Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
File:                     KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json)
Hash identifier:          9Nkij02oyx9ZnauawWjpWRkyD9AtsFZZualtZLBJFhI=
Subject key identifier:   A4:08:B7:8A:2D:81:2F:A9:5A:03:41:8A:8E:43:EB:12:06:C7:46:AD
Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1
Certificate issuer:       /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
Manifest number:          0115
Signing time:             Wed 07 Oct 2026 06:26:36 +0000
Manifest this update:     Wed 07 Oct 2026 06:26:36 +0000
Manifest next update:     Wed 14 Oct 2026 06:26:36 +0000
Files and hashes:         1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: mViYqbNtYUCW4vMBqWXxDZ9pasPSJnKA4OdTsB+tVFQ=)
                          2: C028C06E18E211F081A75558C4F9AE02.roa (hash: zKW/ra+nJQMWUbM8Pae8IdbHSNQ3IifmscVyx7k0qbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl
                          rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:26:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
        Validity
            Not Before: Oct  7 06:26:36 2026 GMT
            Not After : Oct 14 06:26:36 2026 GMT
        Subject: CN=6ac5e61c-06e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9f:d0:7b:7b:e9:00:98:90:d1:7d:73:6e:d7:
                    5a:c2:cf:74:a5:18:a8:4d:50:4b:e9:70:e0:a5:15:
                    7d:c4:ac:3c:c8:c0:25:a9:c3:a2:36:bb:3b:27:c1:
                    0b:c3:69:c5:ab:16:40:ce:88:32:84:95:35:aa:7c:
                    30:6e:44:e2:ad:f9:00:d2:48:3e:d3:80:3a:9f:6f:
                    ab:36:8e:e0:95:03:e5:93:69:d8:f4:a3:9b:17:40:
                    04:c5:b0:ff:3a:f0:b4:cf:08:91:9d:c6:8d:9f:fb:
                    f8:3b:60:60:e5:4c:83:f7:86:ac:cd:3b:56:45:e8:
                    85:0a:1e:9f:73:e5:c9:d1:22:bf:ea:69:e4:6f:cb:
                    6c:a0:53:62:f0:68:ab:7a:f6:10:30:ff:48:79:29:
                    4b:d1:65:62:94:f8:5d:d6:71:61:4c:75:16:7a:b4:
                    98:bd:70:d8:2d:55:f6:e7:a1:02:d6:d2:7a:2e:57:
                    61:64:e2:80:0f:50:78:f9:36:31:b8:2f:49:19:13:
                    fa:19:a4:4d:7f:af:25:3c:c2:02:04:a3:d6:71:78:
                    f0:71:c0:52:7c:b0:34:8a:4f:3f:40:f6:10:3f:a2:
                    ff:87:b5:a2:a1:3a:40:03:24:2f:89:74:d4:3a:57:
                    31:9c:a5:95:84:51:5e:48:e1:c4:fb:a4:66:10:5e:
                    b7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:08:B7:8A:2D:81:2F:A9:5A:03:41:8A:8E:43:EB:12:06:C7:46:AD
            X509v3 Authority Key Identifier:
                keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:7b:2c:c5:14:c0:00:7f:cd:87:9f:17:e8:e5:d3:b1:80:7b:
         30:c5:07:54:b2:c8:1c:37:ff:e7:20:99:c0:4f:97:33:59:51:
         6d:73:9f:9c:5f:14:d9:fa:a4:16:0c:b6:15:37:2d:46:68:38:
         d7:43:f2:bf:be:ea:40:fc:45:93:3a:18:80:38:ef:00:15:39:
         2f:d2:b7:99:90:6c:3a:e4:82:66:71:8c:57:78:0a:d3:eb:e8:
         6b:16:fe:24:af:df:d3:24:1f:fd:66:3d:a6:21:cd:f9:fb:1e:
         e4:8b:0e:35:c9:15:cf:b8:ec:a5:6a:a0:7c:36:e1:a1:96:20:
         46:ed:35:3d:01:9b:84:ba:67:56:4e:4c:33:b9:e3:37:c0:2f:
         15:bf:85:53:b9:fc:54:d3:ca:1f:22:c7:21:21:e5:a2:8c:de:
         8a:68:53:28:f8:f3:35:07:3e:84:a7:79:d4:9c:7a:bb:90:64:
         c8:80:cb:60:d3:f7:b4:53:cf:4a:43:52:52:03:6d:4d:df:e0:
         66:ae:52:58:6b:19:01:94:20:e8:d2:ad:76:be:15:c3:a5:0e:
         5f:0d:23:85:12:9a:2b:6f:cd:28:dd:6f:c3:fd:93:66:84:d2:
         24:bb:8e:82:24:9c:50:2b:9c:9a:a3:c5:9d:9d:33:da:a9:d5:
         b1:07:45:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRFM0YxMTAvBgNVBAUTKDI4QkVFNzA0MDRCMjQzMDk2NEMzMDI5MjkwRDNFQTYw
NEM5MTBFQjEwHhcNMjYxMDA3MDYyNjM2WhcNMjYxMDE0MDYyNjM2WjAYMRYwFAYD
VQQDEw02YWM1ZTYxYy0wNmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5J/Qe3vpAJiQ0X1zbtdaws90pRioTVBL6XDgpRV9xKw8yMAlqcOiNrs7J8EL
w2nFqxZAzogyhJU1qnwwbkTirfkA0kg+04A6n2+rNo7glQPlk2nY9KObF0AExbD/
OvC0zwiRncaNn/v4O2Bg5UyD94aszTtWReiFCh6fc+XJ0SK/6mnkb8tsoFNi8Gir
evYQMP9IeSlL0WVilPhd1nFhTHUWerSYvXDYLVX256EC1tJ6LldhZOKAD1B4+TYx
uC9JGRP6GaRNf68lPMICBKPWcXjwccBSfLA0ik8/QPYQP6L/h7WioTpAAyQviXTU
OlcxnKWVhFFeSOHE+6RmEF63dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQIt4ot
gS+pWgNBio5D6xIGx0atMB8GA1UdIwQYMBaAFCi+5wQEskMJZMMCkpDT6mBMkQ6x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEUzRi8zQzNFNjIwRTE4
RTIxMUYwOUJFOTk1NTdDNEY5QUUwMi9LTDduQkFTeVF3bGt3d0tTa05QcVlFeVJE
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tMN25CQVN5UXdsa3d3S1NrTlBxWUV5UkRyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEUzRi8zQzNFNjIwRTE4RTIxMUYwOUJFOTk1NTdDNEY5QUUwMi9LTDduQkFTeVF3
bGt3d0tTa05QcVlFeVJEckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfXssxRTAAH/Nh58X6OXTsYB7MMUHVLLIHDf/5yCZwE+XM1lRbXOfnF8U2fqk
Fgy2FTctRmg410Pyv77qQPxFkzoYgDjvABU5L9K3mZBsOuSCZnGMV3gK0+voaxb+
JK/f0yQf/WY9piHN+fse5IsONckVz7jspWqgfDbhoZYgRu01PQGbhLpnVk5MM7nj
N8AvFb+FU7n8VNPKHyLHISHloozeimhTKPjzNQc+hKd51Jx6u5BkyIDLYNP3tFPP
SkNSUgNtTd/gZq5SWGsZAZQg6NKtdr4Vw6UOXw0jhRKaK2/NKN1vw/2TZoTSJLuO
giScUCucmqPFnZ0z2qnVsQdF8g==
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:54:57 2026 by rpki-client