Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
File:                     kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft (raw, json)
Hash identifier:          uMBN/AsjmWeEwld3aywaoaaluU3iDvjRkJ12X/9X+P8=
Subject key identifier:   66:79:AF:81:AE:A6:33:C6:9A:D5:FF:2A:F0:C5:20:10:D9:2A:6F:95
Authority key identifier: 93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97
Certificate issuer:       /CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497
Certificate serial:       0614
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
Manifest number:          0600
Signing time:             Sun 20 Sep 2026 22:46:48 +0000
Manifest this update:     Sun 20 Sep 2026 22:46:48 +0000
Manifest next update:     Sun 27 Sep 2026 22:46:48 +0000
Files and hashes:         1: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl (hash: TnUMI88H+zyOdaPwEqm+OzC8lCSF+TVp2iFMfR1hgqM=)
                          2: 7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa (hash: v7M934hti2JfOkd+bql5cnksZWaNWuafx7OpCr8yvO4=)
                          3: 720FAF9A0BEF11ECAEF3EA5DC4F9AE02.roa (hash: GgRvCGtXb4Kz6rmn1wkhMZUUNry/inQOA2R0pYqaZT8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5F33, serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497
        Validity
            Not Before: Sep 20 22:46:48 2026 GMT
            Not After : Sep 27 22:46:48 2026 GMT
        Subject: CN=6ab06258-0264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:df:c0:34:e3:75:a1:2c:74:a2:cf:ac:54:
                    bb:ec:28:d4:cd:0b:8b:7c:7f:40:dd:2d:3b:7c:9d:
                    26:04:b0:d2:8f:26:9a:ec:3f:88:20:58:34:ca:5c:
                    50:87:df:b2:ad:d3:79:2a:69:a0:6c:65:19:0d:6a:
                    de:1a:21:4d:51:81:31:88:32:2f:cc:2a:af:03:75:
                    ee:aa:8a:b6:56:6d:4d:55:69:4b:48:d3:82:09:21:
                    8d:c7:2d:2f:e5:36:82:91:41:76:3a:bf:eb:61:9b:
                    1d:84:15:e9:18:c2:27:91:41:f6:6b:d3:5d:89:77:
                    a5:4e:b5:a0:3a:ef:40:43:1d:ee:aa:4c:e8:d2:cb:
                    74:9e:c8:2f:55:3c:9a:e5:a6:ca:93:bc:57:42:42:
                    9f:11:83:7e:db:69:ec:b4:3d:73:bd:aa:e2:88:ab:
                    dc:5a:df:9f:34:7c:76:9c:ee:8b:cd:7b:d5:81:fb:
                    d1:49:2a:f1:df:ec:4f:80:a3:74:fa:99:3b:eb:19:
                    db:42:cf:5a:b8:c6:36:e8:02:8c:7e:6c:bf:80:53:
                    25:a6:c6:25:5b:a3:d5:e2:e5:4f:d0:c3:35:9e:7f:
                    58:3c:38:ee:1e:97:5d:90:09:7b:29:08:2b:df:6f:
                    80:cb:43:a7:18:b3:d9:27:13:50:84:be:be:64:74:
                    38:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:79:AF:81:AE:A6:33:C6:9A:D5:FF:2A:F0:C5:20:10:D9:2A:6F:95
            X509v3 Authority Key Identifier:
                keyid:93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:be:fb:30:62:af:18:53:8f:50:f3:81:1b:1d:6c:c9:82:02:
         1a:29:7d:ec:3b:fb:1e:00:95:33:5f:38:ce:08:02:ed:c5:da:
         01:aa:ae:1f:4b:1b:e3:7c:fd:45:ca:30:da:ba:f4:4b:01:73:
         34:54:1b:5e:8e:b5:dc:4a:83:19:41:15:ee:44:7d:0c:7e:c1:
         f8:00:e2:ec:39:a0:ae:07:61:90:be:8a:99:92:54:8c:f5:dc:
         2d:ea:40:36:4f:f0:2e:41:ce:88:eb:08:05:58:d0:ad:c2:1d:
         ca:75:5a:a7:27:12:b7:c7:36:5c:af:18:3a:fa:5e:16:8f:98:
         86:04:e2:e4:a9:1e:e9:1e:be:19:e9:d1:a3:be:06:f5:aa:dd:
         46:3e:19:c0:a5:67:9b:73:d9:40:dc:59:39:68:e9:a0:88:fc:
         2d:1e:6f:50:dd:62:4f:f4:94:e8:16:e4:b9:8f:f5:99:4b:4f:
         66:9b:52:73:e4:aa:40:41:46:fc:9d:a1:ac:62:05:50:94:bd:
         d5:23:61:73:0c:57:c2:2b:3c:e1:f4:90:7a:6d:8d:91:da:fc:
         cd:45:32:02:ff:99:cc:8e:6c:5b:fd:fb:d2:98:32:fc:d0:74:
         d8:be:24:82:c4:a5:67:c1:2d:4f:5b:e5:c9:43:f1:d2:f3:20:
         c1:ef:17:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:08:05 2026 by rpki-client