Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
File:                     K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json)
Hash identifier:          lexhuwMVlAwM32H0wT2j/cJ5upMpL+GAKMGAkIr81mU=
Subject key identifier:   C3:66:32:5D:3E:EC:90:39:6B:E8:D4:A1:DE:AA:71:82:9F:04:FA:6A
Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6
Certificate issuer:       /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6
Certificate serial:       359D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
Manifest number:          358E
Signing time:             Fri 18 Sep 2026 14:55:18 +0000
Manifest this update:     Fri 18 Sep 2026 14:55:18 +0000
Manifest next update:     Fri 25 Sep 2026 14:55:18 +0000
Files and hashes:         1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: L0bzFtDbLVTJLYBqdmQeOFcLqbZudgqVd+SMJVstVOU=)
                          2: jL5H4WWk5uweAtGpMsuuxuOehM4.asa (hash: VE0Uz4JyhldZcaScldrzTn/xrAakRTFppWCFd2sM8Bk=)
                          3: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 07LE9X8LH2BaI/dz0O3mbMsKmiKgclhDrz2z98RF0c0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl
                          rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13725 (0x359d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6
        Validity
            Not Before: Sep 18 14:55:18 2026 GMT
            Not After : Sep 25 14:55:18 2026 GMT
        Subject: CN=6aad50d6-b133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:4a:b4:39:9a:2d:e5:fd:7d:92:51:48:4e:
                    72:89:3a:eb:07:1d:fa:d1:07:99:29:36:9c:5b:ee:
                    33:15:68:06:89:9c:4c:54:04:45:14:c7:88:14:b4:
                    d6:a7:c7:d7:49:63:83:ac:81:cf:e4:9d:9a:0e:47:
                    6c:07:37:41:d9:bb:36:5f:4a:54:a2:a1:b8:52:30:
                    04:77:aa:cc:74:c9:2f:d6:fc:5d:b1:23:37:70:32:
                    6c:6f:b3:46:3f:4f:7b:fb:8d:ac:2c:86:25:78:52:
                    df:43:79:46:80:cb:12:6a:d9:fa:81:66:16:c4:05:
                    8d:a9:29:d0:fd:b6:5e:a4:fc:1e:12:89:d1:45:d9:
                    42:31:32:dd:b9:50:6c:c7:50:0f:da:04:ce:7c:3f:
                    a7:f1:07:57:cf:15:58:90:b2:4d:a9:9e:29:d4:fd:
                    86:ba:48:14:67:41:95:61:d7:52:12:26:cb:e9:bc:
                    ab:71:b5:19:d9:4e:92:e6:fa:ee:ff:64:82:af:d2:
                    95:12:15:5d:0f:ec:1e:13:da:8e:31:ed:8d:84:e2:
                    75:e1:36:68:f4:6a:77:0e:d7:e0:1e:85:cf:9d:d2:
                    09:75:9d:71:86:87:f5:d9:8c:e3:4f:1b:c9:f4:6b:
                    b6:79:ba:bf:d5:c2:d7:0b:a5:76:d3:11:50:91:2f:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:66:32:5D:3E:EC:90:39:6B:E8:D4:A1:DE:AA:71:82:9F:04:FA:6A
            X509v3 Authority Key Identifier:
                keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f3:c7:aa:d6:df:64:24:a0:f3:ad:78:b4:e7:d5:cb:83:fd:
         b9:8a:14:4c:27:95:53:3b:36:f2:8f:33:42:cc:18:26:47:c2:
         a2:5d:1f:87:5c:90:ad:59:60:f7:0e:1b:98:06:30:b1:92:91:
         25:91:7d:35:17:43:9d:38:00:dd:32:d1:cf:2f:d3:a6:51:c4:
         50:55:53:59:71:99:f9:cc:6c:1b:d2:61:79:67:27:cd:33:50:
         f6:6c:78:46:06:39:48:12:a5:83:4e:1a:64:0b:5b:ec:44:8f:
         1b:66:a6:83:76:ae:2b:05:3d:54:9d:02:96:6c:fb:18:4d:73:
         fb:5b:21:29:eb:fc:07:8a:f7:49:af:d0:20:4e:cf:43:f5:66:
         6d:54:08:07:8d:b9:b1:dc:40:54:28:41:80:e2:e3:5d:bf:02:
         80:64:b3:bc:53:16:2a:9c:95:49:92:35:51:4c:b6:42:a8:e6:
         bd:db:2b:f5:6b:89:63:3d:a7:61:e2:ca:cc:b7:d7:63:53:a4:
         ad:ca:9c:db:a0:ef:e8:b5:a8:31:c0:eb:55:cd:88:1e:b8:7e:
         35:b1:c6:6a:df:16:60:50:64:b8:57:f9:a7:8b:ea:0f:11:fe:
         dd:ae:51:90:aa:5b:1e:bb:de:a2:e6:49:31:86:19:53:f2:a1:
         5c:1c:4d:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0E4MTUxMTAvBgNVBAUTKDJCREQzMTUxMTE2REU5REJDNTVDRkMzRDJDREFDQTU4
RTc0QjE5RTYwHhcNMjYwOTE4MTQ1NTE4WhcNMjYwOTI1MTQ1NTE4WjAYMRYwFAYD
VQQDEw02YWFkNTBkNi1iMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2oVKtDmaLeX9fZJRSE5yiTrrBx360QeZKTacW+4zFWgGiZxMVARFFMeIFLTW
p8fXSWODrIHP5J2aDkdsBzdB2bs2X0pUoqG4UjAEd6rMdMkv1vxdsSM3cDJsb7NG
P097+42sLIYleFLfQ3lGgMsSatn6gWYWxAWNqSnQ/bZepPweEonRRdlCMTLduVBs
x1AP2gTOfD+n8QdXzxVYkLJNqZ4p1P2GukgUZ0GVYddSEibL6byrcbUZ2U6S5vru
/2SCr9KVEhVdD+weE9qOMe2NhOJ14TZo9Gp3DtfgHoXPndIJdZ1xhof12YzjTxvJ
9Gu2ebq/1cLXC6V20xFQkS+a9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMNmMl0+
7JA5a+jUod6qcYKfBPpqMB8GA1UdIwQYMBaAFCvdMVERbenbxVz8PSzayljnSxnm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTgxNS84RENEMUVBODFE
OUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZkdkZYUHc5TE5yS1dPZExH
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0s5MHhVUkZ0NmR2RlhQdzlMTnJLV09kTEdlWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTgxNS84RENEMUVBODFEOUIxMUUyOTFEMjg0ODkwOEIwMkNEMi9LOTB4VVJGdDZk
dkZYUHc5TE5yS1dPZExHZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgPPHqtbfZCSg8614tOfVy4P9uYoUTCeVUzs28o8zQswYJkfCol0fh1yQrVlg
9w4bmAYwsZKRJZF9NRdDnTgA3TLRzy/TplHEUFVTWXGZ+cxsG9JheWcnzTNQ9mx4
RgY5SBKlg04aZAtb7ESPG2amg3auKwU9VJ0Clmz7GE1z+1shKev8B4r3Sa/QIE7P
Q/VmbVQIB425sdxAVChBgOLjXb8CgGSzvFMWKpyVSZI1UUy2Qqjmvdsr9WuJYz2n
YeLKzLfXY1Okrcqc26Dv6LWoMcDrVc2IHrh+NbHGat8WYFBkuFf5p4vqDxH+3a5R
kKpbHrveouZJMYYZU/KhXBxNrg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:57:54 2026 by rpki-client