Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft
File:                     knWZPcnEM_JdNYCsd-OV0GaWSD0.mft (raw, json)
Hash identifier:          BKbudXyPMxEiL0A4A80PU40j4yc3eQFk4K4DpVbC/NY=
Subject key identifier:   A6:AA:F2:BA:7B:C8:AC:30:D4:C7:17:06:47:BB:80:AA:C5:20:E9:11
Authority key identifier: 92:75:99:3D:C9:C4:33:F2:5D:35:80:AC:77:E3:95:D0:66:96:48:3D
Certificate issuer:       /CN=A91276A3/serialNumber=9275993DC9C433F25D3580AC77E395D06696483D
Certificate serial:       07ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft
Manifest number:          07E1
Signing time:             Tue 06 Oct 2026 21:26:56 +0000
Manifest this update:     Tue 06 Oct 2026 21:26:56 +0000
Manifest next update:     Tue 13 Oct 2026 21:26:56 +0000
Files and hashes:         1: knWZPcnEM_JdNYCsd-OV0GaWSD0.crl (hash: 6wlgyi/sSv63wv21WSGGkoQ86U2n+VGBBFo8r9eEDsY=)
                          2: 57BAE77C517D11EB8949D438C4F9AE02.roa (hash: aBoUkT3XfOno4ZFpM1LCowGFp8BTgYEHGaCNCAbFWpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.crl
                          rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2029 (0x7ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91276A3, serialNumber=9275993DC9C433F25D3580AC77E395D06696483D
        Validity
            Not Before: Oct  6 21:26:56 2026 GMT
            Not After : Oct 13 21:26:56 2026 GMT
        Subject: CN=6ac567a0-0fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8e:7d:0c:a0:1d:26:61:61:2d:73:7c:28:95:
                    dc:87:65:64:f9:ea:8d:88:0d:73:d6:4d:fa:a5:db:
                    5f:d8:c6:49:e8:df:d5:b3:4f:ac:fb:e1:82:5c:5f:
                    71:52:68:ce:62:1c:f0:9c:23:17:e8:e6:11:54:b7:
                    23:bd:88:c6:9c:92:07:96:82:ca:56:e9:3a:35:7f:
                    1f:27:7c:bd:12:bf:64:08:68:5c:b9:60:d3:33:6e:
                    6c:0b:18:ee:a9:36:a0:88:6d:59:ab:ec:37:05:2b:
                    e5:88:3d:c4:87:c3:2f:b5:28:94:97:1f:76:30:ce:
                    57:ce:5b:b1:4c:a3:c0:a6:04:f1:71:64:69:37:dc:
                    93:79:a9:8e:39:43:b4:7b:b1:4c:8d:9e:ae:3f:c8:
                    89:00:8f:44:ac:ad:ff:ca:ff:1e:c1:29:fb:08:c9:
                    2c:13:8a:c2:71:a6:89:51:b3:69:4d:6f:d1:bb:0e:
                    1c:6c:3b:98:5b:43:a4:80:7d:da:1a:7e:2b:b2:31:
                    f6:72:b5:b0:ba:29:0a:1c:3f:44:cf:1e:44:aa:da:
                    8f:eb:1e:e8:20:55:95:fe:bc:fe:c4:e7:58:78:1e:
                    d7:fe:06:5f:37:c7:3b:df:06:92:c5:d8:c0:41:5d:
                    58:98:be:f3:8c:ee:5e:2c:bd:a0:0d:20:a6:60:08:
                    62:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AA:F2:BA:7B:C8:AC:30:D4:C7:17:06:47:BB:80:AA:C5:20:E9:11
            X509v3 Authority Key Identifier:
                keyid:92:75:99:3D:C9:C4:33:F2:5D:35:80:AC:77:E3:95:D0:66:96:48:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:41:12:89:96:cb:16:51:de:4f:75:a4:a4:c3:1a:58:27:3e:
         7d:60:4a:7b:ea:d8:20:a3:bd:bb:bf:66:3d:a6:84:5e:50:65:
         19:68:89:5f:72:bd:8a:88:37:3d:81:e4:15:37:ac:18:3b:43:
         00:50:18:d7:43:10:1f:16:f0:0e:45:7f:8a:b8:c1:e1:34:6c:
         76:a8:e3:56:cf:49:89:de:f0:b1:5a:9b:91:6f:98:62:1b:3e:
         b1:34:bc:0d:48:76:21:2a:25:3c:91:2d:02:bf:5f:a2:6e:97:
         9e:f3:b1:48:7e:71:35:06:b9:1a:05:f9:14:0e:57:4c:df:fc:
         6b:e1:68:2a:42:6c:85:4a:d6:8c:f5:2f:e8:86:69:02:13:ca:
         24:2e:9e:b2:7c:b5:08:5c:8c:9b:00:97:76:71:e7:4d:1b:a3:
         11:e0:43:71:2a:71:66:26:e1:ab:f4:f3:c7:41:82:a5:12:cf:
         62:e0:20:c8:82:8f:0f:01:f0:d0:14:91:ba:66:83:6a:95:82:
         54:ed:41:dc:41:a6:33:92:44:15:37:13:15:e3:c5:d2:1a:84:
         d3:bc:40:7a:17:1b:e5:0d:1b:ae:32:6d:27:fc:d1:51:be:48:
         e0:a9:40:46:8b:ae:26:6b:48:1b:81:51:32:c1:64:9b:b4:6a:
         82:e4:de:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:15:20 2026 by rpki-client