Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
File:                     m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json)
Hash identifier:          VXbV8vwtAUmpI8DBd3mJP2XTdl6EMODCTpMbaABCknQ=
Subject key identifier:   51:86:7A:81:2A:AF:71:52:16:FD:0F:E8:3E:DB:F8:90:1E:02:28:72
Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
Certificate issuer:       /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Certificate serial:       06BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
Manifest number:          06AC
Signing time:             Sat 24 Oct 2026 22:24:27 +0000
Manifest this update:     Sat 24 Oct 2026 22:24:27 +0000
Manifest next update:     Sat 31 Oct 2026 22:24:27 +0000
Files and hashes:         1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: G2WDyQHdKjINt1ZcntdXXpw2KZsNdwZOBLpkxKE1W10=)
                          2: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: B0Y1Ftxlxts1itlnnfx/vOUQhD3NVD0psDMYkEt54zY=)
                          3: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: W7i3uG5Cv7+btgXKgHVPwYJhNORxSnDJ11busxfZwpE=)
                          4: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: LmMvaPf53ua9EqCaZQMYjzev0cq6fDEk3G0cTqtvmZw=)
                          5: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: IMNAWHTLkWxMdEc+cnttaYRy8kitBgpU/B7G6rCH2UM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
                          rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 22:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1725 (0x6bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
        Validity
            Not Before: Oct 24 22:24:27 2026 GMT
            Not After : Oct 31 22:24:27 2026 GMT
        Subject: CN=6add301b-2bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:8d:61:d8:a7:d1:18:dd:e9:aa:f0:4d:8f:
                    3d:12:e2:fb:8c:28:34:c2:17:9a:3a:22:48:37:c4:
                    f7:e3:6f:a8:ec:87:b4:e0:f1:53:b0:17:01:a5:eb:
                    f2:de:d1:0a:8b:e6:a7:e5:d5:9b:6f:49:10:f7:8f:
                    5e:bf:c4:02:bd:97:d9:30:c1:8a:26:42:55:dd:e8:
                    f5:66:8a:90:f3:70:27:72:28:ee:c0:d0:46:91:80:
                    e7:19:f0:b0:0e:2f:df:0a:78:21:0e:4c:1b:5d:c0:
                    5c:91:92:3f:eb:33:2a:3b:4f:f1:b5:98:93:ea:52:
                    72:c8:2a:1e:c8:53:7f:96:56:9a:69:d2:fb:fc:a8:
                    64:15:85:cf:8f:0f:2c:a2:07:d2:13:6c:3c:b3:1d:
                    0f:b9:31:05:0e:aa:4d:98:1e:3d:de:e5:b6:ca:67:
                    66:33:9d:cf:df:2f:e5:a0:16:6e:ac:fe:a4:43:73:
                    9e:5c:67:72:47:09:ef:8a:c3:5c:55:8a:a0:02:25:
                    f0:73:97:29:08:f0:24:3d:1e:90:4a:ff:5d:56:a7:
                    ad:7d:3d:9e:1b:22:66:23:43:c2:61:63:a5:e1:ae:
                    63:52:33:fe:51:42:f8:00:1a:cf:9e:64:93:52:6e:
                    bc:aa:10:27:a3:39:9a:0d:b8:f1:f0:20:30:1b:73:
                    69:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:86:7A:81:2A:AF:71:52:16:FD:0F:E8:3E:DB:F8:90:1E:02:28:72
            X509v3 Authority Key Identifier:
                keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:1f:86:38:9c:25:7d:cd:5e:03:01:3b:05:9f:da:f0:2b:de:
         06:7a:ec:a3:75:92:ba:21:88:fd:89:8c:2f:8c:d4:c5:4e:9b:
         43:0c:83:98:0d:0f:e9:02:90:cd:07:cb:5b:8e:e3:12:9a:d0:
         47:88:11:c5:20:c4:d0:be:40:8c:c1:0d:8e:44:97:84:eb:97:
         d4:e8:8d:0b:bd:a9:1e:29:4a:b1:7b:d8:2e:67:4f:7c:8d:79:
         03:b0:7d:01:30:fe:90:d0:cd:55:0d:fe:49:11:d2:19:c4:a5:
         28:6f:9b:86:fd:9a:16:e3:a9:c9:1d:d1:f3:56:ec:48:3b:b5:
         1a:67:40:a9:bb:db:1a:9a:41:e0:23:8d:be:c0:81:b7:e5:3c:
         4a:0d:20:bf:1c:0e:05:83:db:0e:ac:8a:4d:68:06:1a:ee:0f:
         47:66:a4:76:38:53:d7:ec:f9:25:58:25:d4:ac:51:ea:01:06:
         c1:b6:51:15:87:6d:bc:38:b0:49:13:42:90:b7:f7:98:2f:f2:
         9e:c1:be:95:16:74:37:c5:a1:7a:bc:74:fe:f8:db:98:11:62:
         b5:10:b2:fa:fe:52:b9:99:60:1a:d8:c9:61:b7:fb:10:91:e4:
         cb:00:11:25:bc:67:5b:18:3e:7d:69:60:31:4e:f2:9c:9b:47:
         9e:b5:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:55:22 2026 by rpki-client