Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
File:                     kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json)
Hash identifier:          AGPhJLavLiDlf+CQ0KH7pTIiwixYWnAfBug36QULCew=
Subject key identifier:   94:DB:CA:72:D1:B8:0C:B7:8D:6F:46:36:CC:69:AE:28:2B:ED:30:36
Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
Certificate issuer:       /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
Certificate serial:       0537
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
Manifest number:          3ABB
Signing time:             Sun 04 Oct 2026 14:36:58 +0000
Manifest this update:     Sun 04 Oct 2026 14:36:57 +0000
Manifest next update:     Sun 11 Oct 2026 14:36:57 +0000
Files and hashes:         1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: t9CN1NO8NgfHDhy7gp03/U1Sf+3Oog6y+uWY9urG1gg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl
                          rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1335 (0x537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
        Validity
            Not Before: Oct  4 14:36:57 2026 GMT
            Not After : Oct 11 14:36:57 2026 GMT
        Subject: CN=6ac26489-469e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7c:6f:af:ff:2c:29:5e:7c:60:86:57:cc:6a:
                    83:35:2e:aa:60:45:2c:70:04:74:26:8e:14:60:66:
                    6b:81:b4:c4:2b:4e:9f:9a:b7:8c:4d:0e:fe:fd:5d:
                    b7:2b:19:42:94:b6:9f:f9:b2:16:6f:5b:4d:05:ee:
                    ae:16:8a:f0:fa:35:14:d3:19:31:f3:c5:35:55:99:
                    ed:a2:be:fd:cb:cd:9f:86:bc:0f:1f:7c:44:e2:20:
                    4d:a3:57:67:15:35:36:bb:c2:3e:14:9b:c7:15:72:
                    d7:14:c1:82:eb:da:e5:55:e9:07:df:54:8c:0b:6c:
                    36:7a:f4:a2:86:5f:21:70:29:6b:e0:a6:3f:02:1b:
                    69:de:f8:c6:25:ba:2a:0b:fc:9a:57:19:42:7b:57:
                    b1:c4:59:f2:5d:5f:be:37:a9:4e:70:4d:f2:4c:84:
                    c0:39:b9:dd:53:6b:de:aa:7f:a5:1d:6e:41:16:d9:
                    2c:9f:4a:04:6f:1a:c5:72:ca:71:aa:dd:c3:a6:4e:
                    da:14:0d:d7:f3:c1:fe:c0:bc:9e:0f:11:03:81:73:
                    3e:d9:10:3a:62:08:79:96:ee:95:07:b7:dc:62:c0:
                    e1:c9:c2:0f:e1:80:d3:84:9f:90:7d:91:6d:1e:52:
                    f7:27:67:aa:29:ac:3a:61:5d:f5:8e:c7:43:80:5c:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DB:CA:72:D1:B8:0C:B7:8D:6F:46:36:CC:69:AE:28:2B:ED:30:36
            X509v3 Authority Key Identifier:
                keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6d:ff:d5:34:8d:08:8f:52:37:d9:91:ea:27:6c:0f:65:42:
         d9:f0:4c:a4:82:da:8c:96:e1:c3:e1:18:7b:31:07:a0:b3:65:
         01:6c:46:cc:43:67:19:bd:b9:02:a5:fa:31:5d:e8:01:4e:ce:
         7c:5d:b0:5c:ba:35:2a:e5:01:74:d4:46:82:72:ae:40:ba:a5:
         cd:0b:d2:57:56:b8:49:4b:f5:6d:c6:3b:5f:df:c0:6a:7a:ef:
         12:8f:0a:18:a3:0f:a0:f8:df:f2:13:49:09:8c:46:4b:7b:8b:
         61:b5:41:c8:e0:d6:91:21:a5:94:81:7e:53:4f:cc:19:34:09:
         c1:5d:25:a6:52:c3:69:e6:65:3e:c4:2d:68:ba:67:02:2e:ed:
         87:8e:5a:e0:e8:da:ee:43:1d:47:e2:05:b1:dd:7f:3d:92:21:
         e5:1b:a3:66:f0:07:f8:74:ae:73:6c:18:41:c3:a3:9d:4a:9a:
         ee:0a:fe:21:3a:e5:16:34:20:eb:28:ec:36:de:34:12:b0:bd:
         d8:bf:9e:bb:d7:04:72:59:7d:ed:00:5c:d2:18:74:8f:17:5a:
         01:0b:a4:33:88:85:09:c2:0d:a2:14:35:b8:89:f7:41:4c:bc:
         7f:df:4d:d9:de:6b:47:f7:a8:47:03:57:49:90:14:9f:c0:c5:
         17:38:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:03:25 2026 by rpki-client