Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
File:                     kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json)
Hash identifier:          omKhP/RPpVhNhjw5/m3W+BpxgoBIC9M9X2ne2p7vuyo=
Subject key identifier:   4F:E4:4C:C8:7A:AB:8D:60:B1:B8:BC:B0:F9:CB:B2:90:32:47:7E:04
Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66
Certificate issuer:       /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
Manifest number:          0183
Signing time:             Sat 03 Oct 2026 05:14:22 +0000
Manifest this update:     Sat 03 Oct 2026 05:14:22 +0000
Manifest next update:     Sat 10 Oct 2026 05:14:22 +0000
Files and hashes:         1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: ICsZ+eLT8z0rqILDqhzQ1x0ifoCOjS0VfEcgDEbv8EM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl
                          rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
        Validity
            Not Before: Oct  3 05:14:22 2026 GMT
            Not After : Oct 10 05:14:22 2026 GMT
        Subject: CN=6ac08f2e-899c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:9d:ff:9f:c7:b2:d3:61:f7:2a:5e:b6:27:
                    4a:20:e2:03:de:a4:c7:8a:03:f1:2e:de:bc:9a:34:
                    7a:78:a5:e0:50:ba:b9:ba:37:7c:3e:27:95:8b:bc:
                    bc:15:ca:7c:4f:18:a3:91:85:d4:c0:bc:d2:a9:f3:
                    c5:82:15:32:71:90:80:9d:d3:14:07:3b:e7:cb:e2:
                    fe:a6:14:90:2e:d6:9b:c5:ca:db:e5:2a:51:02:f3:
                    f5:d2:89:77:31:49:2c:6b:43:12:0b:33:9d:42:be:
                    69:b1:7c:19:9a:cd:d5:cd:92:5c:9d:9e:13:94:2d:
                    e3:0b:0f:12:16:49:08:78:c3:8d:b4:2c:57:cd:b2:
                    5c:f3:8a:82:44:1c:e0:df:a9:38:fb:d6:2d:94:5a:
                    71:01:f7:00:83:8a:31:3e:60:eb:5b:eb:34:e9:44:
                    27:70:65:80:b3:16:75:37:11:85:59:97:05:2c:5c:
                    74:55:0f:91:84:eb:7a:5d:be:ba:e0:91:97:08:a7:
                    e4:b3:d7:db:3e:c0:d6:a3:d0:f3:d5:bd:07:46:64:
                    4e:8d:d7:5a:16:2c:f7:1b:0a:1d:78:4b:f7:2f:50:
                    83:1d:ce:a2:31:9c:38:9f:b6:ad:15:a0:cc:b8:80:
                    fd:92:fe:fd:c3:f7:c6:67:a3:94:b4:e8:f5:35:70:
                    9d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E4:4C:C8:7A:AB:8D:60:B1:B8:BC:B0:F9:CB:B2:90:32:47:7E:04
            X509v3 Authority Key Identifier:
                keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d5:50:64:8f:8c:6e:79:fe:d8:0b:54:bf:52:c0:ba:55:de:
         44:69:fd:28:a5:9c:04:b8:2b:62:1d:c1:67:d0:2e:93:22:43:
         31:93:b4:66:f4:0f:4d:ec:77:8a:81:89:2c:22:50:58:ea:d3:
         56:ac:79:1c:99:0d:bb:0c:e8:d5:3e:52:81:67:98:49:fe:51:
         f8:b0:6f:7c:54:76:12:dd:e8:08:49:00:ff:90:cd:44:77:b8:
         b7:8b:37:55:53:24:62:33:cc:9c:6f:84:d2:94:e3:5a:ef:58:
         7b:dc:6c:f5:32:6f:05:7e:4d:e3:be:53:81:48:44:da:0c:13:
         70:d3:82:d3:12:f7:92:df:2c:30:84:34:b0:4a:e3:29:23:b7:
         33:c3:70:58:c1:f4:ab:10:2e:66:55:81:11:79:99:cc:7b:fd:
         92:e8:8c:34:74:42:58:0c:d6:00:cd:31:8e:a0:3e:de:e1:eb:
         38:08:a5:35:09:d1:d2:12:a7:a7:54:9c:71:a0:fc:49:61:74:
         86:cb:8c:91:a5:5d:37:da:4a:9e:87:1f:09:5f:9e:be:bd:6e:
         a4:cb:e1:60:50:3a:aa:94:a9:be:b6:80:ad:ef:7a:79:ce:4d:
         77:06:d6:ec:e0:bd:9c:4d:cc:4f:d6:29:13:be:c3:75:95:1b:
         76:c4:3a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:41:03 2026 by rpki-client