Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft
File:                     kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft (raw, json)
Hash identifier:          MxOopJR6VIAzz82BfqI0tPxTxdNV/CUUkYOMkmTP9DA=
Subject key identifier:   D9:77:3E:9F:19:3C:77:DA:ED:4E:AB:C5:9E:4B:81:04:41:67:05:6F
Authority key identifier: 90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9
Certificate issuer:       /CN=A91113A5/serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft
Manifest number:          F8
Signing time:             Wed 07 Oct 2026 06:48:20 +0000
Manifest this update:     Wed 07 Oct 2026 06:48:19 +0000
Manifest next update:     Wed 14 Oct 2026 06:48:19 +0000
Files and hashes:         1: kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl (hash: StbUX8ILBMrvYEVjITyq/WFx8Gb6AZH9f+2CBpyfOMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl
                          rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91113A5, serialNumber=9021BEFF3B63EE7248B90DDAA5DDBFA7E3121CD9
        Validity
            Not Before: Oct  7 06:48:19 2026 GMT
            Not After : Oct 14 06:48:19 2026 GMT
        Subject: CN=6ac5eb34-280f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:83:57:5d:d4:b3:d9:5f:7a:b4:ff:8b:39:
                    1c:19:c6:c8:57:ee:bf:12:64:a2:53:ac:74:cc:e5:
                    66:fb:b3:46:05:05:91:47:1d:99:cb:88:b5:82:ec:
                    15:cf:a9:67:13:46:05:98:ee:f6:87:15:9a:b8:3a:
                    cd:fb:ca:fd:05:6e:93:55:1e:45:33:a6:69:c7:a6:
                    32:40:22:ea:9b:fe:82:16:2f:c4:73:b4:d6:b2:0a:
                    37:b9:a6:93:51:c1:8b:4a:74:0a:e9:4c:6b:4a:8c:
                    5c:46:bd:4a:bc:cf:3f:cf:90:47:5e:69:67:4f:05:
                    05:54:af:e5:bc:95:8e:4f:c0:bf:75:ff:b7:bb:5e:
                    b9:2c:69:74:e7:6f:b8:29:fd:6a:26:3f:77:71:66:
                    0c:2c:b2:6d:cb:8a:fb:db:08:e1:b9:a2:b8:63:f6:
                    21:fb:44:11:53:ec:6e:da:c7:94:8d:64:e3:39:85:
                    cd:98:a2:57:35:2b:01:c7:cb:07:46:35:c8:c1:c6:
                    df:76:9f:0f:9e:c6:e2:b1:f2:38:b3:cf:52:33:bb:
                    c3:90:0a:83:e7:b8:e8:9b:cb:5e:e7:ef:50:50:56:
                    bb:86:36:9b:e7:33:81:fd:b9:5e:ba:0c:29:e1:88:
                    09:4a:1c:92:51:ff:ec:de:30:ba:d0:4b:25:96:2f:
                    5b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:77:3E:9F:19:3C:77:DA:ED:4E:AB:C5:9E:4B:81:04:41:67:05:6F
            X509v3 Authority Key Identifier:
                keyid:90:21:BE:FF:3B:63:EE:72:48:B9:0D:DA:A5:DD:BF:A7:E3:12:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCG-_ztj7nJIuQ3apd2_p-MSHNk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91113A5/E57F35924B7711F0B1CB9E27C4F9AE02/kCG-_ztj7nJIuQ3apd2_p-MSHNk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:29:68:01:2d:0a:f7:89:f7:eb:47:c9:0d:f4:aa:d4:f3:05:
         13:6e:79:5f:65:60:1f:9e:b9:42:a6:78:62:d1:c9:51:02:b9:
         ff:a6:e9:f5:8c:07:1f:df:30:dc:c1:b8:33:be:57:4d:4e:e0:
         0c:36:99:25:8e:57:a3:37:3d:a8:f5:e2:da:44:ad:49:9c:13:
         82:a7:8c:bc:e7:85:e5:ea:b0:dd:f2:e5:91:30:bf:c7:52:b9:
         a5:d9:a2:05:54:fa:c3:1d:9c:64:57:ba:74:56:d0:be:85:c6:
         41:21:4a:14:25:2f:b8:e5:48:d4:43:71:a3:cd:b0:77:ba:ec:
         0a:e7:e9:4e:34:f1:c5:cb:d6:07:91:f0:da:d1:14:8f:e1:f7:
         7a:3c:92:16:81:33:cd:ad:10:de:aa:55:d2:84:04:2a:db:c6:
         23:ba:58:8d:ea:83:b4:03:eb:ee:8a:55:ed:ff:82:14:80:7c:
         d0:cb:b9:f6:2f:7b:dc:65:d3:82:a2:17:a4:dd:9f:5a:d8:49:
         2e:74:ce:33:a5:ab:54:a8:5f:d3:43:6b:68:30:f0:48:76:03:
         2e:e8:ef:71:51:65:8a:01:da:3c:c5:85:cb:b5:a0:f7:e4:e4:
         6e:c5:a9:d5:29:78:84:ed:40:59:84:ff:90:22:b4:e0:b9:ee:
         50:66:71:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:36:20 2026 by rpki-client