Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
File:                     KTzh3tGmQEsAssDM-z886vshpQg.mft (raw, json)
Hash identifier:          TwdrvbQVg1jN6kXQSFxl4tdU5TwWLjlyI9enzKTklzs=
Subject key identifier:   C3:1B:DD:84:2B:D0:56:2A:1C:A9:14:B1:BA:34:83:B1:DB:AC:C2:DD
Authority key identifier: 29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
Certificate issuer:       /CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
Manifest number:          01A2
Signing time:             Sun 27 Sep 2026 04:38:06 +0000
Manifest this update:     Sun 27 Sep 2026 04:38:05 +0000
Manifest next update:     Sun 04 Oct 2026 04:38:05 +0000
Files and hashes:         1: KTzh3tGmQEsAssDM-z886vshpQg.crl (hash: wQ/+wQ7IqN5m9x7QBNwGX9a4nGvkdpy//8XY4cK01ts=)
                          2: 81AA7D1A3E5811EFAE13B943C4F9AE02.roa (hash: AmuO5Mz7Oe3J6VbUWmMhACa7zZVIB8sI5+X4h7QzjH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl
                          rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790EC, serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
        Validity
            Not Before: Sep 27 04:38:05 2026 GMT
            Not After : Oct  4 04:38:05 2026 GMT
        Subject: CN=6ab89dae-2e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:55:60:0d:92:46:08:ee:a8:ab:f9:60:d3:53:
                    ba:f7:78:97:e5:68:e0:22:61:4e:3b:2f:16:1f:56:
                    a3:fd:ce:15:76:68:d4:1c:3c:fb:ab:c1:83:85:43:
                    1d:bc:48:d3:f4:9f:69:ea:7f:0f:47:73:6b:96:c8:
                    49:dd:79:50:46:15:f1:ce:e4:e7:b9:56:db:64:c4:
                    2d:e4:33:4c:50:ea:3c:ff:e1:e2:c7:bc:73:d7:46:
                    7e:4a:97:b5:e2:12:ba:8d:91:c1:8f:1d:29:81:89:
                    4e:18:2a:19:e5:4a:e4:91:0b:62:8c:a9:3a:00:2c:
                    8a:bf:77:83:53:ee:52:57:09:63:21:3d:79:59:35:
                    b7:55:6f:9d:77:66:77:a1:27:7c:d5:b6:cf:a7:da:
                    dd:6c:c4:71:4c:cc:8f:7d:75:c5:38:9a:b0:0f:06:
                    e3:5c:38:f9:a0:29:42:d8:28:87:e5:3b:20:5f:5c:
                    55:6b:6f:7e:4d:86:e3:74:a2:36:54:13:35:6b:c2:
                    6c:d7:cc:ed:87:12:9e:ac:63:a6:b1:23:d7:a4:f6:
                    8d:5b:79:77:b8:64:e7:ba:80:1d:bc:33:56:f2:f6:
                    0a:8d:13:0d:ee:90:aa:5d:b2:ec:7c:6e:7b:2b:da:
                    85:c3:9e:b4:77:1c:3b:11:60:01:3a:0f:18:b5:12:
                    46:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1B:DD:84:2B:D0:56:2A:1C:A9:14:B1:BA:34:83:B1:DB:AC:C2:DD
            X509v3 Authority Key Identifier:
                keyid:29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c9:16:36:ab:a6:dd:97:18:98:9c:dd:c4:5f:b2:5f:dc:a2:
         a6:49:bc:e6:bf:3f:05:d6:5c:e4:fc:c6:bd:27:1b:c8:33:b8:
         80:68:a9:bf:81:39:95:76:21:d5:61:3f:40:e3:57:5a:69:15:
         21:91:72:4d:58:88:57:a7:48:a4:88:db:95:ef:2d:df:86:cc:
         ba:bf:8e:4e:8e:d9:fb:b3:2b:16:ef:3a:8e:bb:ce:e3:80:64:
         2f:00:1b:8c:39:6a:35:fc:64:90:d3:05:b7:56:31:2e:1f:81:
         11:41:fb:b2:dd:bf:bb:04:95:ac:4d:2f:b8:f6:19:7e:33:04:
         a4:52:26:ca:35:d6:d9:7d:9f:e9:5f:b2:4c:fe:30:68:8f:b3:
         c9:f8:5a:a8:f4:ed:d2:58:1d:cc:32:d5:94:30:91:96:58:09:
         41:3a:bb:13:3d:27:e6:67:8a:18:66:8e:2d:89:2d:92:78:d3:
         9f:1b:69:28:36:ad:12:f0:d5:4e:cb:a1:f0:60:25:e1:89:01:
         8e:e4:5a:93:4f:a1:57:b3:ec:75:65:12:40:b1:f8:db:a6:fd:
         ae:33:39:30:36:61:b6:53:f8:4b:4a:eb:f1:e0:1b:45:dc:5d:
         43:32:9a:f9:9e:db:f0:41:f8:12:aa:5b:54:fb:24:16:83:14:
         e3:35:f4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:54:02 2026 by rpki-client