Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
File:                     m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json)
Hash identifier:          huqoqZpXpg3EZe5EWlsHFJWn0XvsTSpBt+Bfz3HUjrc=
Subject key identifier:   BF:1D:10:69:0E:E9:2C:D2:DA:A6:78:20:7E:F5:F3:1D:E6:69:42:53
Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
Certificate issuer:       /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Certificate serial:       06AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
Manifest number:          069B
Signing time:             Sun 20 Sep 2026 22:20:49 +0000
Manifest this update:     Sun 20 Sep 2026 22:20:49 +0000
Manifest next update:     Sun 27 Sep 2026 22:20:49 +0000
Files and hashes:         1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: mUERc3uWmKa1HudocA1mAjXeUNW7G2agPe706xe3mqA=)
                          2: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: B0Y1Ftxlxts1itlnnfx/vOUQhD3NVD0psDMYkEt54zY=)
                          3: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: W7i3uG5Cv7+btgXKgHVPwYJhNORxSnDJ11busxfZwpE=)
                          4: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: LmMvaPf53ua9EqCaZQMYjzev0cq6fDEk3G0cTqtvmZw=)
                          5: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: IMNAWHTLkWxMdEc+cnttaYRy8kitBgpU/B7G6rCH2UM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
                          rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708 (0x6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
        Validity
            Not Before: Sep 20 22:20:49 2026 GMT
            Not After : Sep 27 22:20:49 2026 GMT
        Subject: CN=6ab05c41-4529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:44:43:9a:91:f8:39:30:86:62:52:16:c7:
                    a7:28:91:ea:97:a1:9b:84:32:1a:a7:33:a5:e9:e1:
                    61:9f:f7:a0:35:bf:90:a4:4e:c3:5b:f4:73:0f:30:
                    fe:c4:a0:cf:7a:19:0b:ae:30:07:a8:6f:3c:ad:4c:
                    1d:ad:04:fd:65:3f:e8:35:d1:40:b3:ab:e1:ab:c8:
                    76:e7:c7:06:5a:41:1f:c0:55:fc:81:af:54:4c:78:
                    5b:cb:ad:b5:2f:e0:0a:29:73:2b:2a:81:e7:d9:2c:
                    2f:84:b5:5b:bd:0b:74:5c:f0:8a:a2:ce:17:1b:fb:
                    97:6e:18:e0:c9:af:29:59:cf:13:59:ca:66:da:df:
                    3c:56:37:22:bf:15:3d:d6:4b:96:80:bf:8d:1f:ac:
                    20:36:0f:f3:dd:ff:45:e0:3e:62:ac:d3:a4:7b:7a:
                    90:5f:75:8c:15:48:07:f0:58:2a:dc:da:24:bd:7b:
                    de:e2:97:cb:f0:6c:74:e2:0b:da:a9:fa:bf:b7:2c:
                    ec:e4:8b:4c:75:f1:05:fa:77:e2:3a:d1:3f:92:71:
                    31:7a:15:1f:bd:56:94:f2:c5:03:69:45:ae:c7:d8:
                    24:99:29:1a:40:b9:91:7e:98:9b:93:b4:af:82:b7:
                    64:d2:76:84:ed:19:d6:f8:cc:5b:da:d8:90:53:bd:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1D:10:69:0E:E9:2C:D2:DA:A6:78:20:7E:F5:F3:1D:E6:69:42:53
            X509v3 Authority Key Identifier:
                keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a6:08:74:a9:48:37:42:29:f6:1d:90:53:83:5b:b1:fe:ff:
         9b:5d:ea:4d:75:a8:10:ec:e1:4a:a0:1c:77:66:25:55:99:2a:
         29:e7:f2:4e:ed:01:9b:db:a3:ea:a1:ce:c9:80:f4:dd:da:f8:
         0c:77:08:4d:75:61:36:ba:dd:38:bc:fc:d2:95:02:d0:55:4b:
         b6:17:d1:79:59:aa:3d:bf:51:3f:91:03:d9:02:07:df:d5:4a:
         7c:e0:a9:4f:85:58:7e:44:c2:20:a6:12:af:b1:7e:f9:22:bd:
         2d:bd:f7:26:d8:53:11:3a:09:11:18:50:73:ce:32:e9:fd:aa:
         ec:cf:04:6e:40:fc:37:0e:0b:42:c4:e8:6f:d5:e7:fd:21:16:
         c5:f5:c1:85:a6:ce:84:10:d4:80:d4:1d:09:14:d3:e2:c6:11:
         20:e8:27:74:43:9e:4d:6a:04:3c:59:e3:3b:66:f9:cf:a5:3e:
         29:d9:ce:4a:be:ea:0f:d1:76:e8:0f:b8:5a:0f:76:63:40:b0:
         b7:86:5d:bf:2a:d1:99:1a:4b:f3:2f:be:2b:dc:fb:e9:a1:53:
         cc:37:c1:55:37:7c:52:f4:c4:bb:8c:3f:05:a6:9b:03:ae:46:
         f9:5c:e8:84:5d:bc:b6:06:18:d3:e2:b2:80:c9:4d:a6:87:31:
         22:ea:42:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:35:02 2026 by rpki-client