Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
File:                     kcPJZndvAR_FNQIdhfWue_utpX4.mft (raw, json)
Hash identifier:          Num6CoA39Y8eKaoaEQ8GpjUOmSeibHRcbLsIonTMlOk=
Subject key identifier:   D5:56:3F:3A:33:56:18:30:27:80:B1:3A:62:E4:E5:52:56:43:BF:0B
Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
Certificate issuer:       /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Certificate serial:       0C94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
Manifest number:          0C5A
Signing time:             Fri 04 Sep 2026 18:40:48 +0000
Manifest this update:     Fri 04 Sep 2026 18:40:47 +0000
Manifest next update:     Fri 11 Sep 2026 18:40:47 +0000
Files and hashes:         1: kcPJZndvAR_FNQIdhfWue_utpX4.crl (hash: EkIcQMQy+FpAoyeMUn/887aCxKaeY7XPSo/0yxq0FOw=)
                          2: 41B2F448ECE611EA882BEA79C4F9AE02.roa (hash: nI/6MDunIRDvmHBfJBx95Y0vV2wSohzwNZEZUy5WKGA=)
                          3: AD4CF94A6D1711F085288D45C4F9AE02.roa (hash: nim0r8cX0AWo+u+y8biXKnG294pD1aj3IrEpuP3v1ew=)
                          4: 436F1AE2ECF411EA822E8D28C4F9AE02.roa (hash: j5PopsmOwZFXKKisotFRY1R3qhxNhXf+mgbfOulCpEE=)
                          5: ACE4FD2C6D1711F085288D45C4F9AE02.roa (hash: GS1ZWCrOmI/wzMrtSy23rOps4nyG5A3UiWlzO5POe50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
                          rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 18:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3220 (0xc94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
        Validity
            Not Before: Sep  4 18:40:47 2026 GMT
            Not After : Sep 11 18:40:47 2026 GMT
        Subject: CN=6a9b10b0-83b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:77:f6:ba:49:54:8b:8f:85:69:64:d0:5b:d3:
                    a6:e7:ef:16:1f:ba:24:b4:5c:c1:cb:38:4d:53:5b:
                    ea:a9:32:7a:b4:33:76:0e:0c:dd:00:71:7a:be:16:
                    79:a7:d2:61:09:0a:cc:08:36:e1:c8:63:3b:90:ec:
                    59:db:10:42:66:5c:11:79:0a:07:0d:26:17:a3:d4:
                    50:24:5c:c9:69:bf:fd:5c:25:27:03:cd:cb:8b:9e:
                    9a:ad:1e:82:3a:66:48:b7:f5:f9:48:59:0c:13:b2:
                    f0:37:aa:ac:9f:6b:f5:25:d4:81:99:0b:44:92:84:
                    9b:d4:60:7d:0d:f6:ce:8b:95:6b:0d:bc:18:72:ed:
                    d6:c4:33:30:53:72:f5:dd:90:c4:65:c0:17:59:b4:
                    cc:83:09:0b:3a:56:91:4c:b9:95:e0:eb:db:e1:c5:
                    41:b7:c6:6f:f2:fd:80:74:73:1a:5d:da:c6:39:d6:
                    a1:c4:1a:bb:6d:fd:59:e4:f4:a4:e5:83:84:de:e7:
                    1f:59:c4:8c:40:4e:fe:ca:52:a7:7a:c4:04:a4:2a:
                    76:9d:37:89:21:a4:4d:10:85:6f:14:04:c0:8d:c0:
                    d1:13:f2:63:c7:61:c8:99:2d:75:25:12:fc:5f:1d:
                    34:b1:1c:ed:4b:02:61:69:85:c9:9b:23:28:ef:a6:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:56:3F:3A:33:56:18:30:27:80:B1:3A:62:E4:E5:52:56:43:BF:0B
            X509v3 Authority Key Identifier:
                keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d8:e4:34:c6:1b:65:10:85:36:fb:56:c4:e5:2a:80:31:62:
         20:40:92:88:10:0c:25:29:31:98:07:5d:09:a9:a4:2f:3b:32:
         71:4d:58:1c:41:75:41:2e:52:f8:0e:0b:4e:08:d2:d1:77:76:
         a8:13:aa:42:f1:c8:39:da:f7:20:6e:33:df:c7:c3:f0:f9:dd:
         34:d2:99:d8:e6:6a:37:bb:e9:7d:a4:a1:af:84:03:5f:f2:0b:
         c4:d7:51:ab:28:6e:01:92:89:f9:8f:0c:2d:48:be:ba:74:c6:
         29:ed:25:03:b0:c0:28:78:2b:6f:e4:39:13:f5:64:4d:34:77:
         3f:1b:04:9b:ab:9c:02:ed:ca:5c:5c:94:50:05:ff:e3:25:8b:
         ec:91:04:78:25:60:ed:c0:8e:bb:cd:5b:52:97:1d:33:bd:ee:
         4f:29:ee:e4:35:3c:cf:01:73:08:e2:c0:80:21:2f:a2:61:57:
         92:88:1e:d7:ec:cc:b3:de:c7:39:18:e9:91:c0:6d:68:f7:67:
         b3:bb:dd:da:9c:b6:60:2e:12:78:24:a0:02:b2:ef:3e:b3:a3:
         f3:b4:54:6b:36:04:cd:ac:08:89:ac:ac:07:00:15:89:f8:48:
         01:8f:b0:27:75:6e:52:57:ed:95:03:16:aa:18:c3:97:28:09:
         26:79:45:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:28:37 2026 by rpki-client