Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
File:                     kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft (raw, json)
Hash identifier:          QhqQwGmaiPdEnDkwgEIzNVfuD9lJk0u9aIWLB1XBYmY=
Subject key identifier:   03:09:95:6A:E7:34:67:4B:51:8D:81:B7:01:95:D9:20:32:0E:42:ED
Authority key identifier: 90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28
Certificate issuer:       /CN=A91C2875/serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28
Certificate serial:       0476
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
Manifest number:          045E
Signing time:             Tue 13 Oct 2026 00:17:52 +0000
Manifest this update:     Tue 13 Oct 2026 00:17:51 +0000
Manifest next update:     Tue 20 Oct 2026 00:17:51 +0000
Files and hashes:         1: kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl (hash: 73JtKrylobqkdRhlDTjcmBordeia5cDCYJsr/eIAOl4=)
                          2: 0E9CF77EBA6811EC8058A213C4F9AE02.roa (hash: OPdDx0g2tqm/aWYyfgybN1ae44AwD+mRsgITq+8cJ1o=)
                          3: ABB1EE64B4ED11ECBA3D016FC4F9AE02.roa (hash: 2g91LTn04ut1GsgQ+vC76Ysi0zaYNsCFkagGses7Jpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl
                          rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 16:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1142 (0x476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2875, serialNumber=90D99AA8D7913140AFAE9EE2BFEBCDA37BA1CD28
        Validity
            Not Before: Oct 13 00:17:51 2026 GMT
            Not After : Oct 20 00:17:51 2026 GMT
        Subject: CN=6acd78af-c9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7d:87:54:be:d6:68:0b:22:b0:9b:71:2a:8b:
                    08:d3:4d:4d:34:59:e8:05:0d:b2:d6:18:7a:68:6c:
                    cf:59:85:84:d9:95:76:a7:db:75:c1:ef:04:18:0d:
                    5e:6b:dc:f0:d4:73:47:df:63:71:7c:48:d1:8c:cd:
                    18:24:5a:75:46:85:17:2a:38:c8:0b:a8:e9:47:70:
                    7e:ed:0d:6c:b3:8c:51:3c:d9:b6:d4:87:ac:5b:ae:
                    28:ad:35:c0:09:3b:03:3b:09:56:d8:58:61:16:51:
                    73:dc:20:e6:4c:3d:1c:67:fa:96:95:8e:5f:b9:0d:
                    9c:eb:a4:5f:87:eb:92:1d:6a:50:f4:59:37:85:7c:
                    8a:83:b1:18:50:8c:d7:14:37:1b:2b:31:d9:50:6c:
                    ff:af:f8:da:22:e3:69:f0:26:3f:f4:31:48:5d:a5:
                    4b:a2:79:9e:90:2b:c3:1f:20:28:b4:49:32:71:fb:
                    c0:54:91:d1:57:c3:72:95:68:0b:8b:8a:c4:89:79:
                    bb:19:9c:da:9b:b4:e9:8b:95:c4:04:9a:c4:40:ef:
                    d0:20:8d:e8:2f:38:93:30:c2:95:b6:fd:f8:a3:3a:
                    86:4b:15:ff:7d:33:58:5c:00:dd:32:83:f3:c4:13:
                    a7:48:a5:ff:72:41:71:84:36:3e:9c:76:ce:c7:3d:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:09:95:6A:E7:34:67:4B:51:8D:81:B7:01:95:D9:20:32:0E:42:ED
            X509v3 Authority Key Identifier:
                keyid:90:D9:9A:A8:D7:91:31:40:AF:AE:9E:E2:BF:EB:CD:A3:7B:A1:CD:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNmaqNeRMUCvrp7iv-vNo3uhzSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2875/C25DE0E6B4E811EC980C4471C4F9AE02/kNmaqNeRMUCvrp7iv-vNo3uhzSg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:57:73:32:2e:2d:f4:97:0e:66:c4:22:83:ee:04:ad:87:cb:
         d8:19:c5:93:c6:4b:55:40:0a:ac:47:dc:e9:fa:6a:43:ef:72:
         be:f4:5c:23:d9:2c:8d:8f:b6:17:58:31:d6:85:84:f5:3f:02:
         ff:47:6f:29:1f:30:97:cd:be:42:ed:36:b6:a8:43:89:93:20:
         20:55:9f:5a:db:17:f7:cf:e5:46:5e:08:a9:10:da:5f:d5:c0:
         59:03:f4:a2:2c:cb:b4:13:36:a5:1b:41:58:39:ba:04:c6:d8:
         19:89:e6:59:69:b0:59:b7:4c:a8:e2:27:e7:e7:da:15:80:99:
         b4:1d:05:d4:80:8e:e9:6f:34:93:bc:7a:6c:24:5d:0b:b9:de:
         fe:5d:66:66:ff:0b:d9:47:e8:14:4a:fa:85:53:f3:21:62:fd:
         83:dc:7a:8c:cf:d6:8a:5a:c8:9c:15:e1:3e:1d:9a:52:ef:29:
         6c:16:ba:6a:d8:37:e4:84:88:67:e6:b5:46:91:25:15:6d:f3:
         f5:58:10:c2:47:93:c9:fa:88:9e:32:52:d0:c2:64:86:4f:c6:
         ea:01:dc:7c:56:9d:b5:a2:ab:1f:da:da:9a:a0:58:00:cf:c1:
         30:66:fc:15:44:72:46:9f:c0:cb:fb:45:67:f8:e7:23:21:53:
         38:8b:c5:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzI4NzUxMTAvBgNVBAUTKDkwRDk5QUE4RDc5MTMxNDBBRkFFOUVFMkJGRUJDREEz
N0JBMUNEMjgwHhcNMjYxMDEzMDAxNzUxWhcNMjYxMDIwMDAxNzUxWjAYMRYwFAYD
VQQDEw02YWNkNzhhZi1jOWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuH2HVL7WaAsisJtxKosI001NNFnoBQ2y1hh6aGzPWYWE2ZV2p9t1we8EGA1e
a9zw1HNH32NxfEjRjM0YJFp1RoUXKjjIC6jpR3B+7Q1ss4xRPNm21IesW64orTXA
CTsDOwlW2FhhFlFz3CDmTD0cZ/qWlY5fuQ2c66Rfh+uSHWpQ9Fk3hXyKg7EYUIzX
FDcbKzHZUGz/r/jaIuNp8CY/9DFIXaVLonmekCvDHyAotEkycfvAVJHRV8NylWgL
i4rEiXm7GZzam7Tpi5XEBJrEQO/QII3oLziTMMKVtv34ozqGSxX/fTNYXADdMoPz
xBOnSKX/ckFxhDY+nHbOxz0EsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMJlWrn
NGdLUY2BtwGV2SAyDkLtMB8GA1UdIwQYMBaAFJDZmqjXkTFAr66e4r/rzaN7oc0o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjg3NS9DMjVERTBFNkI0
RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1VQ3ZycDdpdi12Tm8zdWh6
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tObWFxTmVSTVVDdnJwN2l2LXZObzN1aHpTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Mjg3NS9DMjVERTBFNkI0RTgxMUVDOTgwQzQ0NzFDNEY5QUUwMi9rTm1hcU5lUk1V
Q3ZycDdpdi12Tm8zdWh6U2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoldzMi4t9JcOZsQig+4ErYfL2BnFk8ZLVUAKrEfc6fpqQ+9yvvRcI9ksjY+2
F1gx1oWE9T8C/0dvKR8wl82+Qu02tqhDiZMgIFWfWtsX98/lRl4IqRDaX9XAWQP0
oizLtBM2pRtBWDm6BMbYGYnmWWmwWbdMqOIn5+faFYCZtB0F1ICO6W80k7x6bCRd
C7ne/l1mZv8L2UfoFEr6hVPzIWL9g9x6jM/WilrInBXhPh2aUu8pbBa6atg35ISI
Z+a1RpElFW3z9VgQwkeTyfqInjJS0MJkhk/G6gHcfFadtaKrH9ramqBYAM/BMGb8
FURyRp/Ay/tFZ/jnIyFTOIvFMA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 03:50:23 2026 by rpki-client