Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
File:                     kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json)
Hash identifier:          QCaYAjCxueGc3KrgopPFsEJeaAPoBxjxRcJHEa5zkMc=
Subject key identifier:   98:25:4C:39:9D:71:32:83:F7:64:B3:51:0C:B7:83:EE:D7:3A:46:E7
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Certificate issuer:       /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial:       0C96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
Manifest number:          0C0A
Signing time:             Mon 28 Sep 2026 19:15:05 +0000
Manifest this update:     Mon 28 Sep 2026 19:15:05 +0000
Manifest next update:     Mon 05 Oct 2026 19:15:05 +0000
Files and hashes:         1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: zGixFwKGwXHlbU0PvTxBYQOcjjXOLFRke4hzs8r9r/g=)
                          2: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: Ajj1+XIv2lN+bJkfK3jiIAMbBKfMDrx1rrpjChWFrTw=)
                          3: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 6nAz8JDLRXZpp0YQMDx9IUtnZhPPPPFT4QGkXVk5rN0=)
                          4: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: ROZc9LLExxAKSmBJDb4gQXjvPcIeYOybm5faBsQ7IsY=)
                          5: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: l19IcHrq3/s7bkVZYJxzqFC2aowTPUonke4uOMcPczc=)
                          6: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: +GV9xhTlFORtjXxee7C6hBiagIilBpwJ2zPhAY4Q/SY=)
                          7: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: Ty4ZYwQyvMEEFSGfaZFvWi2WTAO0bLvXbSZDNMOJw/s=)
                          8: 5180A6FE1CD811F196994CA9363D8C67.roa (hash: SWKDhCz2E/CT6y8saxZMqLsBGiJ4AZkgU/gomKXe6eo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
                          rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 19:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3222 (0xc96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
        Validity
            Not Before: Sep 28 19:15:05 2026 GMT
            Not After : Oct  5 19:15:05 2026 GMT
        Subject: CN=6ababcb9-05ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:9e:cc:de:dd:10:03:db:96:81:4e:26:f9:
                    c7:bd:83:4b:b3:e6:98:48:38:f5:cf:87:37:a6:5a:
                    60:0b:ea:f7:20:c3:80:eb:99:6f:3b:38:0a:20:b4:
                    c7:d3:7a:26:7d:95:9c:22:b8:e3:20:ab:f0:af:46:
                    a2:97:5c:e2:bb:84:dd:ff:e9:9b:bf:32:c6:ad:60:
                    b4:bd:e8:59:12:69:a4:95:d2:71:f4:d9:5f:52:91:
                    76:21:4a:38:ac:64:65:04:e5:bb:9c:2a:64:27:1d:
                    d7:f3:00:d8:7d:8c:7f:f0:b2:ef:95:bb:d4:2b:1e:
                    8f:f3:e4:9a:b9:2c:a7:7d:90:76:b4:62:23:5d:8e:
                    b8:c5:fc:75:49:15:46:be:db:76:cb:6b:df:07:cf:
                    b9:53:e2:ef:3d:ed:96:0f:45:32:3c:ca:96:35:67:
                    54:c6:95:7a:43:92:ed:32:c5:40:4e:9d:6f:e3:81:
                    e7:b1:b3:46:d3:a2:fa:54:7f:79:44:f9:ff:c4:21:
                    fa:8c:37:00:7b:6a:1f:09:b6:60:59:49:6a:75:b1:
                    10:54:71:59:fe:11:79:7d:b5:f7:84:00:9e:e7:e1:
                    6e:43:86:a2:1b:e3:cb:4f:ce:2f:fc:96:a5:01:0f:
                    a4:c2:9b:97:bd:b6:ae:02:dd:91:b1:05:22:c8:23:
                    a4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:25:4C:39:9D:71:32:83:F7:64:B3:51:0C:B7:83:EE:D7:3A:46:E7
            X509v3 Authority Key Identifier:
                keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:4f:f4:14:e8:7a:1d:16:e0:fc:ae:ab:ad:e4:5b:e4:31:ee:
         23:51:29:2d:8b:01:84:99:2f:8e:83:1d:14:65:d6:21:f5:11:
         0b:91:92:c4:c3:d2:c6:20:e4:0c:8b:34:60:7d:54:fd:d7:66:
         89:76:f2:19:ca:00:f5:b9:10:eb:75:ab:02:67:df:23:36:21:
         39:82:56:2f:ca:3e:30:3f:55:19:93:92:a8:86:fe:22:76:a9:
         b3:c5:38:b8:33:8f:88:75:5c:93:5c:a3:9b:d0:52:84:3e:1f:
         b6:b8:9c:9f:41:59:2a:82:a2:28:a0:ad:35:ae:69:2f:4c:b2:
         74:36:84:8f:36:6d:07:65:a9:59:40:cf:f1:d1:db:59:92:5a:
         07:fa:6c:e9:82:13:bc:71:63:6b:c1:98:e8:2e:6b:56:1d:3c:
         d6:a3:7b:e7:57:ed:6a:c5:9b:9a:9d:b2:51:c9:52:02:f6:b6:
         41:1d:3c:29:0b:5e:9f:ab:df:fd:db:54:0f:0c:14:f7:d3:24:
         cb:73:7a:47:ba:62:43:33:6c:78:57:de:2e:ef:c1:68:5c:ff:
         16:29:42:0d:f2:27:0b:7a:5e:9f:78:ec:72:8f:1f:40:85:51:
         54:d9:a6:2b:4b:e2:ee:ce:22:d0:62:28:97:fa:05:53:48:2e:
         4d:d1:9f:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw
QjJEQTAxREUwHhcNMjYwOTI4MTkxNTA1WhcNMjYxMDA1MTkxNTA1WjAYMRYwFAYD
VQQDEw02YWJhYmNiOS0wNWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2uezN7dEAPbloFOJvnHvYNLs+aYSDj1z4c3plpgC+r3IMOA65lvOzgKILTH
03omfZWcIrjjIKvwr0ail1ziu4Td/+mbvzLGrWC0vehZEmmkldJx9NlfUpF2IUo4
rGRlBOW7nCpkJx3X8wDYfYx/8LLvlbvUKx6P8+SauSynfZB2tGIjXY64xfx1SRVG
vtt2y2vfB8+5U+LvPe2WD0UyPMqWNWdUxpV6Q5LtMsVATp1v44HnsbNG06L6VH95
RPn/xCH6jDcAe2ofCbZgWUlqdbEQVHFZ/hF5fbX3hACe5+FuQ4aiG+PLT84v/Jal
AQ+kwpuXvbauAt2RsQUiyCOkxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJglTDmd
cTKD92SzUQy3g+7XOkbnMB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5
NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB
ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDdBMi9CNTc3M0FBQzU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82
Sk9DZG5HTVhpbHdMTGFBZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv0/0FOh6HRbg/K6rreRb5DHuI1EpLYsBhJkvjoMdFGXWIfURC5GSxMPSxiDk
DIs0YH1U/ddmiXbyGcoA9bkQ63WrAmffIzYhOYJWL8o+MD9VGZOSqIb+Inaps8U4
uDOPiHVck1yjm9BShD4ftricn0FZKoKiKKCtNa5pL0yydDaEjzZtB2WpWUDP8dHb
WZJaB/ps6YITvHFja8GY6C5rVh081qN751ftasWbmp2yUclSAva2QR08KQten6vf
/dtUDwwU99Mky3N6R7piQzNseFfeLu/BaFz/FilCDfInC3pen3jsco8fQIVRVNmm
K0vi7s4i0GIol/oFU0guTdGfbQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 01:32:55 2026 by rpki-client