Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
File:                     kDfAsp43CSqDhSzkuIW3dqfB47Y.mft (raw, json)
Hash identifier:          TrVwRQi2X2MslW8/t2P5o+876N14FrNdRYNDr2era7o=
Subject key identifier:   0A:92:B0:FC:D9:8E:C1:13:5C:64:50:16:44:AD:E1:80:D8:D2:71:52
Authority key identifier: 90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6
Certificate issuer:       /CN=A91957D1/serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
Certificate serial:       021B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
Manifest number:          0214
Signing time:             Sun 27 Sep 2026 03:24:08 +0000
Manifest this update:     Sun 27 Sep 2026 03:24:08 +0000
Manifest next update:     Sun 04 Oct 2026 03:24:08 +0000
Files and hashes:         1: kDfAsp43CSqDhSzkuIW3dqfB47Y.crl (hash: BZ/73Z/U632j+g/RoU5GQEFuwUDhyyznMf4h7xJoOzc=)
                          2: 72CE4D80958411EEB3748B58C4F9AE02.roa (hash: EaakEgdFwicKWl6P4v+HQcFOhGMzWeAMEZbE1mBKQ84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl
                          rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 03:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91957D1, serialNumber=9037C0B29E37092A83852CE4B885B776A7C1E3B6
        Validity
            Not Before: Sep 27 03:24:08 2026 GMT
            Not After : Oct  4 03:24:08 2026 GMT
        Subject: CN=6ab88c58-ea45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:45:e9:42:78:ad:a9:3c:f7:67:94:7c:50:
                    0d:48:92:7a:5a:14:5c:c0:00:da:d7:cf:17:57:b6:
                    f5:c4:37:3d:ab:65:cf:58:9a:85:50:0e:1d:26:88:
                    f6:8e:bb:3f:74:b3:f0:dc:74:08:ab:0e:7a:94:63:
                    2e:f8:22:ba:ca:69:ee:89:d5:35:bf:77:eb:d7:7f:
                    30:b8:42:55:7d:3b:b8:1e:9c:f8:60:a1:dc:43:19:
                    a7:d2:45:07:ce:eb:47:74:0d:fa:83:94:98:04:85:
                    db:12:98:43:53:d3:f9:bc:50:cb:2d:7a:af:98:3e:
                    93:a0:9d:ba:7a:b6:26:09:1d:c7:2d:1f:38:27:9c:
                    48:3f:a5:6c:75:ad:d1:19:b4:3a:92:0c:96:7e:f2:
                    14:06:b7:32:57:c4:2f:3d:0b:af:11:6e:84:5e:16:
                    fc:9c:c3:9c:1e:67:0b:c9:fc:06:ec:22:d9:fb:9b:
                    71:60:79:18:c9:86:80:63:bb:f6:de:51:1b:6d:b6:
                    57:10:a5:92:e4:1b:d1:19:81:34:97:82:1f:dd:ea:
                    6d:e6:be:46:c3:cd:40:01:55:67:2a:a6:22:fc:51:
                    c8:aa:e2:ed:5e:07:be:e7:99:a7:2a:c8:4c:97:08:
                    ff:d4:84:2e:9d:6c:37:93:94:b7:a4:57:97:0f:81:
                    4b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:92:B0:FC:D9:8E:C1:13:5C:64:50:16:44:AD:E1:80:D8:D2:71:52
            X509v3 Authority Key Identifier:
                keyid:90:37:C0:B2:9E:37:09:2A:83:85:2C:E4:B8:85:B7:76:A7:C1:E3:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDfAsp43CSqDhSzkuIW3dqfB47Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957D1/F053779493BD11EE81F80A52C4F9AE02/kDfAsp43CSqDhSzkuIW3dqfB47Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:45:a0:46:ab:4f:7f:6e:ac:95:20:b1:78:fb:20:99:71:79:
         a4:d3:68:0b:a3:2c:15:37:a2:a5:64:74:95:72:37:d7:b9:11:
         7a:a5:e0:a7:54:8d:30:41:f9:56:72:28:8e:a2:df:23:ae:69:
         67:59:7e:4d:13:19:67:8d:95:9c:99:b4:4b:28:b1:bd:39:df:
         2e:ab:19:53:1a:f6:0c:30:f3:04:03:97:63:82:fa:6f:92:de:
         b7:5e:28:6d:3d:68:6d:a3:e8:bc:9e:ab:bd:31:be:dc:bc:8a:
         b2:f2:13:cf:ea:01:09:39:35:36:ca:ce:bb:7b:ee:b0:8a:c0:
         ee:fa:b0:cb:00:20:ad:28:39:c6:f4:eb:ae:bd:2c:32:ec:ae:
         f9:75:8e:24:bf:fc:96:4e:b9:b4:8e:69:c0:8a:b3:c9:3b:34:
         8f:90:c2:02:53:35:86:aa:95:c2:97:70:46:ee:76:da:28:f2:
         99:4b:b3:d7:f7:2c:4b:c7:01:6b:4d:e2:bb:ec:85:74:a0:db:
         76:53:8c:8e:b3:68:fb:84:59:4f:5b:e2:e6:6c:b6:04:7c:5e:
         70:58:88:2f:ac:5a:90:89:55:da:59:84:c1:9a:46:45:0f:cf:
         35:4b:e1:ff:70:69:79:53:92:ab:79:33:88:67:bc:f6:c6:16:
         f9:7d:af:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:31:25 2026 by rpki-client