Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
File:                     kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json)
Hash identifier:          sKH5fVllq0lOHIC1cVkhqQS6nPDf28fVrGPieSdb9ks=
Subject key identifier:   26:E1:C4:A1:89:60:5E:9D:24:54:75:41:BC:B1:8A:5D:14:92:B9:24
Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
Certificate issuer:       /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Certificate serial:       01E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
Manifest number:          01E3
Signing time:             Mon 05 Oct 2026 03:51:50 +0000
Manifest this update:     Mon 05 Oct 2026 03:51:49 +0000
Manifest next update:     Mon 12 Oct 2026 03:51:49 +0000
Files and hashes:         1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: 42ztcAcND0qGLCV7DcT2hQOvoXgb9gW772ue2zXDfjk=)
                          2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: DnFLfRNolDS9uaJNFyfTk6IoS5wsIvFbDILScGzhK3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
                          rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:51:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
        Validity
            Not Before: Oct  5 03:51:49 2026 GMT
            Not After : Oct 12 03:51:49 2026 GMT
        Subject: CN=6ac31ed6-17a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:7c:08:86:42:66:97:6c:b1:32:77:9a:77:
                    21:a6:e0:ba:cd:e3:21:ed:3c:5b:d9:43:a6:c1:31:
                    f6:a2:05:46:e5:f6:27:e9:1b:34:14:17:2e:70:4b:
                    32:ad:3e:91:b3:bb:cd:cb:77:d0:60:b2:d6:31:19:
                    b3:76:d1:95:9a:7a:d4:c7:d9:aa:30:77:0c:f0:82:
                    59:00:d8:29:23:2d:9d:a3:4c:94:be:84:86:98:75:
                    08:2f:b4:d8:32:cb:9c:37:0a:1a:d9:e2:77:2b:68:
                    bf:06:18:36:a5:bd:6b:eb:7f:53:71:fa:e6:f4:9a:
                    40:d9:40:06:22:88:c3:be:2d:f3:a1:0d:f6:a7:9b:
                    e1:94:92:33:94:9d:6a:e2:d5:1e:f1:4f:7e:7a:05:
                    bf:e3:41:d8:21:8a:9a:2e:e5:9e:9c:24:41:7d:e5:
                    35:b7:81:03:2b:23:79:4e:9c:7b:9e:f2:55:45:63:
                    08:e4:ed:2b:c5:4c:90:7c:7a:a0:24:eb:5d:e2:a7:
                    a9:bd:bf:ce:5d:42:68:d0:0d:a6:c8:8e:e2:93:b8:
                    c0:fa:56:49:aa:2c:84:45:b1:5a:f5:a8:de:37:82:
                    f8:75:6a:6a:e2:58:79:cf:55:c2:82:70:b2:46:43:
                    df:6c:04:d5:62:f4:6e:c6:6a:8a:09:af:35:fc:87:
                    ff:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E1:C4:A1:89:60:5E:9D:24:54:75:41:BC:B1:8A:5D:14:92:B9:24
            X509v3 Authority Key Identifier:
                keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:fa:6a:bd:9d:e8:84:45:c2:c1:20:99:58:4a:e2:9e:f5:d1:
         89:9d:da:4a:56:30:db:6b:a9:a0:02:b3:c8:5f:ef:bb:0f:c7:
         62:1c:a9:14:9b:c3:2c:03:3f:b6:7c:c7:f6:59:1c:82:e0:73:
         40:4d:b9:d1:92:cf:5d:0e:66:5b:18:44:7b:8f:ad:7e:b5:59:
         d7:09:ba:43:5d:68:24:23:95:0e:f5:85:11:ac:f4:f7:d3:e6:
         9d:71:b2:40:2a:cb:8d:a0:c1:4a:c0:1e:00:49:88:1c:27:ae:
         01:b8:07:2b:a3:7e:c1:fe:62:1b:4a:19:3a:b1:b3:07:61:a8:
         d4:c2:34:35:58:26:08:83:11:e3:e7:e1:d3:3b:ce:6b:53:6a:
         25:00:c2:8f:b5:75:a1:08:2c:17:1f:17:82:b7:77:f7:d3:7c:
         aa:bd:47:6a:1b:1f:d9:c9:97:aa:b0:01:18:47:5e:d3:a1:30:
         ce:ec:01:3a:ce:e5:e0:cb:87:c0:af:4f:cf:fb:af:dd:c0:ee:
         0c:68:07:5b:f7:82:b0:95:11:2e:c0:2a:73:c6:41:dc:a4:02:
         62:56:a3:3c:66:42:c3:fd:4a:3a:d9:1c:04:f6:3c:0e:26:6b:
         5b:4c:d2:03:2f:77:48:11:46:cd:83:23:be:f8:bc:ed:e0:15:
         11:44:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:50:45 2026 by rpki-client