:75:59:ed:
                    0b:d2:77:53:d3:d1:76:4d:0c:5a:6f:f8:ab:6d:37:
                    d1:bb:9c:c4:c2:d5:53:65:5b:3c:6d:5d:8d:7e:b4:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:20:2A:27:9C:34:E6:71:00:9A:6E:08:21:EC:6A:81:AC:F6:18:22
            X509v3 Authority Key Identifier:
                keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:39:bc:9a:d9:9e:bc:82:24:b2:61:7b:c4:06:91:20:34:dc:
         96:4d:66:fd:78:cc:4e:0e:af:8e:62:24:15:62:b2:68:cb:fa:
         b6:fb:b9:c7:54:9b:71:9c:60:bb:18:51:55:76:17:b6:b4:16:
         63:71:ed:29:0b:ed:42:59:24:10:97:b9:c3:74:43:d7:4b:c4:
         85:b3:30:c6:38:c7:15:71:52:05:2f:72:bf:2f:fb:1f:4c:b9:
         91:19:97:0c:ad:0a:1a:28:c7:c4:9f:db:91:19:29:21:38:ef:
         6d:9b:c0:4c:75:75:32:af:c5:1b:85:94:c6:80:63:8a:c1:ed:
         96:45:97:60:24:89:d5:2c:f2:21:7f:73:22:bf:72:a2:77:3e:
         ba:fd:f1:b0:34:a8:a8:03:10:69:df:cf:b1:d5:01:26:77:30:
         dc:23:1d:62:3d:58:5d:e1:85:b9:4c:50:73:f0:ee:6e:45:a4:
         fb:64:6b:15:83:5f:1d:2e:05:cb:e5:09:bf:24:b3:53:99:e5:
         63:bb:75:3d:a7:ff:12:53:95:af:ed:07:ae:a6:7c:04:a9:7a:
         71:52:2c:88:63:ef:58:19:27:16:4b:ba:6d:f1:19:0d:2d:5c:
         09:b3:e2:4e:72:62:30:ea:f3:6d:3b:5e:05:bb:c6:df:8c:c9:
         b2:cc:0d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:54:33 2026 by rpki-client