Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File:                     Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier:          0gD1I7jNYwhPKGOGGuwdXWLLp5Jizp/SlgMQqabS+zA=
Subject key identifier:   53:03:EF:4F:3E:AF:54:1F:C6:0A:02:F2:5C:54:40:B3:F7:69:F1:E0
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer:       /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial:       0D2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number:          0D27
Signing time:             Sun 04 Oct 2026 18:17:15 +0000
Manifest this update:     Sun 04 Oct 2026 18:17:14 +0000
Manifest next update:     Sun 11 Oct 2026 18:17:14 +0000
Files and hashes:         1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: LOt61TFdi0pMcFwXR4NxYhLnvSJJCM0bnAMqptWWyWI=)
                          2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: QuCnvPryU+p8dBWWOPW2KrTltF89H58QfoFBQxj01yQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
                          rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3375 (0xd2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
        Validity
            Not Before: Oct  4 18:17:14 2026 GMT
            Not After : Oct 11 18:17:14 2026 GMT
        Subject: CN=6ac2982a-2349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:50:40:82:93:93:ff:2c:62:9e:cd:54:8a:2b:
                    c3:8e:13:91:57:3c:7e:9f:c6:b8:fa:cc:40:6c:ef:
                    95:6c:70:47:f2:57:91:07:b3:37:05:3a:8d:f0:8f:
                    db:80:3e:42:ab:5c:be:20:55:e0:10:da:66:f7:34:
                    02:d2:6f:9b:8b:25:71:46:fa:dd:b8:99:9c:96:2e:
                    64:90:27:16:ea:3a:e3:3e:37:21:41:de:7f:76:6d:
                    d0:10:3a:c3:0b:e7:ba:b1:02:6c:85:23:81:98:23:
                    cc:3c:f0:8a:d0:b6:99:d6:6e:0c:ae:a9:bd:bf:29:
                    01:4c:52:27:26:c9:ac:f3:9a:44:b6:42:88:c6:e5:
                    34:56:23:9d:ab:b1:12:8c:74:39:0b:b9:06:48:38:
                    c1:ef:9f:a7:c7:fb:bc:da:e0:e1:b5:cf:bc:94:04:
                    15:5e:09:b9:01:e2:9c:11:81:ab:04:76:9e:5c:48:
                    36:b6:f3:9a:1a:db:68:06:81:a3:ef:f4:ac:73:6d:
                    c1:d0:c7:1b:ca:28:99:35:a8:0e:eb:24:34:b2:79:
                    28:c7:38:ab:4a:c4:f5:78:ea:da:54:d2:4d:b2:7a:
                    77:54:b7:4f:44:a5:f9:82:44:4d:8b:f8:a2:dc:2f:
                    4f:01:ee:d0:a7:e3:c4:ed:90:a7:40:aa:ba:4a:7c:
                    53:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:03:EF:4F:3E:AF:54:1F:C6:0A:02:F2:5C:54:40:B3:F7:69:F1:E0
            X509v3 Authority Key Identifier:
                keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:5a:fc:95:fa:a3:93:73:81:ef:a5:07:70:1b:b7:32:49:4c:
         98:9a:87:b6:c0:5b:4f:8a:bf:d9:84:93:49:80:d5:40:38:8a:
         71:6e:1a:d9:26:28:a5:6b:f2:85:db:70:2b:b8:fe:02:57:a4:
         4c:04:70:d1:25:0d:26:f4:6b:6d:77:06:c6:8a:fe:1a:7c:be:
         f6:bb:ed:30:33:c8:b0:df:eb:78:25:be:5a:38:00:00:92:35:
         3a:4a:d0:73:42:fc:9e:c4:08:a1:18:8e:d8:10:4c:ab:a1:3d:
         55:8b:27:01:0a:a0:04:db:69:e8:a4:89:fe:c0:48:41:56:98:
         af:af:e3:ec:f6:e8:41:c2:94:34:8a:aa:5c:fa:f4:f0:3e:af:
         63:f6:e0:ea:15:60:dd:ea:15:81:6d:40:83:b2:d3:9c:c2:f8:
         2c:c0:1c:72:7d:27:5e:21:58:55:32:c7:d6:9d:8b:08:40:4e:
         e4:2c:71:99:9e:29:e2:7b:c0:a3:55:b0:37:d1:6d:24:26:72:
         b4:5f:a0:fa:65:9f:7b:40:ca:31:b7:37:78:78:68:37:7b:06:
         be:fe:27:03:8b:06:56:d7:ee:da:80:7d:1e:6e:dd:10:e1:25:
         57:b8:9e:ee:80:5c:23:ec:3c:af:2a:4a:1f:c5:c6:dd:b6:d0:
         80:d0:f6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:15:20 2026 by rpki-client