Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
File:                     KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft (raw, json)
Hash identifier:          yJ4WIhGOgShUXotSwC/WK12kBo6NIenBgKrU8eZD3R4=
Subject key identifier:   B0:C3:FF:8C:2F:89:1A:AA:37:DB:45:31:C5:16:DD:3C:B3:3E:63:C5
Authority key identifier: 29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC
Certificate issuer:       /CN=A9152329/serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
Manifest number:          016D
Signing time:             Fri 23 Oct 2026 05:27:11 +0000
Manifest this update:     Fri 23 Oct 2026 05:27:11 +0000
Manifest next update:     Fri 30 Oct 2026 05:27:11 +0000
Files and hashes:         1: KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl (hash: 2cbhQKS982TQeomIiIYOdA4k5tC7aaN6EXcvPx8w9dg=)
                          2: 38161248A26911EFBF6D0319C4F9AE02.roa (hash: AVpmO1XfQqx7osD3xv12YLKG1Ejq79RCs8GNCY34Q2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl
                          rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 05:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152329, serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC
        Validity
            Not Before: Oct 23 05:27:11 2026 GMT
            Not After : Oct 30 05:27:11 2026 GMT
        Subject: CN=6adaf02f-d76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:69:42:44:d3:e1:9e:1a:ae:1e:49:1f:03:
                    a0:3e:e6:bb:25:83:fb:c7:28:e1:05:2d:b2:08:80:
                    61:e1:b5:5b:d8:77:1b:c8:fe:09:ea:58:dd:20:7e:
                    7f:c1:b8:bd:a7:0b:30:6a:a2:4e:f3:a8:d1:20:ef:
                    b4:45:7a:ea:f4:e6:ab:7e:6b:a4:9e:f7:bd:56:36:
                    07:70:26:a0:7c:c4:8b:87:19:ef:72:fd:6d:8b:f9:
                    8e:ea:f7:ae:bf:ac:1f:02:01:6e:74:b6:ae:c4:fe:
                    29:b8:e8:73:1e:1a:65:c0:61:71:5f:0c:1b:f1:01:
                    00:84:70:b2:3f:4e:92:77:dd:96:55:bb:59:c0:f6:
                    a8:65:a3:bd:74:ca:ca:75:d7:8b:32:54:50:91:53:
                    8f:8b:1a:5d:1b:50:a7:80:cb:a7:8f:98:39:78:8b:
                    c3:96:73:02:95:44:04:3f:dd:6c:0e:39:9f:9e:5d:
                    57:05:e9:0f:c1:e9:7f:f7:30:ac:a1:3a:f3:ce:ab:
                    5b:61:e9:b9:a5:7f:76:95:7c:11:63:56:c0:d3:89:
                    f4:21:fb:5a:0c:8d:46:39:f8:e8:cb:c2:23:b0:28:
                    dd:c8:f8:88:b7:c2:b9:0b:ff:26:15:29:a0:08:c8:
                    b3:4a:f0:e3:8c:41:3c:2b:d0:b8:00:6d:47:97:bb:
                    80:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C3:FF:8C:2F:89:1A:AA:37:DB:45:31:C5:16:DD:3C:B3:3E:63:C5
            X509v3 Authority Key Identifier:
                keyid:29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:81:4f:09:29:25:1a:cc:a2:81:26:ac:f8:c7:6b:a6:30:84:
         52:d4:74:03:ea:42:52:12:c6:cf:29:50:a1:37:a2:7e:3b:36:
         a7:0b:d1:01:c0:de:c5:06:85:a8:4a:c4:84:ef:9f:0b:69:51:
         6c:d1:e4:38:11:6c:68:7b:3d:9a:2e:43:16:5a:ed:42:e9:64:
         4f:79:16:78:23:6c:e4:26:fe:88:c6:70:f1:33:ad:b2:8c:49:
         9d:3f:0d:af:72:8b:4f:50:4b:25:42:fa:92:1e:e4:52:91:f4:
         2e:4d:e9:93:a7:ad:f2:c4:d5:77:42:82:71:fe:6e:f7:25:28:
         ef:7f:d8:be:ae:18:c9:58:1c:21:4d:22:f8:49:1c:ab:85:dd:
         51:23:63:2a:8d:13:c9:38:39:bc:7b:a8:c1:3c:d3:c3:0e:d3:
         a5:eb:ad:4b:ef:07:88:67:90:0e:16:3e:8b:3d:03:03:3a:42:
         ef:22:33:46:10:fc:2e:7e:6a:7d:85:15:13:01:c5:a3:0e:f7:
         b5:d3:b1:c7:22:83:58:38:63:ed:c4:ae:3a:22:dc:79:e0:db:
         d6:d6:d1:b6:28:4e:1d:00:6f:c8:66:26:5c:f7:fc:bc:46:b2:
         f5:73:8d:44:e5:8d:ae:85:ab:69:b9:4a:13:d9:17:e4:36:db:
         43:b9:b5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:48:59 2026 by rpki-client