Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft
File:                     rt-KIRgobseQH6KolLlMoQCj_Xg.mft (raw, json)
Hash identifier:          wW2w1gqelPIi50fhoJEwiXeWMicJANjAjex+aUajLhU=
Subject key identifier:   35:56:48:1A:C8:71:70:99:A9:52:83:C4:AD:F2:04:D5:FF:F6:A2:68
Authority key identifier: AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78
Certificate issuer:       /CN=A91B13FE/serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft
Manifest number:          F3
Signing time:             Tue 13 Oct 2026 06:59:32 +0000
Manifest this update:     Tue 13 Oct 2026 06:59:32 +0000
Manifest next update:     Tue 20 Oct 2026 06:59:32 +0000
Files and hashes:         1: rt-KIRgobseQH6KolLlMoQCj_Xg.crl (hash: D66v/YyVXQVbRcR7pux9mbQ8fjdv8R+33vZf0oA/i88=)
                          2: 077331D0564511F09ED8993AC4F9AE02.roa (hash: xgGDqEfVF0cc4GOHOg37rgh1uqyxP6z93iQVdeBssXU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl
                          rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 06:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13FE, serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78
        Validity
            Not Before: Oct 13 06:59:32 2026 GMT
            Not After : Oct 20 06:59:32 2026 GMT
        Subject: CN=6acdd6d4-89f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a2:0e:28:d1:62:c4:14:03:44:cd:89:7c:cc:
                    8b:52:fe:6c:74:92:9d:4b:24:8b:8b:89:5e:a1:59:
                    0b:ec:29:ca:e0:62:96:20:e9:36:3e:76:59:f8:0f:
                    49:ac:bf:d2:7b:73:44:2b:ac:f4:b9:a0:72:f5:5b:
                    1e:7d:a4:57:4d:e0:1d:d9:60:a7:3f:c5:1a:50:68:
                    ce:57:31:aa:02:51:b0:b0:17:d7:10:6d:cc:11:27:
                    00:b9:5f:95:0a:8e:5a:01:51:3f:12:33:d7:90:aa:
                    0e:18:e7:91:c2:97:c0:79:31:1a:a9:05:db:a2:68:
                    9f:02:87:63:c0:93:d1:8e:b8:f9:92:9a:7b:4d:bd:
                    5b:9e:04:ce:91:a2:63:26:77:c2:10:d1:88:aa:d7:
                    a1:1f:f5:54:a8:2d:cd:73:39:ed:66:6e:30:ee:21:
                    36:87:01:02:39:3e:2e:1b:31:17:ea:ad:75:0e:81:
                    a4:86:2c:90:ca:24:7b:37:88:43:02:16:74:fb:f0:
                    98:f6:27:9e:36:fb:50:3b:33:85:9c:b6:47:90:b9:
                    cd:c6:ff:f5:cf:e5:76:a8:74:13:c4:0f:7e:cb:24:
                    8b:83:fb:7a:7e:bf:0a:3c:36:9a:02:a5:ab:60:20:
                    b0:bf:a0:d6:cb:46:26:d9:87:c4:ba:ef:a6:2a:94:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:56:48:1A:C8:71:70:99:A9:52:83:C4:AD:F2:04:D5:FF:F6:A2:68
            X509v3 Authority Key Identifier:
                keyid:AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f1:59:5b:e5:37:17:11:e5:71:c6:9c:ad:dc:7a:57:de:24:
         23:df:ff:aa:f6:c7:a4:f1:92:d5:34:bf:dd:3a:ad:b9:f7:38:
         e3:5e:c3:d9:ec:94:31:63:18:9a:44:fa:d7:16:05:9f:3d:92:
         30:a1:b5:70:83:fa:cb:30:f8:e4:3c:67:8d:b9:90:c6:77:72:
         eb:c4:e5:94:67:a4:4c:aa:56:a0:25:05:53:34:6c:d3:e2:a5:
         63:d6:7b:fa:0f:ac:00:41:85:47:f4:95:11:0a:30:92:7b:c6:
         bb:ee:10:1e:e3:84:3c:36:e8:45:56:21:4d:77:49:02:ac:e9:
         d4:bb:4d:80:9e:90:e4:10:2f:1f:b5:17:d0:89:4a:d4:14:9e:
         58:27:46:a8:c1:69:7c:f4:8d:62:be:e7:80:ce:3d:6e:b0:9a:
         77:79:01:30:31:1e:8c:1f:9d:b6:9c:1c:dc:0b:0a:7c:08:9c:
         cd:cc:3f:f0:79:c3:65:e7:81:f9:10:56:4a:6c:4e:8c:5a:3d:
         bf:2a:c7:51:a6:68:de:3f:19:40:1c:d9:32:df:7d:14:79:d5:
         ad:2c:7a:b6:f5:6d:5a:3c:1e:ff:02:3f:f4:1d:c3:4b:c8:27:
         05:21:e5:60:08:fc:e4:41:f3:f4:7c:6d:69:65:b5:49:5c:3f:
         ac:8a:ae:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:47:33 2026 by rpki-client