Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
File:                     Kz24XvlSI40ZLc8XDua-scjbA6k.mft (raw, json)
Hash identifier:          3G2gk5KwuKLTSm5oGrov1fwC8FCwzSekrF8eSNddcns=
Subject key identifier:   4C:D2:EA:A1:B0:18:8E:09:C5:F7:8A:97:AF:A6:E7:A6:43:0E:5E:08
Authority key identifier: 2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9
Certificate issuer:       /CN=A919F525/serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
Manifest number:          017C
Signing time:             Sat 03 Oct 2026 05:25:12 +0000
Manifest this update:     Sat 03 Oct 2026 05:25:11 +0000
Manifest next update:     Sat 10 Oct 2026 05:25:11 +0000
Files and hashes:         1: Kz24XvlSI40ZLc8XDua-scjbA6k.crl (hash: GBTXR2AA55drY+U5kjZT0wUTFqIs4H3xQKur8rMzx7M=)
                          2: 4AFF817484EF11EFBDCD721DC4F9AE02.roa (hash: MRSyunFuZV1S3WfmC+o5wAwU5vJtDQmtS6IHzeBNXmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl
                          rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F525, serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9
        Validity
            Not Before: Oct  3 05:25:11 2026 GMT
            Not After : Oct 10 05:25:11 2026 GMT
        Subject: CN=6ac091b7-7bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:de:ce:7f:05:a8:cc:5a:d4:04:b2:b3:01:
                    6b:80:92:0d:5d:af:a2:e2:bf:64:5c:8e:1c:1a:3b:
                    f1:67:76:fb:9c:6a:0e:cc:c2:92:9a:08:cb:c9:86:
                    9c:af:f8:94:bf:af:e5:07:91:4f:3f:80:ea:b3:bd:
                    86:29:80:34:b0:bc:0a:1e:c1:80:9c:78:a4:ea:da:
                    2f:b7:a9:6f:82:90:9e:95:83:34:50:73:2f:3b:56:
                    61:6a:dc:1d:18:03:90:4a:18:1f:5d:2e:88:cf:0d:
                    7f:71:7a:94:86:bf:28:62:4d:c7:68:c1:a8:2e:d2:
                    62:60:1a:7f:b1:0d:91:5f:74:fd:fc:22:f1:34:99:
                    ac:a3:78:9b:8b:a6:90:92:66:3f:a7:e7:65:83:69:
                    d9:65:32:b1:74:c7:12:57:0c:13:37:f2:ad:3e:5c:
                    75:dc:16:81:46:56:b2:e4:5b:46:52:78:8c:65:ea:
                    58:46:24:4b:c7:2b:0f:0b:73:f3:d2:10:45:0b:fb:
                    50:a8:dc:b6:96:85:a1:7b:69:c3:c2:de:77:01:5e:
                    a6:23:25:c5:b0:62:db:b6:10:94:f7:bb:d5:a4:7f:
                    7f:3c:a8:00:6f:fb:7a:77:2c:e9:21:77:37:94:71:
                    34:63:62:79:91:2c:89:b6:58:85:67:14:4b:ac:ca:
                    f6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D2:EA:A1:B0:18:8E:09:C5:F7:8A:97:AF:A6:E7:A6:43:0E:5E:08
            X509v3 Authority Key Identifier:
                keyid:2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1e:2c:2e:9c:b1:9e:fd:5e:74:f8:1f:e9:0f:e9:94:7a:6b:
         fe:37:32:81:62:19:94:78:33:1f:0f:05:1f:8c:cf:17:42:bc:
         9f:dd:01:2a:ed:3f:45:f6:91:f2:f9:8a:0e:2c:98:60:62:71:
         a5:46:fd:1c:09:7e:2b:6f:c9:24:99:e0:bc:a3:ba:ef:9d:87:
         6d:0b:00:86:78:d8:db:55:90:6e:86:9e:06:51:63:24:75:5f:
         82:c5:52:7f:13:5a:09:26:86:46:68:e4:40:49:02:e4:36:f3:
         e9:f8:37:18:b1:03:f9:6f:5c:b7:9b:ae:b8:9c:83:10:ea:c8:
         b7:0e:76:f7:dc:fc:a8:05:5b:a9:13:cd:39:63:9b:bd:d5:6f:
         2c:27:e8:15:15:58:11:c5:69:70:33:a6:8a:0e:4e:52:d5:f7:
         ca:02:2c:dc:02:c8:ff:6d:ac:33:1f:d8:3f:53:3d:7e:41:28:
         19:5f:46:e5:d8:68:56:c9:90:2c:bb:a9:69:14:83:2d:73:0c:
         f3:3e:f4:da:71:07:b9:e7:ab:33:4d:4b:28:39:3f:de:72:87:
         d0:c1:c6:41:f9:b9:b5:8e:1b:ef:16:18:c9:8c:a7:2c:1e:1e:
         e7:f7:f7:3a:51:13:12:bb:81:9e:a6:31:96:d3:d7:e1:b1:a1:
         06:fd:3d:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY1MjUxMTAvBgNVBAUTKDJCM0RCODVFRjk1MjIzOEQxOTJEQ0YxNzBFRTZCRUIx
QzhEQjAzQTkwHhcNMjYxMDAzMDUyNTExWhcNMjYxMDEwMDUyNTExWjAYMRYwFAYD
VQQDEw02YWMwOTFiNy03YmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApKHezn8FqMxa1ASyswFrgJINXa+i4r9kXI4cGjvxZ3b7nGoOzMKSmgjLyYac
r/iUv6/lB5FPP4Dqs72GKYA0sLwKHsGAnHik6tovt6lvgpCelYM0UHMvO1Zhatwd
GAOQShgfXS6Izw1/cXqUhr8oYk3HaMGoLtJiYBp/sQ2RX3T9/CLxNJmso3ibi6aQ
kmY/p+dlg2nZZTKxdMcSVwwTN/KtPlx13BaBRlay5FtGUniMZepYRiRLxysPC3Pz
0hBFC/tQqNy2loWhe2nDwt53AV6mIyXFsGLbthCU97vVpH9/PKgAb/t6dyzpIXc3
lHE0Y2J5kSyJtliFZxRLrMr2lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzS6qGw
GI4JxfeKl6+m56ZDDl4IMB8GA1UdIwQYMBaAFCs9uF75UiONGS3PFw7mvrHI2wOp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUyNS9FMTg3MTc3Njg0
RUQxMUVGQjlGRjJENUFDNEY5QUUwMi9LejI0WHZsU0k0MFpMYzhYRHVhLXNjamJB
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0t6MjRYdmxTSTQwWkxjOFhEdWEtc2NqYkE2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjUyNS9FMTg3MTc3Njg0RUQxMUVGQjlGRjJENUFDNEY5QUUwMi9LejI0WHZsU0k0
MFpMYzhYRHVhLXNjamJBNmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFh4sLpyxnv1edPgf6Q/plHpr/jcygWIZlHgzHw8FH4zPF0K8n90BKu0/RfaR
8vmKDiyYYGJxpUb9HAl+K2/JJJngvKO6752HbQsAhnjY21WQboaeBlFjJHVfgsVS
fxNaCSaGRmjkQEkC5Dbz6fg3GLED+W9ct5uuuJyDEOrItw5299z8qAVbqRPNOWOb
vdVvLCfoFRVYEcVpcDOmig5OUtX3ygIs3ALI/22sMx/YP1M9fkEoGV9G5dhoVsmQ
LLupaRSDLXMM8z702nEHueerM01LKDk/3nKH0MHGQfm5tY4b7xYYyYynLB4e5/f3
OlETEruBnqYxltPX4bGhBv09sA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:21:37 2026 by rpki-client