Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
File:                     kR1QVY2f8JK5xznqEKW1M-Lp_js.mft (raw, json)
Hash identifier:          KNzQcGHhHLLXtDiP49tilb4DWyZGcYFjygHMNT2dV+g=
Subject key identifier:   45:8F:A3:42:CB:94:4B:D7:A7:57:76:31:E2:70:2E:23:83:70:5E:85
Authority key identifier: 91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B
Certificate issuer:       /CN=A9142FBC/serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
Manifest number:          F3
Signing time:             Wed 07 Oct 2026 06:50:48 +0000
Manifest this update:     Wed 07 Oct 2026 06:50:47 +0000
Manifest next update:     Wed 14 Oct 2026 06:50:47 +0000
Files and hashes:         1: kR1QVY2f8JK5xznqEKW1M-Lp_js.crl (hash: ZEbe+vl1d5nWPXS5YtlJ3CMD9MIj3szKy6VTkKD77MQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl
                          rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142FBC, serialNumber=911D50558D9FF092B9C739EA10A5B533E2E9FE3B
        Validity
            Not Before: Oct  7 06:50:47 2026 GMT
            Not After : Oct 14 06:50:47 2026 GMT
        Subject: CN=6ac5ebc8-3b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:a6:27:29:4a:05:d4:9c:82:f9:61:1c:54:
                    11:87:54:3a:b0:b8:09:af:da:5f:63:53:e0:38:87:
                    07:f8:7b:d0:e8:22:50:f1:ec:5b:90:90:1e:3a:2f:
                    77:35:ab:bf:6f:ba:c4:df:f2:d2:e3:7c:28:d1:73:
                    b8:76:e2:a5:5a:a8:73:e6:01:ba:a6:44:79:39:91:
                    e6:fc:b8:1d:7c:6a:a4:67:13:6b:25:e6:06:0a:83:
                    8f:f3:76:0c:be:bb:08:5f:b3:d3:21:83:57:35:da:
                    a5:db:fb:a8:94:a0:96:59:d5:8d:d9:b9:c4:c8:1b:
                    2d:2e:0a:5a:57:36:16:11:a5:aa:95:e5:5a:13:91:
                    b8:e6:8d:48:25:24:df:b3:8e:2f:c7:c1:f9:1e:bd:
                    f7:c2:75:01:ba:4a:1f:30:1d:68:3c:ff:f2:9b:56:
                    06:19:56:2c:e4:f8:a5:c6:20:c6:47:00:ae:8e:b1:
                    ba:e1:39:59:f2:9a:e8:e4:b3:59:f1:13:70:f4:56:
                    ac:3d:3d:ee:5a:e2:f5:4f:b3:78:7f:85:00:64:3d:
                    12:c9:44:fe:c9:13:fa:68:a7:9e:89:4a:b3:0c:7d:
                    65:f5:2e:b6:30:26:54:2c:47:a6:15:16:1d:d3:8d:
                    06:55:b5:53:c2:de:6e:c3:d0:d0:a8:83:cf:9f:cb:
                    2a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8F:A3:42:CB:94:4B:D7:A7:57:76:31:E2:70:2E:23:83:70:5E:85
            X509v3 Authority Key Identifier:
                keyid:91:1D:50:55:8D:9F:F0:92:B9:C7:39:EA:10:A5:B5:33:E2:E9:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kR1QVY2f8JK5xznqEKW1M-Lp_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142FBC/A9E1325652F711F0A6FD9D42C4F9AE02/kR1QVY2f8JK5xznqEKW1M-Lp_js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:59:11:c7:42:d9:2f:69:ce:f5:cf:26:c3:fb:6d:83:f9:1d:
         7f:1d:f2:72:c9:30:20:7a:e6:ab:ff:9e:5b:f4:ed:0a:87:f1:
         33:d0:3b:ba:f8:c7:40:00:29:a0:2b:8f:93:90:d4:6f:1f:58:
         32:73:f5:b4:89:10:1e:b8:78:54:50:fb:98:17:3d:0d:da:64:
         21:de:87:af:cd:6d:52:29:13:b1:a8:c8:db:f4:e7:eb:7e:ce:
         87:82:50:49:e6:69:e3:7b:ab:14:6e:1d:50:21:60:35:c3:1b:
         ff:b2:3b:55:84:ed:93:43:28:20:be:26:e2:f9:67:c0:ea:57:
         93:ef:a5:e5:8c:d0:2f:3f:bb:56:58:2d:97:f5:6b:40:41:68:
         75:8e:b8:fe:22:b0:16:c3:c3:84:bd:dc:4f:90:50:ae:47:87:
         83:c6:78:f5:79:f7:5a:88:00:1d:2d:21:04:a3:c1:27:e8:ad:
         f8:2d:4e:c5:a8:a9:95:4d:50:50:f6:dd:5b:2d:03:b0:ef:ac:
         39:29:b7:6f:0a:1e:87:88:87:13:b9:35:0c:21:c3:f8:0c:0f:
         e0:35:f0:59:15:eb:02:7a:8d:06:be:21:ec:ed:f2:75:2e:61:
         67:8f:b3:e2:a0:0f:84:0c:b7:28:99:e9:31:30:c0:e8:2f:b6:
         76:60:27:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJGQkMxMTAvBgNVBAUTKDkxMUQ1MDU1OEQ5RkYwOTJCOUM3MzlFQTEwQTVCNTMz
RTJFOUZFM0IwHhcNMjYxMDA3MDY1MDQ3WhcNMjYxMDE0MDY1MDQ3WjAYMRYwFAYD
VQQDEw02YWM1ZWJjOC0zYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqpWmJylKBdScgvlhHFQRh1Q6sLgJr9pfY1PgOIcH+HvQ6CJQ8exbkJAeOi93
Nau/b7rE3/LS43wo0XO4duKlWqhz5gG6pkR5OZHm/LgdfGqkZxNrJeYGCoOP83YM
vrsIX7PTIYNXNdql2/uolKCWWdWN2bnEyBstLgpaVzYWEaWqleVaE5G45o1IJSTf
s44vx8H5Hr33wnUBukofMB1oPP/ym1YGGVYs5PilxiDGRwCujrG64TlZ8pro5LNZ
8RNw9FasPT3uWuL1T7N4f4UAZD0SyUT+yRP6aKeeiUqzDH1l9S62MCZULEemFRYd
040GVbVTwt5uw9DQqIPPn8sqawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWPo0LL
lEvXp1d2MeJwLiODcF6FMB8GA1UdIwQYMBaAFJEdUFWNn/CSucc56hCltTPi6f47
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkZCQy9BOUUxMzI1NjUy
RjcxMUYwQTZGRDlENDJDNEY5QUUwMi9rUjFRVlkyZjhKSzV4em5xRUtXMU0tTHBf
anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tSMVFWWTJmOEpLNXh6bnFFS1cxTS1McF9qcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkZCQy9BOUUxMzI1NjUyRjcxMUYwQTZGRDlENDJDNEY5QUUwMi9rUjFRVlkyZjhK
SzV4em5xRUtXMU0tTHBfanMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcFkRx0LZL2nO9c8mw/ttg/kdfx3ycskwIHrmq/+eW/TtCofxM9A7uvjHQAAp
oCuPk5DUbx9YMnP1tIkQHrh4VFD7mBc9DdpkId6Hr81tUikTsajI2/Tn637Oh4JQ
SeZp43urFG4dUCFgNcMb/7I7VYTtk0MoIL4m4vlnwOpXk++l5YzQLz+7Vlgtl/Vr
QEFodY64/iKwFsPDhL3cT5BQrkeHg8Z49Xn3WogAHS0hBKPBJ+it+C1OxaiplU1Q
UPbdWy0DsO+sOSm3bwoeh4iHE7k1DCHD+AwP4DXwWRXrAnqNBr4h7O3ydS5hZ4+z
4qAPhAy3KJnpMTDA6C+2dmAnDA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:36:03 2026 by rpki-client