Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
File:                     KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json)
Hash identifier:          RBamz+P7CNag3OYvWg3/B76F55/rwvp7/W4DPesXBBI=
Subject key identifier:   BF:E0:A9:FE:88:F5:9A:A9:57:3D:5F:CC:6D:32:57:2C:E9:EB:39:48
Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
Certificate issuer:       /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Certificate serial:       0C14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
Manifest number:          0C09
Signing time:             Sun 04 Oct 2026 18:57:29 +0000
Manifest this update:     Sun 04 Oct 2026 18:57:29 +0000
Manifest next update:     Sun 11 Oct 2026 18:57:29 +0000
Files and hashes:         1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: OTxsNaIoxl9XWp8zc0uTZxccyil6KHf3kNkfGl4YU+k=)
                          2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: HUSLKFky67fxy4K/r8HyQudWgBuSg6q+GxzLOv9Syp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
                          rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3092 (0xc14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
        Validity
            Not Before: Oct  4 18:57:29 2026 GMT
            Not After : Oct 11 18:57:29 2026 GMT
        Subject: CN=6ac2a199-4d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4b:09:75:13:41:7f:7f:ab:6d:92:ee:dd:90:
                    72:43:e2:99:93:1a:d3:ae:97:7e:9d:88:44:fc:01:
                    ae:fb:21:5b:b6:21:1b:ca:7a:a5:c8:b5:76:50:9d:
                    95:82:f3:8e:f0:18:6e:d3:74:81:99:50:62:7a:fb:
                    4f:5e:09:35:71:f5:9f:ee:ca:95:5c:e3:34:ed:47:
                    31:24:16:9d:18:88:cd:e5:ff:3d:59:e2:f8:95:22:
                    68:61:9b:73:cb:83:1e:3e:d3:d7:bc:33:15:5c:1b:
                    26:0a:ff:1b:7f:e8:0e:38:8d:c6:e9:90:c2:98:3d:
                    bd:6e:f4:24:8f:05:fe:94:b4:1a:a7:2c:01:fa:1f:
                    67:d9:f9:1a:ef:6b:d7:4d:b5:86:ce:31:32:8a:a1:
                    5e:56:bb:38:60:04:9a:67:76:56:fe:3c:d7:27:a7:
                    da:31:62:62:91:49:a8:7d:51:38:d3:59:a2:31:ec:
                    e0:e8:b0:7c:31:21:7f:99:44:67:97:f1:76:a0:9f:
                    60:85:b3:64:f3:5e:e7:9d:88:c6:7d:f1:50:92:7c:
                    c1:33:a7:b6:0e:02:ad:0e:27:e6:06:61:82:b1:39:
                    6d:7f:c9:0f:cf:19:b0:e0:55:36:4b:bb:7a:d5:91:
                    fc:55:5b:e0:ea:b2:9b:07:f0:bf:7d:6b:b9:be:0b:
                    4b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E0:A9:FE:88:F5:9A:A9:57:3D:5F:CC:6D:32:57:2C:E9:EB:39:48
            X509v3 Authority Key Identifier:
                keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:83:ec:81:92:fe:f7:f1:20:2e:27:a4:6f:f3:9a:09:af:c1:
         ec:99:da:40:32:a2:93:79:d9:0c:61:5d:2b:a6:70:01:13:88:
         58:9e:1e:f8:fd:88:b8:72:96:3e:02:dc:d6:07:a7:2f:43:43:
         25:77:3c:7d:73:0f:09:a0:de:9b:24:27:78:56:8d:41:bd:40:
         bc:87:b8:a8:db:00:4a:94:2a:e7:47:7c:7c:29:d4:2b:23:29:
         12:c2:d1:d0:8a:35:92:8f:f2:be:11:94:2d:7e:5b:b4:24:89:
         de:a1:7d:ed:03:bc:24:9e:cb:2d:59:4f:a3:26:cf:3f:3b:47:
         5d:08:a6:a5:e4:a7:b4:e5:b4:28:f4:7b:83:31:2b:b4:01:15:
         21:7a:6e:b8:28:7f:14:c0:7d:06:b4:68:1d:b9:26:ee:79:0a:
         7d:ea:11:2d:39:c9:07:bd:bd:ce:c1:0d:47:da:54:df:ae:96:
         91:01:fe:80:5c:b2:a4:04:e8:36:1c:e4:bc:d8:16:06:a8:ae:
         5b:05:a4:c1:ed:80:6c:cb:97:2f:cc:5e:60:0a:d8:92:1e:35:
         ce:6a:fb:c8:e9:6a:35:61:8d:47:a5:fe:da:16:d4:98:b2:58:
         e0:0c:63:96:df:dc:8c:f3:a3:c7:30:30:73:47:4e:bc:dd:fb:
         fb:4e:2b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:09:01 2026 by rpki-client