Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
File:                     KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft (raw, json)
Hash identifier:          SW+w1GNfjQwEcxGA7eMFtNz72mCS5lJDkVKkyLetuFI=
Subject key identifier:   2A:C8:EC:52:A8:24:0B:59:96:14:F6:E3:02:1F:3F:39:4C:37:AD:7E
Authority key identifier: 28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4
Certificate issuer:       /CN=A91A7F56/serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4
Certificate serial:       01E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
Manifest number:          01E9
Signing time:             Wed 19 Aug 2026 03:56:30 +0000
Manifest this update:     Wed 19 Aug 2026 03:56:30 +0000
Manifest next update:     Wed 26 Aug 2026 03:56:30 +0000
Files and hashes:         1: KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl (hash: 7YMGxt8f91751ayvOBuGQxY4gpBn+TbeQTB/lwf3LRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F56, serialNumber=281DDA097175C0432943FDE57CA33D28E5073BC4
        Validity
            Not Before: Aug 19 03:56:30 2026 GMT
            Not After : Aug 26 03:56:30 2026 GMT
        Subject: CN=6a85296e-f866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:4a:6c:d2:2b:1f:f2:53:a3:67:9f:a5:33:
                    74:df:8b:f4:af:c3:b2:c9:a0:e6:99:a8:98:f6:ff:
                    24:ea:65:96:67:e7:a5:c5:c5:61:e2:21:87:d0:33:
                    6e:01:07:26:81:38:9b:5c:fd:63:c1:40:69:c7:1f:
                    4b:69:1e:9e:41:ae:15:81:e5:4b:7e:2f:4b:aa:c2:
                    7c:08:44:9b:f2:9c:39:51:aa:6e:76:53:37:08:57:
                    26:c9:95:9e:8b:35:af:08:cd:ae:02:ac:8f:2f:44:
                    3b:57:41:71:cb:64:2d:2a:52:ad:32:6e:2c:96:d7:
                    51:bd:29:97:c3:5b:55:1f:e0:74:66:d8:39:ec:fa:
                    4e:e5:c7:f6:90:67:7f:72:de:04:ae:c6:6e:43:36:
                    b4:d7:d9:3b:d0:ea:d5:a7:31:d4:00:4b:75:d4:ad:
                    f5:53:55:22:92:43:b9:87:4b:74:dc:61:1d:c2:fa:
                    64:1d:a0:02:30:65:ac:cf:95:9a:62:08:85:c8:35:
                    6f:1a:ec:de:80:c3:62:09:d8:d0:24:fc:65:fe:a2:
                    b6:3a:97:41:bf:01:d8:7d:35:eb:ff:24:ad:c8:f1:
                    3b:64:e4:43:6c:bc:e8:08:57:8d:92:4e:39:09:f8:
                    a0:b3:dc:d6:1a:10:0d:2d:70:73:d8:1c:9b:c9:8a:
                    18:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C8:EC:52:A8:24:0B:59:96:14:F6:E3:02:1F:3F:39:4C:37:AD:7E
            X509v3 Authority Key Identifier:
                keyid:28:1D:DA:09:71:75:C0:43:29:43:FD:E5:7C:A3:3D:28:E5:07:3B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/9E1C89A6ACCD11EE81069050C4F9AE02/KB3aCXF1wEMpQ_3lfKM9KOUHO8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e4:e0:3a:95:2b:5f:e1:f7:e9:3e:f9:30:af:8a:63:b7:7c:
         53:6c:23:95:e9:07:ef:54:e8:04:79:15:ac:fc:d3:d0:e0:f3:
         68:ec:8b:4b:90:ad:18:a6:23:29:0b:49:10:49:9c:46:fa:40:
         43:3e:80:7f:6f:f1:25:8a:dc:5d:5f:aa:07:99:94:5b:85:fb:
         82:9c:5d:a5:5e:58:33:ae:77:a6:96:2e:cd:60:06:f0:73:db:
         f4:de:48:e1:c5:d0:a6:51:5f:d6:17:23:b3:0c:04:24:86:07:
         79:17:ea:c3:0b:b3:f3:dc:da:29:18:12:c5:26:15:84:e5:fe:
         ad:83:9e:62:48:af:dd:ec:85:13:4d:68:7f:64:81:21:b2:fe:
         6e:1d:28:aa:36:bd:21:fd:72:7f:19:73:c3:76:28:65:dd:ec:
         01:98:46:50:23:6f:9c:62:67:60:4f:a4:f3:31:a7:cf:fc:08:
         98:ea:8c:51:57:52:42:95:7d:1c:be:e4:8b:f9:a3:4f:07:41:
         92:71:0a:b7:7e:7c:1e:ee:03:8f:79:42:68:e8:50:08:f2:c8:
         cd:c2:8b:73:9b:45:95:d7:f4:4b:52:46:de:b2:db:92:8a:f2:
         dd:85:a4:5d:19:99:0b:ad:ac:dc:e1:8b:a3:79:53:e2:8f:d0:
         21:d7:a3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:48:21 2026 by rpki-client