Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
File:                     KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft (raw, json)
Hash identifier:          CLVCLwbLTIbZsXMqb0d9b0Cdftu1CTLsrO/81h39Sik=
Subject key identifier:   FC:FC:B7:EC:95:51:68:E9:8E:8A:3D:C6:CC:BC:D6:E3:7F:E1:9B:D5
Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38
Certificate issuer:       /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
Manifest number:          01C0
Signing time:             Sun 25 Oct 2026 04:15:48 +0000
Manifest this update:     Sun 25 Oct 2026 04:15:47 +0000
Manifest next update:     Sun 01 Nov 2026 04:15:47 +0000
Files and hashes:         1: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl (hash: kE5sDHyPR40lf0lpjDzJEQrPeCMo0AKaICAmP6Anw4A=)
                          2: 4394064223D511EF9AB13E4FC4F9AE02.roa (hash: La95cfkXO4lYTQsVMyLpeifDr1h7KLdweCa/JBZ8Wlw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl
                          rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 04:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
        Validity
            Not Before: Oct 25 04:15:47 2026 GMT
            Not After : Nov  1 04:15:47 2026 GMT
        Subject: CN=6add8274-3378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:dc:81:5e:cc:c3:f7:67:e3:a3:68:16:3b:
                    bd:30:d8:30:97:6a:7b:12:8b:7c:f9:f2:ef:d3:27:
                    f1:ca:8a:10:4a:68:39:e9:4c:55:b0:f0:7c:da:43:
                    88:eb:d1:71:69:d3:9d:30:dc:11:1e:b7:a5:1b:2d:
                    51:25:7f:1b:d2:4b:2f:71:a8:9d:93:e2:b1:8e:87:
                    5e:ab:93:dc:5c:5e:31:06:e0:55:75:32:49:c9:d4:
                    b5:60:e1:44:64:09:be:82:3a:be:d1:25:09:10:51:
                    99:d8:01:1e:c2:e9:58:73:a7:b0:d4:4a:50:6b:ab:
                    f4:59:fd:9f:87:59:d3:5f:02:04:d1:7f:61:3f:eb:
                    29:ef:28:d3:7c:15:0d:1a:ba:e9:84:27:23:71:ec:
                    8f:b9:0d:ee:be:4c:b7:e0:f3:6f:e0:d1:a5:a0:c8:
                    c5:33:12:0a:6b:ea:ef:b9:c0:95:00:df:2f:50:d5:
                    9f:55:c1:1b:ce:64:68:e7:bb:8e:46:0e:a0:71:d8:
                    5e:76:23:d3:1b:e0:eb:9b:d2:6c:d8:9a:32:7c:e9:
                    79:5f:34:df:7a:83:06:8e:ce:74:0d:02:a0:f6:e2:
                    94:8d:91:7c:ef:79:8b:ba:9b:12:7c:5c:fe:ba:94:
                    08:74:0d:74:01:e1:77:43:79:bc:3b:2a:81:7b:ff:
                    77:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FC:B7:EC:95:51:68:E9:8E:8A:3D:C6:CC:BC:D6:E3:7F:E1:9B:D5
            X509v3 Authority Key Identifier:
                keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ff:95:66:de:97:81:8d:e7:08:81:99:e5:38:f4:f2:a9:00:
         8c:2a:58:db:4a:3f:32:4a:69:da:e4:dd:7b:df:b0:1b:8b:be:
         6a:89:a4:93:ee:c4:63:d4:50:53:1e:0f:7e:34:d1:0d:97:5b:
         1f:43:43:d1:ee:05:c1:94:b9:72:03:55:e8:9e:1b:60:53:f1:
         8c:3b:01:1c:23:05:78:90:92:55:77:3b:9d:e9:ac:3d:9c:94:
         8f:05:69:40:76:20:07:78:5b:54:52:4e:d9:d5:df:fa:3c:11:
         6f:c3:23:e8:6c:34:c8:af:4b:53:55:f8:d3:a2:03:ca:03:3a:
         c4:ee:78:64:55:f4:bb:4d:f4:2e:7c:a8:4a:c7:fc:7b:53:9c:
         fd:7f:dd:8a:5a:36:97:5a:03:86:51:54:27:40:b4:2d:11:a8:
         ea:76:08:33:2a:92:54:eb:da:89:5e:62:f4:3b:59:70:e0:f9:
         4d:4a:d0:d5:c9:77:74:f5:49:ba:ec:ef:a3:5e:8d:39:ec:56:
         cc:38:4f:0f:1a:ac:e3:90:18:8e:4d:b1:a9:96:5f:8f:5b:8e:
         4b:c3:5f:56:06:45:05:35:13:64:09:f7:fb:91:58:65:ec:5d:
         17:28:1d:0a:38:68:e3:72:24:c5:11:72:2e:c1:77:67:cc:7b:
         98:34:76:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQyNEMxMTAvBgNVBAUTKDJBNDQ1NkQxNzJCMkI4NkRDREE3MTJFNjYxRjZEOUYy
RkYxOTIwMzgwHhcNMjYxMDI1MDQxNTQ3WhcNMjYxMTAxMDQxNTQ3WjAYMRYwFAYD
VQQDEw02YWRkODI3NC0zMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1vncgV7Mw/dn46NoFju9MNgwl2p7Eot8+fLv0yfxyooQSmg56UxVsPB82kOI
69FxadOdMNwRHrelGy1RJX8b0ksvcaidk+Kxjodeq5PcXF4xBuBVdTJJydS1YOFE
ZAm+gjq+0SUJEFGZ2AEewulYc6ew1EpQa6v0Wf2fh1nTXwIE0X9hP+sp7yjTfBUN
GrrphCcjceyPuQ3uvky34PNv4NGloMjFMxIKa+rvucCVAN8vUNWfVcEbzmRo57uO
Rg6gcdhediPTG+Drm9Js2JoyfOl5XzTfeoMGjs50DQKg9uKUjZF873mLupsSfFz+
upQIdA10AeF3Q3m8OyqBe/934wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPz8t+yV
UWjpjoo9xsy81uN/4ZvVMB8GA1UdIwQYMBaAFCpEVtFysrhtzacS5mH22fL/GSA4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI0Qy9BQkNCRUJENjIz
RDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVHM05weExtWWZiWjh2OFpJ
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0trUlcwWEt5dUczTnB4TG1ZZmJaOHY4WklEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDI0Qy9BQkNCRUJENjIzRDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVH
M05weExtWWZiWjh2OFpJRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEP+VZt6XgY3nCIGZ5Tj08qkAjCpY20o/Mkpp2uTde9+wG4u+aomkk+7EY9RQ
Ux4PfjTRDZdbH0ND0e4FwZS5cgNV6J4bYFPxjDsBHCMFeJCSVXc7nemsPZyUjwVp
QHYgB3hbVFJO2dXf+jwRb8Mj6Gw0yK9LU1X406IDygM6xO54ZFX0u030LnyoSsf8
e1Oc/X/dilo2l1oDhlFUJ0C0LRGo6nYIMyqSVOvaiV5i9DtZcOD5TUrQ1cl3dPVJ
uuzvo16NOexWzDhPDxqs45AYjk2xqZZfj1uOS8NfVgZFBTUTZAn3+5FYZexdFygd
Cjho43IkxRFyLsF3Z8x7mDR2Cw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 13:24:34 2026 by rpki-client