Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
File:                     KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json)
Hash identifier:          s9MkEThIpRTBboEfKyahNiKgWX5SmkbyRen/lTD1sHw=
Subject key identifier:   BF:23:5E:AC:CC:88:50:1D:93:66:ED:03:BF:5D:E3:FB:E6:DD:27:14
Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
Certificate issuer:       /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
Certificate serial:       06DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
Manifest number:          06CA
Signing time:             Wed 30 Sep 2026 22:39:32 +0000
Manifest this update:     Wed 30 Sep 2026 22:39:31 +0000
Manifest next update:     Wed 07 Oct 2026 22:39:31 +0000
Files and hashes:         1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: HOY5PcRXE3ysyWZzwFg8eXtOGcfxdDzjz2zzeaMwqiI=)
                          2: 590697D6465611EE8128031BC4F9AE02.roa (hash: VAtwg4JA7DKaiR1Y/aQYlkU3CfV+E/YtMAPsl8ob9cY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl
                          rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 22:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757 (0x6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
        Validity
            Not Before: Sep 30 22:39:31 2026 GMT
            Not After : Oct  7 22:39:31 2026 GMT
        Subject: CN=6abd8fa4-8025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:66:34:af:86:14:8a:16:66:c4:cd:67:20:
                    a2:33:73:d9:97:25:5c:0e:55:d7:e2:fb:18:fb:bf:
                    d1:74:bc:e7:35:b6:f3:27:b1:02:c1:c6:68:9c:9b:
                    1d:5f:3a:14:50:ef:3d:37:d0:6d:88:1b:86:73:87:
                    f2:71:39:cd:0c:47:c7:dd:49:a4:28:dc:0d:e5:14:
                    e5:c2:42:be:fa:c1:4c:69:45:06:ab:d4:fd:f4:22:
                    c7:53:ed:bc:98:71:82:0b:c9:e8:34:fb:e7:17:77:
                    72:18:57:1a:d2:95:cc:12:83:cf:8c:63:77:8a:b4:
                    c6:4b:33:d5:ad:1f:3b:8d:aa:f9:6b:72:e3:87:54:
                    8f:17:54:d7:32:21:70:46:63:fa:1d:ff:77:28:42:
                    9c:27:2a:ae:4c:3c:97:a3:75:f4:72:e3:5c:24:f6:
                    51:19:1e:ff:8c:7b:58:25:85:3f:af:ff:08:8b:10:
                    76:50:8f:5a:68:66:73:fb:43:74:f0:41:a6:66:07:
                    09:6a:33:9a:09:a4:26:77:ba:7c:6d:e2:9c:2f:f2:
                    38:f9:3b:57:51:18:e6:cb:4d:ad:32:bd:e1:a1:0d:
                    83:ba:a7:20:98:0f:a2:1c:7a:8c:e1:6f:fd:83:ca:
                    5c:21:fa:f7:2d:ff:22:5c:50:8c:25:7d:82:47:7f:
                    36:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:23:5E:AC:CC:88:50:1D:93:66:ED:03:BF:5D:E3:FB:E6:DD:27:14
            X509v3 Authority Key Identifier:
                keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:0e:c6:91:d6:e9:28:06:76:bd:e8:33:59:03:ca:fa:62:46:
         97:67:09:86:81:ec:a6:ef:6f:25:06:9b:d9:6f:7a:fd:a6:5b:
         99:eb:aa:74:67:70:e5:b9:c9:73:e6:6a:12:1e:4c:af:d5:9d:
         e3:3a:0e:f8:1d:0b:89:c0:ae:67:3d:0f:39:60:ae:65:1b:08:
         e7:4a:36:68:7b:e0:5e:74:56:32:a7:69:4d:0a:25:f9:2e:ca:
         8d:85:e3:98:5d:ea:a6:6b:7b:ea:e8:09:57:76:28:ba:e1:71:
         31:90:0e:90:b3:12:ac:6a:08:9e:ba:18:86:36:80:b8:86:a3:
         ed:cd:21:25:b0:ae:9e:7a:73:6b:b2:98:72:5c:0c:09:51:e1:
         c4:43:cc:7a:94:ec:00:e0:24:c9:f2:b8:a1:95:ed:6e:da:36:
         92:4c:5e:12:43:82:e6:d5:27:af:cb:90:71:9b:d3:17:cf:ab:
         1e:ee:ce:b1:d1:8a:84:b8:66:28:26:2a:6c:5f:93:e9:90:40:
         7c:1c:97:95:5e:82:ca:a3:7e:c2:7d:c5:be:46:cc:6f:6a:28:
         2c:42:1a:0c:f7:cd:b1:2a:78:ef:9b:35:aa:42:92:bd:e8:2a:
         70:41:8e:70:69:7c:a0:f6:cc:5c:bc:de:99:5d:0f:bf:04:48:
         34:7e:4f:ad
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG
ODE1NkUwRTkwHhcNMjYwOTMwMjIzOTMxWhcNMjYxMDA3MjIzOTMxWjAYMRYwFAYD
VQQDEw02YWJkOGZhNC04MDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw1BmNK+GFIoWZsTNZyCiM3PZlyVcDlXX4vsY+7/RdLznNbbzJ7ECwcZonJsd
XzoUUO89N9BtiBuGc4fycTnNDEfH3UmkKNwN5RTlwkK++sFMaUUGq9T99CLHU+28
mHGCC8noNPvnF3dyGFca0pXMEoPPjGN3irTGSzPVrR87jar5a3Ljh1SPF1TXMiFw
RmP6Hf93KEKcJyquTDyXo3X0cuNcJPZRGR7/jHtYJYU/r/8IixB2UI9aaGZz+0N0
8EGmZgcJajOaCaQmd7p8beKcL/I4+TtXURjmy02tMr3hoQ2DuqcgmA+iHHqM4W/9
g8pcIfr3Lf8iXFCMJX2CR382bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL8jXqzM
iFAdk2btA79d4/vm3ScUMB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1
MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjEwOS9DODIwNzIxMkM1MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNr
Y0gyN0ZKN1ZWOEQ0Rlc0T2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqA7GkdbpKAZ2vegzWQPK+mJGl2cJhoHspu9vJQab2W96/aZbmeuqdGdw5bnJ
c+ZqEh5Mr9Wd4zoO+B0LicCuZz0POWCuZRsI50o2aHvgXnRWMqdpTQol+S7KjYXj
mF3qpmt76ugJV3YouuFxMZAOkLMSrGoInroYhjaAuIaj7c0hJbCunnpza7KYclwM
CVHhxEPMepTsAOAkyfK4oZXtbto2kkxeEkOC5tUnr8uQcZvTF8+rHu7OsdGKhLhm
KCYqbF+T6ZBAfByXlV6CyqN+wn3FvkbMb2ooLEIaDPfNsSp475s1qkKSvegqcEGO
cGl8oPbMXLzemV0PvwRINH5PrQ==
-----END CERTIFICATE-----
Generated at Fri Oct 2 14:55:12 2026 by rpki-client