Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
File:                     kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft (raw, json)
Hash identifier:          AZrUFWXGPGeB9M9dzCYvgJFj+MxXCqZqWQodJKXsJWY=
Subject key identifier:   81:32:6E:32:5B:51:AF:60:38:B4:53:A7:10:3E:F2:FC:AC:6E:E9:1D
Authority key identifier: 91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17
Certificate issuer:       /CN=A91C4FB5/serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
Manifest number:          127A
Signing time:             Fri 04 Sep 2026 17:05:03 +0000
Manifest this update:     Fri 04 Sep 2026 17:05:02 +0000
Manifest next update:     Fri 11 Sep 2026 17:05:02 +0000
Files and hashes:         1: kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl (hash: hszkWi9uECxPgNim1k8HUNo35OfapEG2PEOQObxMdPQ=)
                          2: 5A3D22165B5011F1A484689580EE528E.roa (hash: e03XnEPO3o2zr+89RCtKmVF1UA9g/w/QMsdb9CferY4=)
                          3: 59ACBA1E5B5011F1A484689580EE528E.roa (hash: zSFiu1yhrWQYfzXu7XQ3kTYOr9VS9WdRx3KYSDFhSHI=)
                          4: 58722CCE5B5011F1A484689580EE528E.roa (hash: ZlS+zcT5r0ms9dmqfLobs/BgiHTHyfZo/3BVynBGZjc=)
                          5: 5ACD46A25B5011F1A484689580EE528E.roa (hash: /3nrgcWXZ56O1J79Bt7Rp4QcJq7XbMY/jy1oMPLgjcM=)
                          6: 59142EC05B5011F1A484689580EE528E.roa (hash: /QO8wNozJq4m8L+0sf+XY52fc/jZly2rqPjfRvQ5K9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl
                          rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 17:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4FB5, serialNumber=9185161F46F56A83BD18A5BF249084D6834CAC17
        Validity
            Not Before: Sep  4 17:05:02 2026 GMT
            Not After : Sep 11 17:05:02 2026 GMT
        Subject: CN=6a9afa3f-1bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:31:a9:f5:7a:29:41:a1:fe:62:84:49:72:
                    51:79:23:cb:20:10:61:40:8a:57:51:ae:6e:6d:96:
                    80:1d:e5:c6:33:9f:20:24:c6:5f:ff:e0:d0:e3:a5:
                    30:b6:dd:54:26:15:0f:66:2a:47:74:ce:4d:53:38:
                    20:1b:80:f8:55:0e:ca:1a:f0:5a:e0:f1:87:fc:f5:
                    c5:de:1c:23:0c:f7:3d:07:c7:f9:56:23:6b:8a:b0:
                    12:4a:85:42:2b:a1:52:3b:50:73:00:45:b3:67:c8:
                    92:51:4a:5e:99:0a:94:69:9f:8f:4c:af:c5:f4:75:
                    7f:be:59:63:f1:c8:ba:01:93:60:03:aa:eb:8a:b2:
                    0f:0c:42:2f:76:ed:ce:a6:e7:df:d1:e3:5e:1e:83:
                    1e:6b:38:bf:57:5c:6e:c6:d5:d1:6a:91:90:2b:35:
                    c7:96:ed:30:49:5a:d9:9d:57:e7:41:be:61:64:c9:
                    86:58:d2:f5:cb:eb:18:e7:71:8c:fc:e7:3e:61:9e:
                    4c:33:a4:02:ef:45:81:42:d5:29:17:a8:80:38:4e:
                    8e:ac:3b:16:d3:14:02:6e:2f:6e:23:ce:28:f4:66:
                    87:de:53:e3:7f:18:99:69:7c:67:f5:f1:37:74:60:
                    75:10:23:32:ae:6e:98:36:34:b5:fa:87:1e:93:e7:
                    70:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:32:6E:32:5B:51:AF:60:38:B4:53:A7:10:3E:F2:FC:AC:6E:E9:1D
            X509v3 Authority Key Identifier:
                keyid:91:85:16:1F:46:F5:6A:83:BD:18:A5:BF:24:90:84:D6:83:4C:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYUWH0b1aoO9GKW_JJCE1oNMrBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/kYUWH0b1aoO9GKW_JJCE1oNMrBc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:37:ef:8f:a0:f0:ce:d6:73:ca:61:37:1a:6f:ac:df:62:6a:
         97:5d:84:5e:9a:93:69:88:91:84:53:fd:e9:0f:5e:ef:18:ca:
         3f:99:ae:16:2e:fb:14:7f:8b:d1:90:9e:4a:58:e6:9c:51:4c:
         df:d1:24:11:a8:81:06:7e:66:63:c1:f8:ee:bc:2e:3c:a7:b5:
         bc:0a:49:74:66:be:8b:3b:85:cf:a7:02:12:ec:3d:76:20:b5:
         8f:c5:41:af:1d:88:85:9b:d5:c4:27:d4:59:38:15:de:a7:a2:
         ba:25:14:a3:45:57:b7:0f:6f:89:03:f5:e7:04:96:de:a4:4f:
         4c:cd:2f:8d:0b:dc:b1:be:22:cd:a3:99:ac:76:b4:f9:26:92:
         48:06:41:29:73:b1:06:a0:12:8b:5f:cd:0b:79:60:07:91:aa:
         42:e4:da:8d:bc:f8:99:3d:a9:5b:31:86:55:cc:03:eb:2a:86:
         0e:fb:f4:30:47:22:3d:1f:e8:0a:d8:35:b4:6b:e8:eb:3f:af:
         32:c7:75:f9:60:d8:73:ad:c9:c2:5a:4e:98:d3:6a:0a:37:7f:
         11:14:fb:ed:92:d9:fd:2c:7c:8c:9c:44:86:78:a6:9f:da:5c:
         5a:f4:07:46:e1:64:5c:9f:1e:13:e7:92:77:22:ff:f0:db:8e:
         15:21:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:51:28 2026 by rpki-client