Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
File:                     kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft (raw, json)
Hash identifier:          FC898zF42qmaXadG7GOASXwXYw0mRXwQChWiknrQTFU=
Subject key identifier:   2E:6D:23:B0:EA:F4:E6:3D:6D:B8:54:6C:5B:B6:58:E8:1A:8D:D3:C4
Authority key identifier: 93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97
Certificate issuer:       /CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497
Certificate serial:       0603
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
Manifest number:          05EF
Signing time:             Tue 18 Aug 2026 23:19:26 +0000
Manifest this update:     Tue 18 Aug 2026 23:19:26 +0000
Manifest next update:     Tue 25 Aug 2026 23:19:26 +0000
Files and hashes:         1: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl (hash: 559ioRFOLC3bo647bS/tpJEQUnUWU/9hODZ8qrdYifE=)
                          2: 7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa (hash: v7M934hti2JfOkd+bql5cnksZWaNWuafx7OpCr8yvO4=)
                          3: 720FAF9A0BEF11ECAEF3EA5DC4F9AE02.roa (hash: GgRvCGtXb4Kz6rmn1wkhMZUUNry/inQOA2R0pYqaZT8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5F33, serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497
        Validity
            Not Before: Aug 18 23:19:26 2026 GMT
            Not After : Aug 25 23:19:26 2026 GMT
        Subject: CN=6a84e87e-ce9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:45:11:14:af:b6:52:25:05:21:e0:98:03:99:
                    b7:c3:6a:b6:92:61:ce:12:3f:b9:2d:db:b1:fe:9f:
                    fd:de:c4:0b:a6:8f:dc:c6:8a:90:3e:1e:cb:59:3f:
                    cb:1d:70:da:00:31:55:8c:67:a3:7a:1f:ae:e6:c2:
                    45:7b:42:aa:92:e7:ff:c2:bf:75:b6:a3:20:cc:d5:
                    c0:22:41:91:73:4d:72:29:81:1a:59:54:ba:48:1f:
                    42:e9:70:da:9f:f0:99:0e:2a:1d:fc:b6:22:70:37:
                    18:0b:04:d3:2a:09:ea:a0:f2:41:aa:e7:7f:9c:22:
                    b2:4e:48:9a:0b:c1:aa:90:55:7b:86:50:b2:62:9b:
                    3a:ea:51:76:ea:95:18:7f:06:b9:b2:4d:c1:99:53:
                    14:3a:7c:75:0a:10:13:06:b4:85:b1:de:c8:52:43:
                    33:76:98:b6:56:90:50:00:9e:8f:e4:53:2a:d7:ce:
                    86:e9:80:a9:da:0b:ce:05:a5:70:e7:c0:cd:73:36:
                    0a:9f:a9:be:ba:86:35:5e:87:75:27:82:31:97:70:
                    91:3d:fb:08:f1:dd:8f:35:51:bc:04:17:37:b3:71:
                    21:f3:61:79:c3:3d:85:60:28:59:f8:fe:0f:51:2e:
                    0f:6f:3c:92:e2:02:90:2a:38:8d:df:e4:a5:f2:79:
                    8c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6D:23:B0:EA:F4:E6:3D:6D:B8:54:6C:5B:B6:58:E8:1A:8D:D3:C4
            X509v3 Authority Key Identifier:
                keyid:93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8e:c1:5a:a6:9a:11:88:fe:fa:ff:0b:49:8c:14:19:5d:49:
         e8:61:66:3f:b6:cf:2a:a9:56:82:65:a4:0d:5a:49:0b:a7:d3:
         5f:d9:70:0a:50:83:a0:39:b3:77:ce:38:70:5b:5c:7c:e2:fb:
         5f:e5:5a:48:5d:56:cb:d8:03:2e:ac:e1:89:30:48:84:1b:54:
         c4:b8:8a:2c:68:87:9c:48:4a:2f:7f:c2:2b:ab:33:eb:ca:8c:
         25:25:2d:27:df:db:a1:3e:a1:fd:39:ae:db:73:73:1a:5c:5e:
         d2:01:e4:aa:c6:fb:2f:50:a0:e5:81:13:1d:9a:95:41:95:74:
         33:6e:d2:6a:bf:b5:16:a4:0a:73:a2:b6:de:14:ef:42:05:a5:
         cc:c0:6d:05:9c:66:4d:7e:c4:fb:57:39:2a:2c:b7:23:54:33:
         4f:d6:73:0e:69:1d:77:e8:93:aa:71:62:cb:c6:50:a6:8c:ad:
         f4:f4:2e:d1:74:b5:4e:19:b1:e9:3f:53:15:7c:b8:94:99:d6:
         1e:5d:61:fd:5b:bf:cd:2f:09:e2:a6:d4:7f:f8:42:d3:bc:4c:
         8c:de:c0:07:55:bf:92:ce:c6:14:8a:49:7b:16:b6:cc:dd:b8:
         d0:dd:fa:10:97:58:ca:64:f3:22:f8:c6:0c:31:5c:fa:e1:41:
         8c:c1:40:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:09 2026 by rpki-client