Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
File:                     KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft (raw, json)
Hash identifier:          odwqG3itLGvhch4mLTSzCxmHyND4OinfxnfTFSxJ0hY=
Subject key identifier:   EB:42:02:F3:1B:3E:3D:6E:27:39:A7:FB:A0:F9:73:C9:DE:65:26:64
Authority key identifier: 28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91
Certificate issuer:       /CN=A91DA252/serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691
Certificate serial:       0AB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
Manifest number:          0AA8
Signing time:             Thu 08 Oct 2026 19:38:21 +0000
Manifest this update:     Thu 08 Oct 2026 19:38:21 +0000
Manifest next update:     Thu 15 Oct 2026 19:38:21 +0000
Files and hashes:         1: KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl (hash: Zt1YPis0KMcBekSFT5s+m+V7UgybD2m2bF2rn618T0E=)
                          2: 81E66AB486DD11EAA5DCD466C4F9AE02.roa (hash: tMZ5eMTtP1d92HOozzJdgHksx9o6zVLKwH65RdaVt8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl
                          rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 19:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2738 (0xab2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA252, serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691
        Validity
            Not Before: Oct  8 19:38:21 2026 GMT
            Not After : Oct 15 19:38:21 2026 GMT
        Subject: CN=6ac7f12d-9026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:17:13:06:cf:d7:3d:35:c6:42:6f:16:d9:
                    bd:10:36:98:74:76:88:f2:b8:39:96:17:d5:a9:4c:
                    88:c1:04:ab:49:cd:28:09:ba:cf:1b:bd:77:7c:32:
                    51:02:bc:c5:ff:41:90:37:5a:b2:24:d0:dd:45:22:
                    30:c1:4a:f2:18:50:50:2f:87:c3:c9:8e:58:58:47:
                    fd:7b:3b:2d:4a:08:96:b3:f0:f3:8c:77:62:54:4f:
                    c8:72:15:2a:a6:a1:6b:72:c4:4b:09:13:c8:a9:81:
                    03:fe:a4:95:1f:cc:5b:03:5b:b5:92:b8:6c:0b:2c:
                    dd:10:8c:ab:92:d7:78:66:18:13:02:bd:34:76:26:
                    63:45:a2:fd:37:6f:4e:f3:3d:dd:bc:5c:1f:c1:e3:
                    1c:49:f2:f7:76:b6:66:fc:ea:87:a6:e4:3a:cb:a0:
                    f3:31:e3:63:f9:1b:a0:71:dc:89:39:a9:47:bf:98:
                    86:74:20:64:bb:79:76:6d:dc:bd:41:bb:7b:5b:f9:
                    0b:0f:a2:53:9e:c2:0a:32:61:4b:1b:9f:a7:4c:cd:
                    ff:aa:71:24:c4:70:46:4a:86:60:87:18:69:6c:b5:
                    0a:d6:91:c1:d4:ac:a8:98:8a:fc:aa:bf:4e:91:e7:
                    22:bc:23:d7:0f:a8:5d:c0:d3:f6:78:a4:23:97:a9:
                    27:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:42:02:F3:1B:3E:3D:6E:27:39:A7:FB:A0:F9:73:C9:DE:65:26:64
            X509v3 Authority Key Identifier:
                keyid:28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ed:16:ea:c3:0f:45:4d:57:33:6a:2a:0e:a4:07:25:64:4a:
         be:3d:2e:e5:5c:c5:4a:ae:fc:cf:2e:49:ca:83:37:0a:c1:9c:
         a9:db:5d:4d:5d:4f:0b:8d:4a:28:78:0b:ae:b0:52:a5:24:46:
         3c:49:84:c2:f7:9f:c2:12:bb:54:37:f9:a8:cd:ac:b0:1f:93:
         71:be:64:6a:f4:44:69:a8:08:40:cb:23:24:8a:71:82:0d:71:
         60:d7:71:a5:97:b7:af:b6:8d:57:36:54:ed:e8:b5:ff:76:19:
         fe:34:40:dd:02:8d:ad:06:d3:b5:95:0f:bb:a3:46:40:35:72:
         f3:e6:04:25:55:a6:57:d7:44:2e:19:6f:5a:3d:b4:51:66:a0:
         ef:e6:4b:34:2a:d5:6c:ad:91:3e:7a:8c:2d:33:a4:6b:39:5e:
         6e:92:6e:e0:ad:d0:09:b3:2e:5a:45:c6:03:05:17:ab:4f:ca:
         2c:89:94:0d:e9:36:c0:9b:a4:cd:14:85:5e:e3:49:f4:63:c3:
         11:d1:6e:96:34:d3:e3:6e:d5:f5:56:e9:66:53:88:0a:d2:a8:
         91:55:80:55:9e:0b:27:41:92:da:d2:f7:c0:06:66:a9:44:6a:
         fd:e6:dc:e3:fe:8d:de:e1:21:85:9e:5f:b3:7b:8c:f4:3f:34:
         3a:e5:2d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:34:57 2026 by rpki-client