Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
File:                     KncXIyWXseQO6_FQ58uUIvRdim0.mft (raw, json)
Hash identifier:          TIZrR7lmXKecr+SpFwecpZTeXvdUoRsxMs6XtqWM0R4=
Subject key identifier:   B5:21:10:D1:BC:66:89:16:7D:72:D6:8D:CC:E4:76:99:63:66:D2:92
Authority key identifier: 2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D
Certificate issuer:       /CN=A913E5F9/serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
Manifest number:          85
Signing time:             Sat 03 Oct 2026 08:20:26 +0000
Manifest this update:     Sat 03 Oct 2026 08:20:25 +0000
Manifest next update:     Sat 10 Oct 2026 08:20:25 +0000
Files and hashes:         1: KncXIyWXseQO6_FQ58uUIvRdim0.crl (hash: rtto0U3HCvpG5Yy3ZBWSu/KR42nSYkT0To/wC72f9Y0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl
                          rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E5F9, serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D
        Validity
            Not Before: Oct  3 08:20:25 2026 GMT
            Not After : Oct 10 08:20:25 2026 GMT
        Subject: CN=6ac0bac9-4c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:ba:b5:32:ed:8c:87:11:e8:28:1c:9a:5f:
                    2a:76:3a:73:66:3e:a0:99:c9:4e:04:ea:af:cb:2b:
                    e3:c8:ef:e3:29:40:fa:60:c8:62:46:d6:ac:3c:74:
                    80:8d:68:4c:7e:3b:99:ab:2d:ae:db:3e:1c:d1:fa:
                    3a:6b:a1:9f:8b:2b:59:2d:5a:24:dd:c2:ad:2e:66:
                    ed:cc:98:b6:a4:20:27:1a:fc:29:69:79:68:04:42:
                    0d:39:24:a5:fb:eb:11:91:47:61:60:fb:67:ac:22:
                    28:26:d2:f8:90:90:00:f4:39:90:08:bf:eb:de:b6:
                    85:ea:48:e4:8e:64:82:70:1d:4f:e0:d0:f8:b4:5c:
                    25:8c:cf:14:5d:4a:e4:df:f4:0c:01:4c:f3:0a:68:
                    c1:01:5b:c7:83:8b:18:3a:6a:a2:8e:e3:d0:fa:5c:
                    70:02:83:72:a0:15:85:a3:93:1d:f2:54:76:d9:b5:
                    66:c0:4d:7e:98:61:ec:4b:33:4d:5f:96:b0:c9:95:
                    0e:da:6c:c1:22:6b:c3:27:d0:d2:6a:e9:4d:76:27:
                    75:20:a5:78:fb:d0:8f:43:81:bc:f9:1f:c5:3a:6d:
                    5e:ea:14:f9:83:1e:97:09:7a:01:ca:0a:7f:e4:60:
                    26:54:63:75:6c:ea:ff:93:42:1a:d2:f3:ef:ee:9f:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:21:10:D1:BC:66:89:16:7D:72:D6:8D:CC:E4:76:99:63:66:D2:92
            X509v3 Authority Key Identifier:
                keyid:2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:82:ad:cb:9e:80:83:49:b1:80:e5:38:0a:f1:48:8a:7f:4d:
         f9:25:7f:ff:e6:1b:0c:6b:53:94:df:d4:28:34:74:08:3a:fb:
         0a:64:1d:6c:f6:10:84:fb:36:5f:e8:07:52:94:bb:ee:33:40:
         29:b4:e0:87:b9:cf:0f:c2:e0:7e:19:7e:f5:b5:08:a9:23:0f:
         67:26:51:4f:70:5a:e6:e8:ca:a3:80:1e:1b:0f:c6:6e:58:d1:
         28:cd:25:4b:c5:f9:9f:95:04:ad:bf:67:c3:bf:3e:49:d1:61:
         42:a0:81:6c:30:06:18:d3:d1:bc:8c:3b:7b:81:5d:50:58:24:
         1c:72:a5:29:ef:db:4d:6a:93:e9:e8:0e:16:a6:6f:d2:86:05:
         b0:7d:76:1a:08:25:42:0a:f4:a1:fc:79:37:1f:95:fd:a7:af:
         36:af:92:9d:62:6b:57:1a:a5:c2:ea:80:32:8a:1e:1c:7b:6c:
         38:11:31:51:8f:f6:8b:a3:b7:3d:e1:54:97:5d:05:30:8f:ef:
         9b:92:1f:d9:05:bf:19:52:4c:94:95:32:59:8e:d1:4a:04:6c:
         9b:0b:03:13:6e:92:50:68:12:d2:97:c3:68:8f:a4:96:ae:85:
         4f:5b:7c:56:1e:9b:c9:b4:64:1a:15:1e:3b:68:21:cd:5c:8e:
         5e:b1:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:57:32 2026 by rpki-client