Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
File:                     kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json)
Hash identifier:          WnTnnRLLlG9I4r+UVyI40XKRgz5vorYIFbPcLV1gefw=
Subject key identifier:   27:33:D7:53:77:FA:52:E0:E3:CB:83:FB:21:29:AA:7A:FA:0B:CB:99
Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82
Certificate issuer:       /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
Certificate serial:       356C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
Manifest number:          356A
Signing time:             Tue 18 Aug 2026 15:20:03 +0000
Manifest this update:     Tue 18 Aug 2026 15:20:02 +0000
Manifest next update:     Tue 25 Aug 2026 15:20:02 +0000
Files and hashes:         1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: i6IJPhQ2QJGqzFv27wwtBwlBzrxXaHJVCAd9XSWDUjs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl
                          rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13676 (0x356c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9C05, serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
        Validity
            Not Before: Aug 18 15:20:02 2026 GMT
            Not After : Aug 25 15:20:02 2026 GMT
        Subject: CN=6a847823-0225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:44:ff:98:b5:71:f0:10:f0:38:08:f3:45:28:
                    a7:15:03:68:15:88:8b:ba:6e:cb:5d:db:4b:a6:06:
                    16:9e:7f:8b:0e:b6:ee:9c:f7:59:10:10:29:f3:e7:
                    7a:2a:cf:04:c5:dc:fc:aa:7e:4a:4a:09:27:1e:7b:
                    7c:17:de:66:8e:79:70:e9:1d:da:7b:6f:db:78:00:
                    29:b5:6e:e2:b4:1e:5c:63:80:d2:c3:00:44:28:5c:
                    48:d2:87:7d:2a:54:fe:da:1b:6c:55:49:d1:7a:2a:
                    08:54:ac:24:1f:4e:6d:dd:1d:32:d6:58:19:df:15:
                    d7:dc:67:d0:6d:c3:c6:83:af:ab:e8:07:38:10:c3:
                    13:5a:ba:fe:1a:2a:0c:6e:15:d0:b4:57:89:fa:7e:
                    0e:6d:4d:6d:90:fd:5c:e8:a4:6c:14:56:7d:c6:e3:
                    cd:e5:dc:59:be:b2:dd:39:5d:bb:96:b0:4f:bf:d6:
                    da:26:a0:89:a7:1b:31:22:82:63:c5:3d:35:93:9c:
                    26:9a:d1:5a:7b:a1:fb:1a:ee:88:96:78:29:07:b9:
                    74:b4:b6:c7:28:87:fc:9e:54:57:6d:d2:c4:05:f3:
                    a7:ed:10:fb:4c:3b:57:2b:b6:df:6c:bb:05:0d:36:
                    34:42:10:ff:d1:ad:eb:69:89:34:0a:5e:28:ed:79:
                    ee:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:33:D7:53:77:FA:52:E0:E3:CB:83:FB:21:29:AA:7A:FA:0B:CB:99
            X509v3 Authority Key Identifier:
                keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:6b:a3:e4:2b:f1:3a:9f:8d:14:bb:51:74:d4:2f:7e:7f:f9:
         b1:b9:d1:e7:44:b6:72:f6:bd:38:8c:71:3a:5f:ca:b8:8c:41:
         dd:94:39:1b:81:f4:95:21:aa:ab:86:3b:6d:81:d4:c9:33:55:
         b3:0e:9c:cb:ff:9c:d9:bb:e9:30:68:5b:b1:d1:18:cd:fc:d1:
         db:72:4f:e4:ab:43:6e:09:dc:ec:32:a7:a2:b3:7c:12:78:ad:
         0f:36:a2:fb:0b:7d:5c:68:ba:ef:c2:02:2f:9c:ad:4e:20:90:
         cf:b4:03:16:dc:45:de:78:9b:55:50:61:7c:49:28:8c:ab:68:
         8e:9b:95:6e:82:6c:06:40:f2:5d:c4:cb:d6:5b:3a:bd:9f:a7:
         4b:75:fe:a7:7b:00:0b:17:be:06:3e:10:6f:45:28:29:95:b1:
         a0:58:af:f3:13:39:ff:f6:dc:b3:34:3b:3c:cd:04:88:bc:fd:
         00:db:9a:6d:2c:68:23:b5:9a:d4:49:31:23:ea:ee:90:0a:38:
         b5:2c:9b:1c:25:db:60:c5:2c:3f:4b:06:f2:17:72:71:6a:f5:
         d4:5e:9d:7d:8d:fd:40:f7:04:fe:7a:a4:5b:b3:9d:7e:07:da:
         2a:5b:f7:ce:bd:ad:c8:9c:07:33:fa:04:14:b3:08:87:d6:44:
         b1:9d:61:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlDMDUxMTAvBgNVBAUTKDkwREZEQzEzNDBENDRFOEZFMjU2MUQ3RDhERTQ5RUVG
NTQwNjEwODIwHhcNMjYwODE4MTUyMDAyWhcNMjYwODI1MTUyMDAyWjAYMRYwFAYD
VQQDEw02YTg0NzgyMy0wMjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuET/mLVx8BDwOAjzRSinFQNoFYiLum7LXdtLpgYWnn+LDrbunPdZEBAp8+d6
Ks8Exdz8qn5KSgknHnt8F95mjnlw6R3ae2/beAAptW7itB5cY4DSwwBEKFxI0od9
KlT+2htsVUnReioIVKwkH05t3R0y1lgZ3xXX3GfQbcPGg6+r6Ac4EMMTWrr+GioM
bhXQtFeJ+n4ObU1tkP1c6KRsFFZ9xuPN5dxZvrLdOV27lrBPv9baJqCJpxsxIoJj
xT01k5wmmtFae6H7Gu6IlngpB7l0tLbHKIf8nlRXbdLEBfOn7RD7TDtXK7bfbLsF
DTY0QhD/0a3raYk0Cl4o7XnuOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCcz11N3
+lLg48uD+yEpqnr6C8uZMB8GA1UdIwQYMBaAFJDf3BNA1E6P4lYdfY3knu9UBhCC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwNS9FOUQ5QTAyMjFE
QUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRvX2lWaDE5amVTZTcxUUdF
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tOX2NFMERVVG9faVZoMTlqZVNlNzFRR0VJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUMwNS9FOUQ5QTAyMjFEQUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRv
X2lWaDE5amVTZTcxUUdFSUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApGuj5CvxOp+NFLtRdNQvfn/5sbnR50S2cva9OIxxOl/KuIxB3ZQ5G4H0lSGq
q4Y7bYHUyTNVsw6cy/+c2bvpMGhbsdEYzfzR23JP5KtDbgnc7DKnorN8EnitDzai
+wt9XGi678ICL5ytTiCQz7QDFtxF3nibVVBhfEkojKtojpuVboJsBkDyXcTL1ls6
vZ+nS3X+p3sACxe+Bj4Qb0UoKZWxoFiv8xM5//bcszQ7PM0EiLz9ANuabSxoI7Wa
1EkxI+rukAo4tSybHCXbYMUsP0sG8hdycWr11F6dfY39QPcE/nqkW7OdfgfaKlv3
zr2tyJwHM/oEFLMIh9ZEsZ1hpg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:40 2026 by rpki-client