Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
File:                     KcmzN9Z7DxREgXmLTVsNc9eIrys.mft (raw, json)
Hash identifier:          vKU5vhiaEoB3NwK2PAT6fzqeeaKaqy15tjv2GfXbhQU=
Subject key identifier:   95:55:0E:AD:D4:8D:EE:82:FE:EB:56:73:C4:17:71:E4:14:15:DB:C1
Authority key identifier: 29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B
Certificate issuer:       /CN=A91608B2/serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
Manifest number:          E0
Signing time:             Wed 19 Aug 2026 07:15:15 +0000
Manifest this update:     Wed 19 Aug 2026 07:15:14 +0000
Manifest next update:     Wed 26 Aug 2026 07:15:14 +0000
Files and hashes:         1: KcmzN9Z7DxREgXmLTVsNc9eIrys.crl (hash: Ct4pvFnjSNAZJn/IM4leT5KV+hQaVFrLxP7i742VZ8Y=)
                          2: 13B4125A4A5311F08B06EF0FC4F9AE02.roa (hash: 9D74+8aEhg9Q1k4z+DDR3yMEpwq+MFOz5dIvRGDeuRg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl
                          rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91608B2, serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B
        Validity
            Not Before: Aug 19 07:15:14 2026 GMT
            Not After : Aug 26 07:15:14 2026 GMT
        Subject: CN=6a855803-1f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:a4:c5:8d:bb:87:60:fe:f7:6a:ff:85:8d:
                    a6:c1:07:10:af:ca:34:38:15:bd:f0:f1:1c:ae:51:
                    98:14:6a:f1:e3:34:c2:a3:f9:97:62:7f:da:21:a8:
                    0b:fd:77:58:fb:ec:c8:ff:38:af:39:d6:2c:bb:64:
                    30:35:e6:81:81:77:43:32:c0:2f:a0:2a:e5:c6:d9:
                    74:0b:23:89:46:e8:f4:bd:2a:f4:a4:b2:b7:01:d1:
                    92:9c:08:c5:83:ac:a6:8d:e6:d2:ae:d2:0b:1c:20:
                    81:96:02:48:b6:ea:84:5d:03:d8:e5:f9:d9:b4:85:
                    3c:d7:d1:d8:cc:30:36:9d:59:05:bb:9c:15:98:3c:
                    44:dd:c5:71:4a:bd:5c:fa:b8:3f:4e:80:f3:c0:59:
                    48:4b:83:e5:2a:55:1b:e9:97:0d:41:01:92:87:ac:
                    7b:02:d3:e1:32:c6:d6:32:3b:78:f4:11:d3:93:d3:
                    25:2a:b8:e2:da:5e:ba:4f:27:bb:5d:0e:3d:6d:f2:
                    b7:36:df:5a:89:24:a8:03:f1:e8:00:f9:34:e4:7e:
                    80:0f:03:82:eb:da:ad:cb:17:47:1c:3c:34:6c:a6:
                    ac:2c:d1:cf:ed:59:b8:5b:ec:df:46:8b:c1:4d:fd:
                    2b:1d:3a:c2:8e:2c:9c:28:e3:12:8d:fe:86:67:5a:
                    f0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:55:0E:AD:D4:8D:EE:82:FE:EB:56:73:C4:17:71:E4:14:15:DB:C1
            X509v3 Authority Key Identifier:
                keyid:29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:13:79:4b:af:ad:e7:e1:3b:3d:28:87:0c:65:27:36:7c:21:
         97:b6:0b:56:f7:34:d9:84:34:9a:67:b8:67:30:16:9c:cb:0f:
         43:4e:ad:cc:52:0a:86:23:9a:e3:52:82:31:9a:28:f4:3e:d9:
         d2:df:54:f5:4e:0e:c6:6b:25:27:84:60:65:66:ea:54:92:e6:
         22:3a:5d:9f:e7:60:c5:b9:f1:53:52:02:06:d2:1f:49:3c:25:
         d4:e7:e3:f0:e8:6d:99:1b:c6:36:1f:aa:0a:eb:9f:78:5f:84:
         ed:9e:ba:d3:d4:f8:cd:7a:62:64:92:5f:bc:5b:b7:4d:3c:14:
         f3:d8:d1:3e:25:61:01:20:a8:1c:d1:97:7e:4b:5d:0a:22:95:
         d0:f4:ce:7d:68:e8:a9:90:b8:a8:98:e5:14:8f:30:13:15:1d:
         a9:60:b9:ca:4b:d2:86:bb:4a:eb:d7:a4:84:9c:98:0c:65:8a:
         0b:46:af:76:0d:87:37:78:4c:5d:95:67:8c:89:9e:ad:7a:2e:
         e1:a8:46:7e:23:83:ac:63:14:1e:87:84:91:dd:dd:58:07:eb:
         22:cc:4a:6e:8a:87:9f:0f:3d:fc:36:cf:e6:84:1b:2f:3f:66:
         0c:d5:85:15:02:a9:d0:1d:91:2f:95:70:a7:2e:ac:3d:95:32:
         12:af:f6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:43 2026 by rpki-client