Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
File:                     KTzh3tGmQEsAssDM-z886vshpQg.mft (raw, json)
Hash identifier:          OGUfgUJzByuduwBUV+QtWmFVQxW+Vh3WqrNpI7qKWOE=
Subject key identifier:   89:FF:A2:7F:51:97:EC:2A:82:7D:E7:83:6A:29:B5:F1:3D:76:88:DD
Authority key identifier: 29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
Certificate issuer:       /CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
Manifest number:          0197
Signing time:             Sat 05 Sep 2026 04:07:45 +0000
Manifest this update:     Sat 05 Sep 2026 04:07:45 +0000
Manifest next update:     Sat 12 Sep 2026 04:07:45 +0000
Files and hashes:         1: KTzh3tGmQEsAssDM-z886vshpQg.crl (hash: HtgCWsiThKJ5UNi39C8k/eqFWPpQCF1f3iaN4BS2gyw=)
                          2: 81AA7D1A3E5811EFAE13B943C4F9AE02.roa (hash: AmuO5Mz7Oe3J6VbUWmMhACa7zZVIB8sI5+X4h7QzjH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl
                          rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 04:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790EC, serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
        Validity
            Not Before: Sep  5 04:07:45 2026 GMT
            Not After : Sep 12 04:07:45 2026 GMT
        Subject: CN=6a9b9591-ede8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f3:6f:89:a4:07:07:4d:b1:f7:92:3e:21:71:
                    e6:8b:62:41:9a:85:13:49:4b:37:0a:de:12:08:a2:
                    31:95:e6:70:7f:72:94:91:9e:60:1a:27:c5:ae:4c:
                    7d:8d:f2:bd:58:f2:95:0b:9d:e2:05:9f:4a:09:91:
                    b9:69:bb:ea:6c:c6:e2:04:f3:c8:f7:cf:be:bd:fe:
                    ba:75:a4:27:1e:f2:79:62:c3:e6:7c:ae:31:7d:ff:
                    10:0f:c8:53:fa:bb:71:74:97:f2:42:24:f2:2a:39:
                    36:17:9a:1c:96:a0:f2:56:19:c7:aa:26:bf:f9:a3:
                    6a:e2:30:56:0e:b4:2b:f0:b8:e8:dd:8b:d9:57:b1:
                    46:24:a9:e3:d8:76:9a:8f:0b:ba:58:29:40:b1:e8:
                    97:dc:4c:21:46:e4:7e:37:1c:6e:77:2d:d9:c2:95:
                    fa:58:16:26:2d:6b:01:9e:da:46:b6:c0:ee:e7:ab:
                    2e:2a:06:0d:46:fa:43:ee:28:78:d8:a9:35:22:db:
                    3d:6b:b9:e4:0c:09:7b:94:68:85:57:ce:de:14:92:
                    eb:e9:d0:f3:4c:6c:a7:3e:59:44:34:08:30:ab:81:
                    15:ef:76:ea:b2:c6:86:e7:1f:83:10:f3:6f:e1:ff:
                    e2:82:2e:80:13:5a:3e:4d:be:48:1e:3b:7c:44:b4:
                    d0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FF:A2:7F:51:97:EC:2A:82:7D:E7:83:6A:29:B5:F1:3D:76:88:DD
            X509v3 Authority Key Identifier:
                keyid:29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:df:3d:aa:c2:89:dd:55:68:3b:4d:af:f9:48:93:0f:e5:f3:
         f1:d5:81:38:48:d6:e2:df:9e:1d:8f:de:ac:70:30:6c:c1:d8:
         fc:79:dc:7a:77:db:a1:26:2e:b0:d6:5c:d0:a8:c1:da:74:17:
         48:84:62:9b:f7:26:d3:6b:8c:02:08:3c:9c:80:51:dd:4d:aa:
         3a:6f:1f:fb:36:12:91:40:d8:7a:0d:20:86:58:7a:3f:6a:65:
         01:2f:87:eb:8c:36:a0:be:b1:00:a5:2d:2f:a8:50:5e:3b:3f:
         73:54:31:81:f2:6e:41:b2:82:53:6e:39:19:8c:d4:ad:9c:cf:
         33:1f:a7:f8:43:01:30:ef:f6:74:ec:59:02:53:5c:9a:39:db:
         a8:06:20:71:c9:95:0e:4e:37:95:13:84:e7:43:96:1d:8f:71:
         25:9a:5d:0f:13:05:fe:b3:e2:85:72:e1:df:78:f3:4f:ad:00:
         49:52:43:5f:2b:a0:e7:69:b5:8b:c0:0f:5f:9e:cc:df:9d:5a:
         eb:e4:f7:9d:e9:c6:bb:fd:cb:ec:b1:86:53:cf:af:8f:ca:9c:
         9a:4b:77:a1:98:13:1d:0d:61:f1:9b:2e:68:a6:60:17:f7:32:
         50:ad:70:d2:f1:99:c0:17:ef:4f:ec:12:53:5a:c7:1c:a0:e5:
         81:0f:50:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:40:41 2026 by rpki-client