Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
File:                     KUr5pNDtlrY5KVxYc9z-KJ8no20.mft (raw, json)
Hash identifier:          0vN7hu3SjJDlZynKP/6MVG5fqfnwqQa27MJQkLIiloE=
Subject key identifier:   75:1F:22:47:58:FC:33:16:31:79:7C:7D:2B:96:0B:D1:03:0B:13:7A
Authority key identifier: 29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D
Certificate issuer:       /CN=A9199095/serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
Manifest number:          5A
Signing time:             Sun 11 Oct 2026 08:47:53 +0000
Manifest this update:     Sun 11 Oct 2026 08:47:53 +0000
Manifest next update:     Sun 18 Oct 2026 08:47:53 +0000
Files and hashes:         1: KUr5pNDtlrY5KVxYc9z-KJ8no20.crl (hash: hJHEEyVqoEnRPvJOQNbe84wfJDoYbju+jwL0UAi70l4=)
                          2: 80748E243E2C11F19772AA47B7833773.roa (hash: dDD9Ne2VF73KrNd/l166hkPzmv6wE6K5s6s/cWNJHfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl
                          rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 07:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199095, serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D
        Validity
            Not Before: Oct 11 08:47:53 2026 GMT
            Not After : Oct 18 08:47:53 2026 GMT
        Subject: CN=6acb4d39-3666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:b2:36:71:2f:90:47:22:1e:c1:0d:ec:94:
                    aa:c1:4b:03:31:41:fe:35:24:f2:39:10:17:9a:d5:
                    7a:55:4c:21:c9:b7:5a:e1:2c:c7:a5:91:17:6c:92:
                    f1:db:c0:bb:0a:7a:1f:1f:a4:7a:fd:21:19:69:7e:
                    91:99:f3:5b:bf:a6:b5:50:b0:27:9e:87:6a:33:d3:
                    18:2f:e1:21:3a:1b:07:a4:ac:35:f3:d3:43:46:69:
                    e4:d3:85:ff:44:c8:ca:34:e9:56:24:8a:5a:57:c6:
                    c2:45:ff:29:32:c0:fd:9d:7a:c2:e8:fa:ac:36:de:
                    98:05:b0:ad:e5:23:ba:d9:a6:25:67:6e:a8:a8:f2:
                    1e:5c:97:8c:22:14:d0:ca:a4:41:f0:a6:e0:67:81:
                    e6:64:a1:bc:43:ac:2e:6d:59:49:1b:99:ab:eb:31:
                    dc:cb:51:1d:8a:70:91:32:16:55:fc:73:34:53:f2:
                    ff:d4:e2:3d:c5:be:30:ce:68:08:b0:f2:9b:5d:96:
                    f1:b3:f8:39:58:62:23:86:f5:80:60:ef:b2:3e:10:
                    2c:32:d3:84:67:22:33:43:a0:2f:f3:27:68:dc:88:
                    8c:b4:ef:3b:b9:23:6f:c0:2e:2f:d3:62:c3:fa:b2:
                    f7:81:24:fa:83:a3:9d:0e:e0:31:79:ff:77:4b:00:
                    78:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1F:22:47:58:FC:33:16:31:79:7C:7D:2B:96:0B:D1:03:0B:13:7A
            X509v3 Authority Key Identifier:
                keyid:29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:d3:04:ca:2f:9a:83:7d:29:08:71:27:6e:8b:b3:e8:9b:d9:
         a5:eb:4b:a7:48:2f:8f:98:8f:fe:86:80:62:6f:39:1d:70:3c:
         ac:bc:45:8d:c4:88:3f:bd:f9:7d:f0:f3:e4:6a:b4:f2:d7:07:
         43:68:f3:da:70:fe:43:ef:5a:39:15:b8:8d:69:97:3b:b9:cf:
         31:7d:6e:3f:4f:5b:f1:30:9f:a3:67:94:3c:25:44:27:0c:bd:
         b9:af:df:ed:54:4c:25:f3:a7:d3:98:30:fe:3a:a3:7e:1f:02:
         20:c4:0e:37:6d:9d:88:7c:d3:bf:55:28:b1:d2:15:28:79:d1:
         1c:df:66:38:34:71:83:be:54:51:31:45:23:df:a4:57:22:a7:
         f7:65:0d:42:b9:aa:06:84:ef:80:00:82:a2:0a:75:46:f0:d2:
         f1:ce:a3:27:ce:fa:4d:19:32:32:fa:b2:1f:ba:9f:f3:ec:67:
         2f:41:a8:ab:60:66:8b:40:03:88:11:98:74:43:ea:da:28:21:
         59:a1:14:06:03:17:59:81:4d:d8:13:91:50:f6:4c:9e:9b:41:
         5b:d4:78:83:81:3f:6b:4d:18:b0:8e:a6:58:eb:d7:02:69:df:
         74:42:8c:06:19:1c:a1:92:a5:7d:07:9c:6c:e7:34:2c:b1:52:
         b2:e5:53:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:49:52 2026 by rpki-client