Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
File:                     KJYksuALd009OQ9aCtELW8NfVtg.mft (raw, json)
Hash identifier:          Oc1rzG+DHRk1PlWF84HfPGiIHzMceWNvINC60ecRq5Y=
Subject key identifier:   16:AF:95:0D:15:C1:A6:6B:4A:24:17:D7:BC:22:0C:1A:B3:C6:36:E5
Authority key identifier: 28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8
Certificate issuer:       /CN=A918748C/serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
Certificate serial:       0B87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
Manifest number:          0B62
Signing time:             Sun 20 Sep 2026 19:09:27 +0000
Manifest this update:     Sun 20 Sep 2026 19:09:27 +0000
Manifest next update:     Sun 27 Sep 2026 19:09:27 +0000
Files and hashes:         1: KJYksuALd009OQ9aCtELW8NfVtg.crl (hash: ABWH92CNxE/ra/1qoJA7qZPDruKG6VP/aShvWo6bLHA=)
                          2: 53C1347EB60D11F0AD4B0751C4F9AE02.roa (hash: cYz3Bt/NzG3jsypwU8wZb70N3q4qzO53RXOkiUxW3vQ=)
                          3: DCE066622C7811EC97C8D979C4F9AE02.roa (hash: vHCnER0HBPmI45K/3yOU34zHXm+KOmRlpynpCbK+T3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl
                          rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2951 (0xb87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918748C, serialNumber=289624B2E00B774D3D390F5A0AD10B5BC35F56D8
        Validity
            Not Before: Sep 20 19:09:27 2026 GMT
            Not After : Sep 27 19:09:27 2026 GMT
        Subject: CN=6ab02f67-49b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:37:4a:e7:e7:6f:c3:78:9d:2b:c8:f1:ed:
                    99:1f:bb:4e:41:cf:44:28:8b:27:f8:bc:5a:57:f5:
                    de:54:a2:91:a6:92:8d:0f:4e:be:d5:02:31:ca:cf:
                    54:4e:c3:1e:98:a1:cd:8e:a1:25:e9:b4:d9:c4:f6:
                    d3:36:14:34:84:2d:88:96:42:a2:1c:f4:0e:b3:64:
                    46:ab:9d:dd:da:19:a2:0b:60:a4:80:00:06:76:f3:
                    eb:9d:a3:4d:a7:5e:12:06:8a:7e:ee:09:88:b3:1a:
                    81:40:70:30:e9:b5:6d:23:1a:0b:e6:8b:43:f8:2b:
                    8b:6b:0a:af:43:d0:80:81:48:08:ca:67:ab:17:b8:
                    12:10:1c:e3:0e:d5:6e:a9:ba:34:1f:12:62:1f:bb:
                    bc:a9:a0:02:f3:de:01:44:3c:38:49:d3:3c:4d:66:
                    ef:bc:f1:19:3c:3e:d8:84:56:2a:34:aa:25:66:ab:
                    b5:5f:a5:8d:b1:af:5c:cf:ac:ad:5a:d1:32:e3:68:
                    f4:df:f2:86:d4:23:6b:bc:e6:96:db:a6:0a:43:ed:
                    12:9c:dc:b0:62:57:aa:01:08:53:65:ad:73:2d:eb:
                    27:f1:66:74:0c:59:52:c9:ad:65:a9:2a:25:38:4e:
                    eb:84:21:47:bc:63:a1:73:91:23:9d:25:ee:55:9a:
                    d0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AF:95:0D:15:C1:A6:6B:4A:24:17:D7:BC:22:0C:1A:B3:C6:36:E5
            X509v3 Authority Key Identifier:
                keyid:28:96:24:B2:E0:0B:77:4D:3D:39:0F:5A:0A:D1:0B:5B:C3:5F:56:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KJYksuALd009OQ9aCtELW8NfVtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918748C/A74DA77264B411EAB38A340DC4F9AE02/KJYksuALd009OQ9aCtELW8NfVtg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ed:39:7f:a4:28:d4:36:d3:53:db:77:37:ee:fd:e8:76:50:
         39:a8:fa:95:1d:35:a5:79:08:3d:55:75:a2:40:33:7d:b9:1f:
         d7:cc:82:20:14:52:0e:55:42:ce:a4:9e:4a:8a:f6:a8:66:c9:
         44:7e:ef:c6:26:0c:8d:72:04:ae:8e:25:65:4f:cf:a0:23:41:
         8a:5d:4f:d2:58:ae:99:90:3c:e4:0f:20:ef:bc:15:b8:ae:e7:
         c6:e6:b0:fe:32:c1:5d:02:31:1f:d4:70:07:20:36:07:40:fd:
         83:96:1d:6f:59:3c:44:02:fb:52:b6:db:17:f7:d7:65:5c:4c:
         f8:79:31:4e:ee:95:df:00:b9:cd:96:d4:63:03:9b:02:bc:89:
         7a:c7:a6:cb:b9:e9:b0:e3:c1:34:2c:1a:c6:5b:b0:6d:f8:f2:
         81:69:9e:62:6e:16:22:f5:7e:4c:c3:6f:04:9f:c6:f0:d2:74:
         89:9f:8a:c3:ab:42:bd:0d:a0:19:35:ad:8e:8c:d8:a1:9a:91:
         e2:b0:9b:70:e8:a8:6c:5a:d7:45:f0:d0:e5:34:38:61:6e:18:
         be:20:da:80:13:ed:ec:a9:d6:ac:6b:e1:91:1c:1b:7e:01:07:
         6c:41:db:6e:fe:03:17:4d:bb:ac:a7:ac:1b:bf:f0:bc:fe:55:
         52:a6:16:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:10:29 2026 by rpki-client