Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
File:                     KmvwVK0j6tLbOVMbZGcmypRaxJI.mft (raw, json)
Hash identifier:          Qo8QC5b1ZkXBHO2LTHwAqOF7fZDG6Cq7EYwg7pAYXPE=
Subject key identifier:   9D:AA:BE:12:FB:5B:AC:D4:D3:F2:0F:F2:E6:C8:4C:AF:4E:04:D1:A6
Authority key identifier: 2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92
Certificate issuer:       /CN=A918AB7E/serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
Manifest number:          011D
Signing time:             Fri 25 Sep 2026 05:57:40 +0000
Manifest this update:     Fri 25 Sep 2026 05:57:40 +0000
Manifest next update:     Fri 02 Oct 2026 05:57:40 +0000
Files and hashes:         1: KmvwVK0j6tLbOVMbZGcmypRaxJI.crl (hash: y+eU8axiclDkFwe7f/nJXhNbWhnBdpmCIMTFoFceQqM=)
                          2: 3E4E5610438B11F18B6C5738C9833773.roa (hash: 1P+X6qPkn0VdYt1Cmrpk5GJKo0+TU3IuJXvl0/kng8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl
                          rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AB7E, serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492
        Validity
            Not Before: Sep 25 05:57:40 2026 GMT
            Not After : Oct  2 05:57:40 2026 GMT
        Subject: CN=6ab60d54-e855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:a4:8d:58:d5:4e:8a:9d:a1:57:70:57:fd:
                    f1:8c:0f:65:40:56:ec:ad:b3:e3:d9:5b:fc:3b:df:
                    3c:65:3f:be:81:e1:8c:49:75:3d:53:17:c0:35:9b:
                    f8:62:22:30:5c:24:90:51:9a:b7:44:8c:5e:3a:28:
                    8d:bd:f2:4f:d1:ca:39:9d:f1:94:b3:fb:fe:c4:8b:
                    ae:f9:2e:c4:5a:72:1a:2d:a4:d5:05:85:4f:d2:46:
                    24:bb:ba:4e:3e:0c:91:e5:52:66:35:dd:42:8b:d1:
                    55:8e:a5:b7:32:f0:0c:85:e2:2d:c5:ce:48:51:ee:
                    d3:6e:d4:07:50:c7:7c:09:1b:24:05:cb:e1:3a:c4:
                    f3:e5:34:13:e9:54:b4:e7:ff:46:68:4d:5d:d0:fe:
                    72:8d:b6:18:8f:7d:bf:eb:f9:03:6c:e2:9b:d3:1a:
                    f3:0e:e3:ad:71:ab:09:16:5f:c0:b7:1f:a4:82:26:
                    ab:90:6e:e1:b5:0e:1b:24:68:1f:a5:af:de:07:b8:
                    44:6e:b3:07:9b:ce:a3:da:9f:a7:10:48:b9:37:3b:
                    9d:fb:9f:e5:b5:6d:db:95:6e:3d:9c:c6:ef:bb:4c:
                    17:0e:92:1b:d5:32:32:cc:74:06:7c:08:c7:a7:e3:
                    3e:6f:80:c7:b1:38:30:ad:61:4c:d1:e2:79:24:a1:
                    67:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AA:BE:12:FB:5B:AC:D4:D3:F2:0F:F2:E6:C8:4C:AF:4E:04:D1:A6
            X509v3 Authority Key Identifier:
                keyid:2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:07:d9:95:f0:5f:7c:ba:b5:7c:15:7a:0d:e5:8e:92:4e:51:
         b9:9c:c2:6e:1d:92:13:fb:5c:f3:73:a4:65:a1:c5:34:c6:8b:
         83:60:8d:82:81:e5:a3:81:8f:7c:34:1d:77:c0:9b:ce:a4:fb:
         d9:14:ed:d5:70:cd:cc:aa:5b:39:4d:08:d3:c3:57:08:36:d7:
         b2:10:dd:90:c5:e9:f3:55:62:fe:88:da:a0:ba:eb:a2:f7:5e:
         dd:70:f2:83:70:95:57:df:31:3e:ba:d5:9f:bf:50:92:43:f4:
         d6:17:f3:49:54:87:b1:99:c4:b5:19:9d:75:4a:61:5d:87:cc:
         d6:d8:c2:8b:ec:2b:b5:1f:3f:8c:6f:6b:1d:2f:78:70:86:51:
         b5:cb:3b:d0:ee:6a:7d:aa:42:15:f7:0f:49:1f:ac:1c:cc:af:
         46:8b:71:d5:e5:d4:4c:8d:f9:43:52:08:f8:21:61:49:b0:e7:
         8e:96:ab:e4:23:cf:e0:ad:35:c9:e0:68:01:0e:aa:c8:18:a0:
         c7:9b:44:00:ac:1b:6d:6e:59:df:6d:26:7c:75:0d:22:1e:c9:
         ec:f1:95:16:9d:6f:d0:c4:ab:e2:76:88:d5:4f:a5:0f:24:13:
         a4:04:0c:af:b6:26:4c:e4:59:9b:c0:b1:40:f2:2f:6c:29:1f:
         51:6f:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:36:56 2026 by rpki-client