Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
File:                     _knPM_vkJHsroe6aVISnQK07bg4.mft (raw, json)
Hash identifier:          GEl/LINIsPErDN/fqFbMXWsSrb/OsKfHjLED+Xpfaec=
Subject key identifier:   49:89:F8:31:56:3A:41:6F:F7:E3:3D:EE:58:1D:75:1C:DD:6C:C4:59
Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
Certificate issuer:       /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
Manifest number:          D4
Signing time:             Sat 03 Oct 2026 07:23:08 +0000
Manifest this update:     Sat 03 Oct 2026 07:23:07 +0000
Manifest next update:     Sat 10 Oct 2026 07:23:07 +0000
Files and hashes:         1: _knPM_vkJHsroe6aVISnQK07bg4.crl (hash: wyBheokauIDhfpJPBfNaW+X5mIuPxO7NkYbPGxYKyLA=)
                          2: PYKheHolcObXv56oVaEsjKBkEwY.asa (hash: CjdTHSeU100/DOFlvWSJyA0VjWKaT/NuHuDVW9WZsH0=)
                          3: 0E06126A7E4011F084643A20C4F9AE02.roa (hash: okHYiY+i6MMTwV1Ep1eaV172yLMQeGvbCo4Bg+Bacec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
                          rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
        Validity
            Not Before: Oct  3 07:23:07 2026 GMT
            Not After : Oct 10 07:23:07 2026 GMT
        Subject: CN=6ac0ad5c-dd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:32:18:d4:dd:40:a2:b2:72:84:3b:a9:a9:fc:
                    7f:26:7b:fd:6c:5c:af:bf:c2:5d:1b:f2:c7:12:c0:
                    86:65:2d:d8:c3:29:2b:ce:0e:d0:5e:23:82:c2:07:
                    ef:8f:5c:b4:5a:7a:bc:a2:a8:64:66:8f:6f:f5:b4:
                    e4:88:57:27:7d:e3:31:fb:c8:28:46:f8:6b:bd:45:
                    94:a5:5a:31:42:fb:ca:61:48:e4:f4:79:f9:c1:bc:
                    73:27:a4:5b:b3:b2:c9:d1:08:8e:26:37:0e:03:83:
                    7c:50:68:63:ca:4b:34:5b:b0:69:41:9b:21:68:dc:
                    12:46:23:6c:eb:57:68:0e:ec:67:42:f8:78:ff:0d:
                    7b:48:36:bb:39:08:ee:9c:ef:37:b8:89:0f:41:8e:
                    fb:7b:a5:c2:68:de:f4:c2:31:20:e9:e5:b6:98:de:
                    d0:c7:c9:42:4e:28:4b:7c:a6:e1:fd:56:b7:d1:f6:
                    6f:2d:37:22:df:64:59:39:fd:a7:f3:98:4e:2d:cd:
                    4c:f7:0b:f7:0a:46:c2:b7:d6:fc:3e:1d:5b:f7:0f:
                    3a:f7:b1:58:22:a4:70:a8:28:7e:14:41:aa:6d:1c:
                    ea:3f:b6:f5:7d:9d:88:b9:52:18:a2:15:3d:aa:c4:
                    45:95:06:cc:eb:55:98:eb:ea:db:b5:ea:0f:f2:7c:
                    6f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:89:F8:31:56:3A:41:6F:F7:E3:3D:EE:58:1D:75:1C:DD:6C:C4:59
            X509v3 Authority Key Identifier:
                keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d3:d2:0c:77:62:c0:08:86:12:5c:bd:7d:1a:98:bb:cf:96:
         be:1d:69:9c:f2:8a:db:79:48:e2:fe:41:76:4d:9f:a8:f5:95:
         da:fc:32:6e:5d:b0:8b:a4:9e:cb:39:b2:f0:22:39:e2:fb:20:
         28:51:5a:4c:14:7d:96:96:09:c1:53:fc:21:38:f6:a7:89:d3:
         a0:0f:70:3a:9d:c8:cb:67:b9:33:64:13:db:51:fc:ef:6f:57:
         b9:0c:28:cf:e1:c4:75:8e:43:a6:8a:51:53:f0:6f:c7:6e:b3:
         b8:32:6b:55:64:bb:c1:55:a6:a0:29:91:a9:24:67:81:97:8a:
         3b:f8:21:e5:0d:ec:f3:ef:b6:43:be:82:6b:e0:48:5a:1a:52:
         90:55:cc:71:d6:8b:d8:7a:03:e1:f5:93:4b:3d:50:be:8d:cb:
         4e:8d:89:b6:a2:b2:ff:f4:86:be:e9:38:cb:f1:2c:28:79:4d:
         3a:be:63:6f:75:b8:94:96:72:d1:58:42:0f:85:4e:10:48:49:
         59:de:2a:ab:e9:2a:f5:66:8a:e4:20:aa:6f:04:0b:30:84:24:
         5e:d4:53:45:f3:18:50:94:ea:4e:39:07:90:6d:73:1b:1e:c9:
         43:34:5b:6a:ae:d3:58:fa:a4:67:53:fb:64:ae:72:36:ab:ef:
         46:d5:1d:e4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc3NjAxMTAvBgNVBAUTKEZFNDlDRjMzRkJFNDI0N0IyQkExRUU5QTU0ODRBNzQw
QUQzQjZFMEUwHhcNMjYxMDAzMDcyMzA3WhcNMjYxMDEwMDcyMzA3WjAYMRYwFAYD
VQQDEw02YWMwYWQ1Yy1kZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7jIY1N1AorJyhDupqfx/Jnv9bFyvv8JdG/LHEsCGZS3Ywykrzg7QXiOCwgfv
j1y0Wnq8oqhkZo9v9bTkiFcnfeMx+8goRvhrvUWUpVoxQvvKYUjk9Hn5wbxzJ6Rb
s7LJ0QiOJjcOA4N8UGhjyks0W7BpQZshaNwSRiNs61doDuxnQvh4/w17SDa7OQju
nO83uIkPQY77e6XCaN70wjEg6eW2mN7Qx8lCTihLfKbh/Va30fZvLTci32RZOf2n
85hOLc1M9wv3CkbCt9b8Ph1b9w8697FYIqRwqCh+FEGqbRzqP7b1fZ2IuVIYohU9
qsRFlQbM61WY6+rbteoP8nxvJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEmJ+DFW
OkFv9+M97lgddRzdbMRZMB8GA1UdIwQYMBaAFP5JzzP75CR7K6HumlSEp0CtO24O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzc2MC83RDUzMTQyMDdF
M0YxMUYwQUIwODlCMUVDNEY5QUUwMi9fa25QTV92a0pIc3JvZTZhVklTblFLMDdi
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19rblBNX3ZrSkhzcm9lNmFWSVNuUUswN2JnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Nzc2MC83RDUzMTQyMDdFM0YxMUYwQUIwODlCMUVDNEY5QUUwMi9fa25QTV92a0pI
c3JvZTZhVklTblFLMDdiZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAetPSDHdiwAiGEly9fRqYu8+Wvh1pnPKK23lI4v5Bdk2fqPWV2vwybl2wi6Se
yzmy8CI54vsgKFFaTBR9lpYJwVP8ITj2p4nToA9wOp3Iy2e5M2QT21H8729XuQwo
z+HEdY5DpopRU/Bvx26zuDJrVWS7wVWmoCmRqSRngZeKO/gh5Q3s8++2Q76Ca+BI
WhpSkFXMcdaL2HoD4fWTSz1Qvo3LTo2JtqKy//SGvuk4y/EsKHlNOr5jb3W4lJZy
0VhCD4VOEEhJWd4qq+kq9WaK5CCqbwQLMIQkXtRTRfMYUJTqTjkHkG1zGx7JQzRb
aq7TWPqkZ1P7ZK5yNqvvRtUd5A==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:52:21 2026 by rpki-client