Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
File:                     kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json)
Hash identifier:          b6UhkluY6fE4fdE5Dh1v0Ok93pOo9INibzMPAeIhpq4=
Subject key identifier:   BD:8A:AF:62:58:24:7E:3B:3B:74:5E:53:A7:0B:1B:94:6C:C1:B3:5B
Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
Certificate issuer:       /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Certificate serial:       0B19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
Manifest number:          0B0F
Signing time:             Tue 06 Oct 2026 19:26:10 +0000
Manifest this update:     Tue 06 Oct 2026 19:26:09 +0000
Manifest next update:     Tue 13 Oct 2026 19:26:09 +0000
Files and hashes:         1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: ZWURIaJ2XYwVqUCqRcdVYQXc988ERR9xkQNsZnH/jxY=)
                          2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: gSKNogEshZnmN/3zaUCV8zHvFUQUbigi4NIpUM9EKFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
                          rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2841 (0xb19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
        Validity
            Not Before: Oct  6 19:26:09 2026 GMT
            Not After : Oct 13 19:26:09 2026 GMT
        Subject: CN=6ac54b52-d60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:48:63:bb:6f:27:15:a5:90:da:1c:00:59:
                    ec:d1:f1:af:82:f8:e6:95:2d:77:56:28:6d:d1:bd:
                    76:52:0d:df:6f:08:d7:77:2f:64:be:7f:54:0d:95:
                    4c:40:45:e3:ba:f0:7b:46:ab:89:88:d0:97:1c:06:
                    a4:dc:80:fb:9e:2c:30:66:bf:63:4b:b1:80:ca:35:
                    b0:78:5a:eb:3a:c6:b9:32:cd:69:f5:f3:d2:4a:76:
                    7f:fb:21:08:d5:54:5f:d6:14:f8:ae:a3:63:7b:06:
                    68:e3:24:d1:3c:13:39:34:3f:12:9d:4e:12:8e:a8:
                    26:f0:c7:51:a5:cf:44:96:e4:83:94:2d:70:ba:60:
                    85:9f:f6:99:92:de:48:8d:08:77:2b:63:c2:a9:cb:
                    bb:2b:cc:94:00:74:a7:d0:8e:d4:d0:47:a3:1c:3e:
                    c7:b2:f6:cc:8c:2a:76:8c:f6:eb:10:8d:db:14:a2:
                    bb:2d:44:8b:10:7f:50:99:55:13:bf:b4:13:f0:0d:
                    65:e8:50:9f:16:4f:89:a5:2e:3a:6e:b5:1b:2c:80:
                    a1:88:72:0b:56:70:97:39:79:d7:af:e5:e2:2d:ef:
                    b6:1c:09:8e:b3:0b:75:22:2d:47:c0:96:75:29:f1:
                    7f:27:7b:3b:13:70:98:18:02:08:21:b1:17:06:e3:
                    de:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8A:AF:62:58:24:7E:3B:3B:74:5E:53:A7:0B:1B:94:6C:C1:B3:5B
            X509v3 Authority Key Identifier:
                keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c2:fd:07:63:1c:5e:e7:02:8d:62:03:47:be:2b:96:53:87:
         be:4e:c8:b9:36:c3:3d:ea:57:fa:53:43:2a:9d:fb:b2:62:47:
         dd:0e:24:63:cf:9d:59:a1:bb:ff:1d:d5:12:61:f4:49:a8:52:
         be:56:2c:c0:f6:4b:ca:d2:9d:6b:dd:e0:b3:95:7c:a2:3f:f0:
         4c:2a:07:3d:84:aa:ef:4a:29:5a:34:b0:30:f1:4f:64:9c:e8:
         20:a8:39:f4:bc:c2:82:f9:55:de:69:de:91:f3:65:f1:63:f6:
         f7:2c:26:e7:04:c1:79:e1:00:82:56:ef:04:0f:0f:b1:b2:3e:
         ba:2b:10:df:9e:f2:ed:98:e3:5f:3d:c8:f4:30:54:c5:99:8e:
         41:b7:03:04:bb:e3:54:d0:a7:49:59:60:59:2c:8e:59:57:49:
         1a:d9:86:03:51:4d:0b:c6:fe:4c:da:7f:81:60:25:78:5e:31:
         d0:cd:94:d6:d6:fc:30:0b:f1:e2:58:01:e4:27:f6:88:b4:ac:
         18:c7:ca:97:4a:c2:a4:22:fd:ae:5d:ae:9b:c1:63:23:4a:7a:
         3d:88:a8:fe:c6:31:b6:3f:d3:20:2f:19:05:de:6f:8a:45:7b:
         82:f7:4a:bb:97:50:6a:bb:5f:a5:84:a8:1d:49:c4:3b:72:c9:
         68:fe:c5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:38:53 2026 by rpki-client