Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
File:                     _KtbpyYSYFeOSNmqwBIRqzpaIwk.mft (raw, json)
Hash identifier:          vsFZaURtGjeWdjN5Ag6wGJfd4nUNsjQOkxhf07rCjFI=
Subject key identifier:   0F:03:6E:5F:EE:F4:10:80:3A:F6:83:CB:54:42:49:21:5C:D8:5F:1B
Authority key identifier: FC:AB:5B:A7:26:12:60:57:8E:48:D9:AA:C0:12:11:AB:3A:5A:23:09
Certificate issuer:       /CN=A9186214/serialNumber=FCAB5BA7261260578E48D9AAC01211AB3A5A2309
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
Manifest number:          5D
Signing time:             Tue 22 Sep 2026 15:30:53 +0000
Manifest this update:     Tue 22 Sep 2026 15:30:52 +0000
Manifest next update:     Tue 29 Sep 2026 15:30:52 +0000
Files and hashes:         1: _KtbpyYSYFeOSNmqwBIRqzpaIwk.crl (hash: 60iRy4jZNL5IVczC5Cx2fvGk8gyBj6uqdsFp7v4JJwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=FCAB5BA7261260578E48D9AAC01211AB3A5A2309
        Validity
            Not Before: Sep 22 15:30:52 2026 GMT
            Not After : Sep 29 15:30:52 2026 GMT
        Subject: CN=6ab29f2d-53fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:67:d1:c6:a7:99:91:3b:ff:02:73:a7:3d:
                    4e:e1:ec:56:39:a7:89:e4:59:1d:7b:92:d9:eb:9f:
                    bc:c9:d6:df:e5:ac:a9:b8:4f:e0:46:d8:d8:1a:19:
                    ed:2e:15:8a:bf:7e:2f:ae:40:83:d5:70:f1:d3:5b:
                    e4:a3:dd:9b:68:d3:23:8b:00:72:7f:2e:4b:82:89:
                    bb:61:ac:6d:78:e9:12:12:ff:34:c5:6c:3d:4e:c9:
                    bd:e5:91:e9:e5:b5:01:0b:4c:72:24:fb:80:f9:b8:
                    c5:e6:bf:ad:fe:81:b5:c8:4b:b4:db:e2:57:12:c0:
                    c0:82:fc:dc:ca:70:5b:88:d4:02:c2:ea:38:f4:91:
                    26:e6:6e:a7:09:7c:61:90:74:e8:0e:8d:09:38:ab:
                    d6:91:1a:1d:22:25:85:86:9c:0a:9c:fb:b5:61:40:
                    b6:9e:d4:79:00:48:34:78:ca:50:41:f0:4a:98:0b:
                    10:14:da:cf:d1:21:a3:9e:42:05:38:71:4c:1d:00:
                    93:0f:f6:91:77:01:c4:53:1e:65:36:00:90:6b:1a:
                    b9:4e:ca:dc:0b:7e:af:a0:b7:19:bb:78:ba:46:95:
                    7c:3e:b3:d0:62:30:32:f2:5b:6e:c6:06:a6:01:25:
                    99:5e:5e:5e:a7:e7:b3:68:fb:31:f9:66:41:36:ee:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:03:6E:5F:EE:F4:10:80:3A:F6:83:CB:54:42:49:21:5C:D8:5F:1B
            X509v3 Authority Key Identifier:
                keyid:FC:AB:5B:A7:26:12:60:57:8E:48:D9:AA:C0:12:11:AB:3A:5A:23:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:35:97:74:be:a5:e2:72:f5:81:df:62:46:f5:c2:e0:be:78:
         03:76:bf:db:93:19:fb:6e:22:d2:da:5e:84:40:8b:d5:06:6f:
         8c:42:64:19:45:70:60:3b:37:cd:3b:5c:fa:6c:5f:e0:f1:4d:
         0b:b6:ec:7b:ca:e6:4a:f6:bb:5b:55:5c:31:5b:79:c1:80:8c:
         c2:12:30:a0:9d:fa:43:1f:53:6b:37:5d:98:af:a8:fe:14:b9:
         b4:4e:7d:e3:82:fc:8d:ca:0d:01:53:93:79:79:52:b7:fe:d2:
         56:c7:42:dc:90:21:ba:9e:db:27:d3:6b:ef:af:22:b1:ac:ae:
         63:80:75:1d:06:bd:9f:0b:b7:72:54:aa:8c:83:f4:ec:8b:4b:
         fa:76:9a:70:75:7c:be:86:5f:15:08:16:a2:dc:83:bd:0f:10:
         67:59:fb:bd:c5:be:6c:0c:a6:75:58:5e:58:71:7d:df:4f:0a:
         fc:d0:26:f0:12:08:10:ea:9d:77:be:10:31:46:58:0f:6b:79:
         3c:54:3b:d6:14:ab:30:f5:d8:f2:a8:5c:18:8a:32:b8:9e:c6:
         90:26:fa:5b:4b:dc:89:02:41:ff:d6:36:3e:92:23:1d:97:0b:
         22:96:01:a9:63:82:4e:56:f3:29:ac:3b:14:b7:5f:46:25:45:
         cb:2a:08:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:06:28 2026 by rpki-client