Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
File:                     KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft (raw, json)
Hash identifier:          co9SjZ3bM1/ePk/iukyEEUQ4wjA2dNtKop0btl2iTl0=
Subject key identifier:   20:A6:0E:90:34:9D:2E:F3:C5:D7:EB:49:02:5F:B1:B0:58:27:6F:20
Authority key identifier: 2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B
Certificate issuer:       /CN=A91B7897/serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
Certificate serial:       0368
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
Manifest number:          0359
Signing time:             Sun 11 Oct 2026 01:01:35 +0000
Manifest this update:     Sun 11 Oct 2026 01:01:34 +0000
Manifest next update:     Sun 18 Oct 2026 01:01:34 +0000
Files and hashes:         1: KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl (hash: N0zFSwjy99ShJKe2yhSelNwQX86eppbbhF6DJ9Fbxsc=)
                          2: 6C83604E1E2711EDAA33DF76C4F9AE02.roa (hash: WyMfvYsLQHMgLVM8XPqCRpkFzoUhxbdKs79AF+461J0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl
                          rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 01:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872 (0x368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7897, serialNumber=2AA278944B410FA2C83B7C2AF32C66AFA20C127B
        Validity
            Not Before: Oct 11 01:01:34 2026 GMT
            Not After : Oct 18 01:01:34 2026 GMT
        Subject: CN=6acadfee-b8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:a7:03:81:e2:79:0d:c0:96:0c:a7:25:6c:
                    2d:3c:17:8e:82:8e:8e:e2:5a:1a:07:78:af:4b:3a:
                    22:2b:2c:95:cc:08:c7:9b:be:7d:68:b0:c0:d0:58:
                    1e:1d:ff:4f:e9:99:33:31:f3:46:17:bb:d6:d8:2c:
                    08:02:00:5f:1c:0f:1e:50:82:ab:cc:fc:d6:cd:3c:
                    72:88:76:50:5e:5f:ff:7d:98:43:5d:77:a1:b1:0f:
                    f7:a2:71:29:d7:0e:8f:a5:16:39:25:15:09:fb:13:
                    1b:03:37:58:87:e0:dd:0d:00:39:c4:c9:6a:6a:b1:
                    d1:e0:2f:1f:4d:58:03:09:86:67:c7:e2:da:1d:e4:
                    7c:4e:18:1e:60:16:7a:5f:5b:eb:5f:f8:9d:41:c5:
                    b5:68:ae:5d:50:0f:9c:73:4b:ad:87:2b:c1:ac:6b:
                    e8:92:6c:f3:1d:12:11:b8:83:27:ae:e0:4a:7f:98:
                    1b:a4:19:03:e4:17:62:fe:15:8e:c5:9a:e9:fb:ff:
                    78:a3:1c:a6:74:5b:48:74:8f:37:7b:04:60:9c:09:
                    6b:c0:6d:6f:24:b7:f5:93:bc:85:e2:21:cc:27:b6:
                    7e:d7:4b:10:a6:0d:c4:99:48:7f:25:92:1b:72:26:
                    71:d0:88:72:39:86:69:ae:54:ee:41:84:cf:14:2d:
                    a3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A6:0E:90:34:9D:2E:F3:C5:D7:EB:49:02:5F:B1:B0:58:27:6F:20
            X509v3 Authority Key Identifier:
                keyid:2A:A2:78:94:4B:41:0F:A2:C8:3B:7C:2A:F3:2C:66:AF:A2:0C:12:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KqJ4lEtBD6LIO3wq8yxmr6IMEns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7897/B6C5941C1D3511EDA5E6307DC4F9AE02/KqJ4lEtBD6LIO3wq8yxmr6IMEns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:8d:63:43:12:8f:76:72:e1:f2:fe:b4:ce:72:46:5d:02:8b:
         a7:8a:a9:62:a4:99:05:79:26:a3:71:22:ab:c1:25:35:ca:28:
         4b:2d:b6:6d:e6:c5:72:2d:3c:33:80:b2:62:ef:eb:47:95:0a:
         2a:bf:b1:14:4a:b4:92:de:dc:00:d1:87:2a:fa:c5:04:19:b2:
         0d:ea:72:22:20:ab:f4:a2:e7:47:8e:88:5c:35:89:3e:a5:09:
         35:95:05:65:87:8b:8a:79:c8:9c:6b:53:3f:ca:d6:ee:16:bb:
         e1:fa:4e:9f:f8:d2:df:61:8c:55:07:61:86:27:bb:df:60:6b:
         ed:c0:ac:0c:da:fc:00:d3:ba:de:78:40:0d:9b:a2:4e:a6:95:
         67:5c:ab:99:b6:cc:27:da:9c:2e:f3:d2:cd:10:b6:30:61:85:
         b4:d4:fa:a0:ab:9d:16:ff:1d:59:2c:06:58:cb:85:04:14:a4:
         58:3e:05:3a:a0:8b:b8:49:d2:4e:62:6e:20:f6:bc:88:bd:26:
         e6:c9:d7:9f:9a:9b:a9:53:73:a6:2f:78:3c:39:f9:ea:77:25:
         83:94:2b:e7:b8:a1:ab:b1:b9:c4:17:7f:2b:8e:06:7d:87:e6:
         8a:5d:1c:41:8e:99:d7:07:70:76:db:ee:15:d1:77:59:56:80:
         84:bc:8e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:21:04 2026 by rpki-client