Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
File:                     KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json)
Hash identifier:          kD9vRXYugAmnQCudZKyrI8nUJNNowSA4xQk6/fQgMzY=
Subject key identifier:   90:26:04:70:00:F1:2C:8E:A5:01:F2:A4:B6:F5:8F:F2:E5:1B:F2:EF
Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
Certificate issuer:       /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Certificate serial:       0407
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
Manifest number:          03FC
Signing time:             Tue 13 Oct 2026 00:34:27 +0000
Manifest this update:     Tue 13 Oct 2026 00:34:27 +0000
Manifest next update:     Tue 20 Oct 2026 00:34:27 +0000
Files and hashes:         1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: wOH1Hn5jmtQqrP2xPfnIYNNLYw7CMOTbjPu6RuTV3dM=)
                          2: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: vmFsKgonT1sP7XlgpbWPmdbrw2z/dTAl1pk0bSYlcE0=)
                          3: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: DXFn9IbM02w7n1eFZzgRJrQaHr06yYFyVzCtJliHjPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
                          rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 00:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1031 (0x407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
        Validity
            Not Before: Oct 13 00:34:27 2026 GMT
            Not After : Oct 20 00:34:27 2026 GMT
        Subject: CN=6acd7c93-72c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:68:19:17:7a:8c:c6:19:5f:9e:4a:ad:46:
                    62:6c:4f:1d:71:c2:42:31:c2:db:d1:39:55:7d:dc:
                    71:20:45:e6:b8:97:b6:6b:9d:9b:81:3e:2c:ff:8a:
                    f8:b7:5d:b7:fe:2a:51:33:80:a5:66:c0:2a:a1:3b:
                    88:09:9f:30:93:87:a2:90:43:81:92:a1:c4:b5:5f:
                    d6:ee:45:fa:54:12:7c:4b:53:13:7f:49:a3:cf:f3:
                    89:87:37:e0:e4:27:ee:99:7a:98:8b:cd:2f:4e:81:
                    1f:d4:65:2b:78:ce:17:ff:3d:90:19:47:d6:65:f1:
                    54:46:66:70:fd:60:4d:29:30:08:f3:07:f4:0f:af:
                    67:7b:e8:b1:60:da:e5:ec:86:71:29:bd:ba:4e:68:
                    26:7f:38:98:d6:e7:02:b7:97:b3:56:ee:f1:89:38:
                    8b:1e:25:32:24:e1:f5:96:83:07:9b:26:59:86:27:
                    24:25:84:ba:1d:e9:3d:b7:04:1b:b1:13:96:16:a9:
                    c8:ef:cd:a3:a5:43:a4:b5:72:e7:0c:ec:1d:50:d7:
                    67:73:02:5c:f8:b5:94:c6:fe:04:b4:21:8d:3f:bc:
                    06:9b:62:bc:f8:21:49:7d:c7:a5:58:96:0f:96:36:
                    18:08:8c:20:4a:e9:2d:20:cf:b1:73:f4:5d:78:2c:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:26:04:70:00:F1:2C:8E:A5:01:F2:A4:B6:F5:8F:F2:E5:1B:F2:EF
            X509v3 Authority Key Identifier:
                keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:89:b4:c6:61:3b:4a:5b:ca:20:7e:45:85:a9:1c:e3:ec:08:
         0d:cc:f7:e6:e4:ad:cf:f1:7b:17:c7:de:2d:f6:b0:dc:b5:dd:
         12:34:a8:40:b3:84:d5:ec:e0:df:f1:21:da:f3:f0:98:01:40:
         ac:f5:c6:3e:cb:db:b7:b5:54:2f:0d:7e:d2:21:02:a2:21:d4:
         f0:bc:43:0f:4e:8f:33:53:f2:1a:f3:72:41:77:e2:5f:5d:b3:
         c1:c8:36:67:e0:9a:fb:1d:78:04:c2:32:f5:6e:42:94:73:60:
         ba:fc:0b:e3:cd:3d:f5:71:3e:1e:9c:5f:ee:97:8f:51:88:cf:
         77:d0:41:4f:91:38:a6:72:00:38:52:8d:e1:9d:af:c6:1a:58:
         0c:a9:9f:b2:e7:f4:bc:c2:2a:8c:2a:8f:8b:fe:d8:7c:40:18:
         66:c8:d1:55:d2:ef:b3:2c:b5:92:fa:93:03:d3:42:ef:e5:41:
         7d:db:d0:fc:51:e1:be:3f:09:f2:2c:35:08:8d:5b:7e:42:d8:
         0d:a5:52:b5:0f:4c:c9:b6:23:aa:e6:11:ea:f8:6e:d1:75:47:
         ef:33:b1:cd:b5:de:90:31:3b:25:ae:fe:f2:d2:bb:b8:66:01:
         01:e3:cc:82:64:2f:81:5f:d7:c5:b8:c5:eb:e5:d3:e6:65:69:
         8c:fe:8f:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgwRDIxMTAvBgNVBAUTKDJCMUJCMjRBRENEQjE0RjZFMkM3QkJCMkQ4OEFCQURC
MURERDg5OEQwHhcNMjYxMDEzMDAzNDI3WhcNMjYxMDIwMDAzNDI3WjAYMRYwFAYD
VQQDEw02YWNkN2M5My03MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyNVoGRd6jMYZX55KrUZibE8dccJCMcLb0TlVfdxxIEXmuJe2a52bgT4s/4r4
t123/ipRM4ClZsAqoTuICZ8wk4eikEOBkqHEtV/W7kX6VBJ8S1MTf0mjz/OJhzfg
5CfumXqYi80vToEf1GUreM4X/z2QGUfWZfFURmZw/WBNKTAI8wf0D69ne+ixYNrl
7IZxKb26TmgmfziY1ucCt5ezVu7xiTiLHiUyJOH1loMHmyZZhickJYS6Hek9twQb
sROWFqnI782jpUOktXLnDOwdUNdncwJc+LWUxv4EtCGNP7wGm2K8+CFJfcelWJYP
ljYYCIwgSuktIM+xc/RdeCwyQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJAmBHAA
8SyOpQHypLb1j/LlG/LvMB8GA1UdIwQYMBaAFCsbskrc2xT24se7stiKutsd3YmN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBEMi9ENDI4RDBDNkRB
REUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQYml4N3V5MklxNjJ4M2Rp
WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t4dXlTdHpiRlBiaXg3dXkySXE2MngzZGlZMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODBEMi9ENDI4RDBDNkRBREUxMUVDODc3MTE0NTBDNEY5QUUwMi9LeHV5U3R6YkZQ
Yml4N3V5MklxNjJ4M2RpWTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHYm0xmE7SlvKIH5Fhakc4+wIDcz35uStz/F7F8feLfaw3LXdEjSoQLOE1ezg
3/Eh2vPwmAFArPXGPsvbt7VULw1+0iECoiHU8LxDD06PM1PyGvNyQXfiX12zwcg2
Z+Ca+x14BMIy9W5ClHNguvwL48099XE+Hpxf7pePUYjPd9BBT5E4pnIAOFKN4Z2v
xhpYDKmfsuf0vMIqjCqPi/7YfEAYZsjRVdLvsyy1kvqTA9NC7+VBfdvQ/FHhvj8J
8iw1CI1bfkLYDaVStQ9MybYjquYR6vhu0XVH7zOxzbXekDE7Ja7+8tK7uGYBAePM
gmQvgV/XxbjF6+XT5mVpjP6PEg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 09:12:31 2026 by rpki-client