Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
File:                     Klm5bDClX71h0iMDc864nR2wGos.mft (raw, json)
Hash identifier:          9vPTj2MtPAIhSC++cm46UsEOxJnXiTGfkdvCtJzc1Sk=
Subject key identifier:   67:A5:8F:29:73:5C:68:BF:0B:34:7E:43:66:F8:4E:BD:CA:6E:3E:14
Authority key identifier: 2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
Certificate issuer:       /CN=A91F523F/serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
Manifest number:          0156
Signing time:             Sun 27 Sep 2026 05:39:26 +0000
Manifest this update:     Sun 27 Sep 2026 05:39:26 +0000
Manifest next update:     Sun 04 Oct 2026 05:39:26 +0000
Files and hashes:         1: Klm5bDClX71h0iMDc864nR2wGos.crl (hash: kRxNbpdq97xMsPGx/kfiMxjGoETytgYvKvoiWd+r5X0=)
                          2: 607B5F6AB05411EF84C8DC74C4F9AE02.roa (hash: FK/DlPDSG9WEqzNFstF7HVEnaAW4fzuMAjNc2Kwb/bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
                          rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F523F, serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
        Validity
            Not Before: Sep 27 05:39:26 2026 GMT
            Not After : Oct  4 05:39:26 2026 GMT
        Subject: CN=6ab8ac0e-dc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:f7:de:6e:1e:69:0b:43:da:01:5c:92:e0:
                    6e:93:d7:7f:e6:f8:5d:6d:3e:0b:a6:15:ce:b9:04:
                    2a:2d:5b:40:8b:c1:87:d3:c1:23:aa:45:19:3c:14:
                    d2:ff:8f:a9:42:3e:5b:08:5d:1d:3f:61:20:5c:d0:
                    71:70:45:51:c3:3c:1a:55:df:67:61:1c:37:3e:e9:
                    4b:09:5f:5d:8e:c1:2b:ae:10:9d:0d:15:d3:2f:25:
                    a7:4b:85:4a:15:6a:21:b6:ee:28:ec:25:64:90:1c:
                    85:80:88:d1:c5:43:ec:36:b2:3b:36:74:23:89:10:
                    3f:95:77:79:e0:06:5f:d3:ea:c1:4d:2f:05:f5:98:
                    d1:08:1d:0f:76:16:28:2f:5a:b5:a6:2d:d2:50:c2:
                    66:ae:4e:8d:49:a5:3a:99:74:a9:f3:ad:41:e1:ac:
                    52:29:1b:49:73:47:25:ae:7b:26:31:d6:24:fd:b0:
                    aa:e4:93:08:ec:38:d4:47:3c:3a:4b:6a:e3:d1:eb:
                    da:a5:f8:81:0f:ff:c8:78:72:e6:88:0e:1f:47:57:
                    83:3c:c0:bf:a5:4b:82:ab:2f:81:96:2b:7c:3f:ca:
                    fd:cd:87:46:ae:79:39:55:42:e7:2f:11:8c:02:39:
                    89:13:1b:ee:85:0c:0c:05:ef:de:f0:00:80:24:52:
                    4b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A5:8F:29:73:5C:68:BF:0B:34:7E:43:66:F8:4E:BD:CA:6E:3E:14
            X509v3 Authority Key Identifier:
                keyid:2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5c:14:99:72:af:30:00:2d:8e:98:bb:ae:8c:f8:cc:af:0a:
         91:c8:df:0e:f4:71:3d:fa:cc:dd:0a:20:b6:84:74:ce:00:46:
         a9:f7:4d:bb:45:82:4e:d4:e3:a9:41:97:95:85:39:8a:27:d9:
         bb:ab:e9:6e:fa:9b:62:2b:1c:1e:f5:ed:ad:ba:83:7a:7e:1d:
         39:2c:a0:6d:73:d4:d9:04:1c:35:df:b6:a3:eb:19:07:71:b6:
         6f:c9:ad:f9:6f:45:be:89:c9:ae:51:af:37:dd:4a:02:74:e1:
         a8:9e:d2:c9:43:ac:11:2b:26:98:f7:0a:70:15:bc:93:7e:e1:
         4b:c2:15:d4:50:ea:a2:13:0d:05:9e:58:ef:1e:0e:8d:73:72:
         27:40:c4:92:cd:84:3f:34:8e:f3:b8:5d:60:2a:95:14:9b:71:
         80:e7:f3:5d:28:dc:28:52:8e:09:a4:16:fa:9b:a0:1d:9c:aa:
         bb:b0:36:d7:ea:f8:89:e4:70:f6:e9:91:92:a5:c6:94:9e:5e:
         a9:16:7b:8e:7b:14:f6:66:ed:b7:71:4b:c1:9c:b5:8b:f4:9b:
         35:63:d2:5c:81:99:1b:ff:ea:81:e9:33:53:ae:5f:6a:ad:fd:
         e3:70:13:36:4b:03:f6:aa:ba:bd:b9:57:fc:dc:28:6f:9d:9d:
         6d:ed:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:28:22 2026 by rpki-client