Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft
File:                     KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft (raw, json)
Hash identifier:          qiP4wROOpuE+PXSZKsjzfwZ1n1ymKRvAspTFEK2/6ek=
Subject key identifier:   91:EA:A2:9D:B9:D2:25:E6:7A:4B:D6:89:BB:B5:6E:39:87:1F:D7:46
Authority key identifier: 28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B
Certificate issuer:       /CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B
Certificate serial:       02A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft
Manifest number:          029F
Signing time:             Sat 03 Oct 2026 02:12:35 +0000
Manifest this update:     Sat 03 Oct 2026 02:12:34 +0000
Manifest next update:     Sat 10 Oct 2026 02:12:34 +0000
Files and hashes:         1: KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl (hash: sfChiA06strrA/+NyIxJe9CUNTyuoRIcwPz8lN2lW8U=)
                          2: EA5A9A32BDAA11ED92995562C4F9AE02.roa (hash: c33kuST7gT7ebNkTWc7XNN3mabw1ea/YNIBXvt3Yc/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl
                          rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 678 (0x2a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158650, serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B
        Validity
            Not Before: Oct  3 02:12:34 2026 GMT
            Not After : Oct 10 02:12:34 2026 GMT
        Subject: CN=6ac06493-5806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:ab:74:8b:f3:32:e8:ed:33:89:d1:fd:bb:
                    38:51:76:05:54:7c:2e:87:b0:08:5b:79:20:40:4e:
                    02:93:af:c5:34:3d:0b:97:25:41:65:e6:15:d8:dd:
                    92:f7:49:9d:31:e4:db:00:f9:ed:37:c6:36:b4:34:
                    7d:1f:76:90:15:3c:9f:0f:16:13:bc:7e:ed:3d:51:
                    1f:92:89:9b:8d:83:23:99:53:22:5b:1b:a6:7e:ba:
                    e8:c7:98:f6:54:68:4b:da:be:43:fd:94:60:27:7f:
                    1d:90:8e:42:e3:df:d5:97:c5:3f:da:95:ca:e4:ce:
                    83:09:bd:03:84:b6:71:95:31:0f:f6:a1:1e:cf:48:
                    22:df:e3:1e:98:b5:ad:0e:df:26:6f:ee:fc:c4:5e:
                    87:a7:ed:44:3e:b9:e8:c3:9d:0b:ac:31:cf:47:df:
                    96:07:c2:1f:b2:74:c3:dc:a0:1f:1d:91:bb:4d:4c:
                    aa:f2:0d:c6:92:9f:c4:60:d3:a7:b7:e6:72:af:c8:
                    51:2e:0e:bf:3f:22:87:4f:33:03:bf:f4:ad:56:53:
                    59:fd:7e:50:6b:f7:10:ee:24:31:cb:6a:c0:cd:18:
                    bc:9a:52:88:d7:cd:98:19:c0:8c:93:71:6d:86:a0:
                    0a:cf:b2:1c:ca:b5:c8:52:3c:e1:f3:0e:b9:8a:6a:
                    a4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EA:A2:9D:B9:D2:25:E6:7A:4B:D6:89:BB:B5:6E:39:87:1F:D7:46
            X509v3 Authority Key Identifier:
                keyid:28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:44:eb:c1:d2:d7:8d:3a:1e:ab:bb:f4:00:f8:b9:f8:f7:d9:
         ff:6a:e4:05:86:5b:06:0f:c7:5a:0f:c5:9c:d3:36:28:e7:76:
         73:d5:01:c1:8b:3f:b6:a3:ea:e5:b1:ee:14:fe:2f:60:e5:98:
         91:08:7f:13:47:3b:3c:80:13:3c:dc:de:85:34:66:71:e3:23:
         3a:59:5e:a2:37:81:10:94:a8:b8:0c:9f:27:bc:82:42:95:32:
         d1:a5:c2:fe:a3:7c:df:cd:fe:32:f5:4b:37:5d:00:e2:c7:4f:
         ae:54:f4:60:cf:b3:e1:17:11:51:68:f0:4c:8e:67:e7:e6:c5:
         55:c5:f2:9a:64:fd:80:bc:02:98:1d:70:0d:b1:c6:48:27:98:
         d2:4c:a4:ac:49:f2:52:dd:2a:a9:3c:ff:d4:39:e3:81:5f:8c:
         4c:76:63:82:13:9c:e4:8f:5f:0b:55:76:ec:28:4f:68:41:0c:
         82:ea:2a:44:cc:69:02:97:ec:31:b8:09:f7:3c:3b:d6:36:85:
         51:a6:c5:c0:06:c9:04:9c:e4:ec:f6:a6:9b:00:f3:bc:ec:47:
         f3:e6:dd:04:84:2b:f2:8c:af:91:35:6d:42:7f:1e:e6:9b:4d:
         10:40:b7:62:2f:e2:7a:cc:30:4a:e2:55:b0:8b:93:40:b0:96:
         7f:82:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:00:06 2026 by rpki-client