Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
File:                     kUhQxLilE7L45O3EtVeHB3djcq4.mft (raw, json)
Hash identifier:          0pnQohi+S4uTRHTK4W9I3SYPuCjhtuQptWhu88Qwkj0=
Subject key identifier:   F6:D5:F3:2B:92:39:CE:7E:1C:14:6D:50:C8:6D:B5:DA:B8:55:ED:6C
Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
Certificate issuer:       /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Certificate serial:       0288
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
Manifest number:          0277
Signing time:             Thu 17 Sep 2026 02:20:32 +0000
Manifest this update:     Thu 17 Sep 2026 02:20:31 +0000
Manifest next update:     Thu 24 Sep 2026 02:20:31 +0000
Files and hashes:         1: kUhQxLilE7L45O3EtVeHB3djcq4.crl (hash: Ni2TSGuS6keZf3MZaXuPLDASS+0ZZfih/OyXNC39wLc=)
                          2: D8F27C903AD811EF960D9329C4F9AE02.roa (hash: vs2Gbdu50+XToE8E4WRhYDNiQq7PIlKd89VDKs3X2wE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
                          rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 02:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91215B3, serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
        Validity
            Not Before: Sep 17 02:20:31 2026 GMT
            Not After : Sep 24 02:20:31 2026 GMT
        Subject: CN=6aab4e70-0839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:99:7a:a6:58:e5:81:12:8b:74:50:11:4d:
                    bf:f7:4b:db:fb:56:fc:97:df:e0:d2:4b:7f:b0:cd:
                    65:0a:0b:08:93:8c:c5:0a:a1:7e:4f:23:70:72:54:
                    62:72:bb:5e:e7:e5:25:48:bd:d0:5e:49:7f:6a:ee:
                    4d:54:15:d7:7b:7a:f8:98:f6:43:d5:9f:ad:21:24:
                    27:ee:70:53:68:8e:2b:a6:7d:ee:73:46:67:86:27:
                    86:1f:8e:5b:cf:95:b2:6a:91:ae:99:17:24:80:58:
                    66:8e:e3:af:76:9b:1b:3d:9a:79:b7:f5:6a:a3:28:
                    39:f5:5b:bc:59:70:d3:41:df:c1:98:b2:5d:fe:57:
                    a6:a6:ed:9b:53:af:3a:1f:20:f1:2a:f2:d6:7a:01:
                    6f:19:15:6c:fa:b3:4e:ff:3f:8f:b4:ee:e3:ad:0a:
                    ad:95:24:f8:56:6e:2e:43:46:c8:86:ec:98:bf:63:
                    fa:c0:ce:a9:d5:fc:18:f8:22:43:dc:b1:58:37:9d:
                    4a:ac:53:1a:5d:8a:da:9c:43:76:52:ba:ff:79:ac:
                    88:4d:f2:74:6b:b9:7e:97:62:4e:58:cf:45:a3:ff:
                    b2:8a:c9:da:7b:39:a6:ad:a9:06:39:c3:26:2f:38:
                    c8:a3:dc:df:96:ef:9b:ca:ef:50:f9:a7:bd:f5:5d:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D5:F3:2B:92:39:CE:7E:1C:14:6D:50:C8:6D:B5:DA:B8:55:ED:6C
            X509v3 Authority Key Identifier:
                keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:47:0f:d3:e8:1f:79:1f:53:c9:b8:2e:09:07:c0:ff:3e:df:
         14:03:ca:71:f1:96:a8:e9:8e:12:83:ed:c0:77:fb:a0:cf:17:
         25:76:b5:9d:86:cc:6a:36:7a:75:2b:bc:79:93:0e:f4:46:7a:
         4a:dd:99:74:fd:a7:16:e3:db:ec:ed:2f:fb:3b:fb:c9:35:55:
         bd:54:5d:22:85:2a:01:4c:af:1c:d1:ac:54:3e:f3:04:f0:2c:
         90:5b:56:19:cd:8c:f0:e2:2d:b6:51:6a:2f:55:78:1e:47:8f:
         90:32:42:60:4b:20:73:30:5e:3b:f8:7d:ec:e3:c7:79:96:a8:
         93:b4:9c:9c:6a:bc:ae:f9:5d:41:63:be:b8:50:1b:85:67:be:
         58:c3:7a:f2:9c:55:18:88:60:34:c3:11:ca:e0:b5:99:bc:cd:
         59:7a:49:46:e2:06:21:1f:1c:8d:83:01:c1:e1:4f:f1:69:20:
         21:ee:78:64:7d:5b:b0:00:fc:1a:e8:d9:8e:f6:83:d8:d1:de:
         4a:97:3f:06:60:8e:d6:3a:f1:2b:96:b5:32:9f:bb:0e:4b:83:
         1d:a0:a2:e1:02:fe:1b:27:fb:9d:20:11:69:c3:61:cb:a0:e9:
         e6:29:1e:55:38:b2:15:65:df:8e:d2:d0:01:73:64:de:e5:aa:
         80:79:fe:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE1QjMxMTAvBgNVBAUTKDkxNDg1MEM0QjhBNTEzQjJGOEU0RURDNEI1NTc4NzA3
Nzc2MzcyQUUwHhcNMjYwOTE3MDIyMDMxWhcNMjYwOTI0MDIyMDMxWjAYMRYwFAYD
VQQDEw02YWFiNGU3MC0wODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqpqZeqZY5YESi3RQEU2/90vb+1b8l9/g0kt/sM1lCgsIk4zFCqF+TyNwclRi
crte5+UlSL3QXkl/au5NVBXXe3r4mPZD1Z+tISQn7nBTaI4rpn3uc0ZnhieGH45b
z5WyapGumRckgFhmjuOvdpsbPZp5t/Vqoyg59Vu8WXDTQd/BmLJd/lempu2bU686
HyDxKvLWegFvGRVs+rNO/z+PtO7jrQqtlST4Vm4uQ0bIhuyYv2P6wM6p1fwY+CJD
3LFYN51KrFMaXYranEN2Urr/eayITfJ0a7l+l2JOWM9Fo/+yisnaezmmrakGOcMm
LzjIo9zflu+byu9Q+ae99V37YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbV8yuS
Oc5+HBRtUMhttdq4Ve1sMB8GA1UdIwQYMBaAFJFIUMS4pROy+OTtxLVXhwd3Y3Ku
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTVCMy9FNkY2OEYwNjBC
NEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3TDQ1TzNFdFZlSEIzZGpj
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tVaFF4TGlsRTdMNDVPM0V0VmVIQjNkamNxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTVCMy9FNkY2OEYwNjBCNEIxMUVFQUI5QUFENzlDNEY5QUUwMi9rVWhReExpbEU3
TDQ1TzNFdFZlSEIzZGpjcTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZUcP0+gfeR9TybguCQfA/z7fFAPKcfGWqOmOEoPtwHf7oM8XJXa1nYbMajZ6
dSu8eZMO9EZ6St2ZdP2nFuPb7O0v+zv7yTVVvVRdIoUqAUyvHNGsVD7zBPAskFtW
Gc2M8OIttlFqL1V4HkePkDJCYEsgczBeO/h97OPHeZaok7ScnGq8rvldQWO+uFAb
hWe+WMN68pxVGIhgNMMRyuC1mbzNWXpJRuIGIR8cjYMBweFP8WkgIe54ZH1bsAD8
GujZjvaD2NHeSpc/BmCO1jrxK5a1Mp+7DkuDHaCi4QL+Gyf7nSARacNhy6Dp5ike
VTiyFWXfjtLQAXNk3uWqgHn+lg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:36:08 2026 by rpki-client