Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
File:                     KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json)
Hash identifier:          XWSPbPOKDGQPfeuhZEfkWiKD/XaIrxpj/Oktp9OQuOM=
Subject key identifier:   6E:43:2A:27:25:EE:58:0C:DD:AF:33:41:47:95:AC:45:14:2F:EF:6B
Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
Certificate issuer:       /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Certificate serial:       0B21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
Manifest number:          0B16
Signing time:             Fri 04 Sep 2026 19:13:33 +0000
Manifest this update:     Fri 04 Sep 2026 19:13:32 +0000
Manifest next update:     Fri 11 Sep 2026 19:13:32 +0000
Files and hashes:         1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: 76M/7XvUmUHt+iCt9Oc7blW1unXmYu+B+gat/R0/uoE=)
                          2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: +6MnWixCvzMt3rLSJSp2YvtRQcWH4ISzu9SV3GhK8Pw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
                          rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2849 (0xb21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
        Validity
            Not Before: Sep  4 19:13:32 2026 GMT
            Not After : Sep 11 19:13:32 2026 GMT
        Subject: CN=6a9b185d-b0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:bf:21:d5:e6:b9:f9:cd:98:b3:c4:02:aa:
                    6d:83:08:57:0d:d5:de:03:1e:df:9b:a8:45:e9:65:
                    c1:12:4e:f6:d0:76:65:e8:1d:6a:14:52:a5:f8:35:
                    27:d7:47:af:12:8c:26:99:a7:0f:52:11:c2:bd:d7:
                    92:eb:0e:33:d3:b5:e6:b7:d3:5f:58:48:1c:e2:c7:
                    a1:10:b4:50:cd:c8:68:f1:23:ae:58:db:e9:1e:66:
                    83:02:91:b5:c7:22:86:c4:e5:a7:38:eb:a5:28:53:
                    11:ac:6b:24:e5:8b:19:94:92:74:fe:0f:c2:1d:5d:
                    84:78:d8:0b:86:0c:46:27:30:0d:3e:52:97:98:82:
                    6b:82:59:42:55:25:ce:07:0f:7c:34:58:f0:03:e3:
                    b4:b1:bb:a0:3e:6e:20:d3:e3:3a:f0:ad:e9:8b:93:
                    fb:71:2f:82:17:f7:42:fe:e0:71:50:50:12:37:de:
                    e5:97:20:d2:75:00:ba:71:d8:9b:84:e1:de:30:b2:
                    79:61:64:2e:d6:3b:3f:f6:4f:94:65:08:b3:c4:6a:
                    8f:bc:4e:55:49:be:68:a3:66:6b:3e:cc:43:f1:51:
                    2f:8c:a7:d9:a5:c8:a4:fe:48:59:ea:a7:b3:df:e2:
                    22:c5:0c:de:8d:38:a2:bb:08:c9:96:d7:f0:28:39:
                    7d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:43:2A:27:25:EE:58:0C:DD:AF:33:41:47:95:AC:45:14:2F:EF:6B
            X509v3 Authority Key Identifier:
                keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:59:87:c2:16:f3:70:f3:2d:0e:d2:c3:c5:cc:4a:09:7e:19:
         8e:e6:e1:3c:a8:c7:6c:e0:26:dd:26:69:23:4d:0a:11:be:82:
         1e:c6:85:f2:c5:cd:eb:1c:f5:f6:ed:25:5c:80:8f:b6:d5:69:
         6b:f7:55:05:46:b4:fe:02:c4:7a:62:98:a2:0c:1f:e0:8a:fb:
         62:86:e2:dc:d2:cd:07:17:90:2f:60:91:a6:da:31:72:19:f1:
         62:ce:80:67:52:aa:d3:bf:26:45:6c:8a:29:46:14:c5:9e:20:
         95:82:02:25:79:d6:f2:17:7e:41:ed:e2:13:6b:80:50:e7:09:
         0d:1f:a1:ab:26:26:c7:ab:03:c8:58:b9:1b:5a:2a:66:7d:9e:
         e0:f3:e3:a0:63:d0:de:d6:00:c2:f5:c3:d0:9c:73:09:d1:7f:
         6a:12:da:8a:ce:c7:b4:37:15:37:c7:db:92:b2:f2:62:b8:53:
         b4:e4:62:65:f7:03:31:e7:91:04:47:54:46:33:cb:05:f1:0a:
         8a:69:67:9f:c9:ae:6a:3f:07:be:c8:4f:37:3d:01:fd:db:e7:
         41:2b:7e:ad:b6:59:70:93:57:68:69:06:29:9c:1c:0f:a2:1b:
         2b:f1:c6:e2:13:d9:72:45:4e:b6:96:f5:31:7e:01:44:76:f7:
         9a:cd:52:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:19:52 2026 by rpki-client