Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
File:                     kBUoySF5F9lWch0caFZlNFvrVv0.mft (raw, json)
Hash identifier:          bxrvRF38hDNuiksWZ7wBtZXBEsMntObYCwcbPw2j8nU=
Subject key identifier:   C4:14:A6:65:2D:92:AB:B1:04:4A:89:D1:7A:89:D2:3F:B2:F7:EB:7C
Authority key identifier: 90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD
Certificate issuer:       /CN=A91CFAB9/serialNumber=901528C9217917D956721D1C685665345BEB56FD
Certificate serial:       0423
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
Manifest number:          041D
Signing time:             Fri 04 Sep 2026 23:47:03 +0000
Manifest this update:     Fri 04 Sep 2026 23:47:03 +0000
Manifest next update:     Fri 11 Sep 2026 23:47:03 +0000
Files and hashes:         1: kBUoySF5F9lWch0caFZlNFvrVv0.crl (hash: UocFNaIQV5awjstPP8tqV1aRBryHI86WGttfobjnZyg=)
                          2: 39A335D6CB3F11ECBEBC9A1DC4F9AE02.roa (hash: cp7bTb5LQaah3kkUkaBafNzpnRd6bBUnxxFCOx5DKVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFAB9, serialNumber=901528C9217917D956721D1C685665345BEB56FD
        Validity
            Not Before: Sep  4 23:47:03 2026 GMT
            Not After : Sep 11 23:47:03 2026 GMT
        Subject: CN=6a9b5877-9724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:47:28:21:ff:62:bf:f5:c2:24:aa:48:42:
                    00:f9:15:72:32:de:d8:79:0a:6f:9b:54:1d:b0:14:
                    d8:d3:41:a8:d3:c4:b7:f4:6c:7e:95:50:ed:a4:ba:
                    93:7d:18:00:01:c6:fc:bd:4b:58:ee:8b:41:5c:af:
                    95:49:bd:6c:54:6f:54:d5:33:05:0d:21:2b:fa:35:
                    83:aa:d6:02:75:4f:23:49:6a:04:4e:e4:c7:91:61:
                    df:c1:d6:5a:a5:ba:b2:69:49:b9:c4:e8:d4:12:04:
                    f9:d9:88:ca:05:76:9a:24:f2:af:05:60:fe:ea:47:
                    b0:f7:58:b4:8a:4d:0e:6e:9e:b9:30:bd:8e:19:f8:
                    ab:0b:f9:ad:f7:1c:45:ba:d7:8f:77:70:76:6e:ef:
                    83:18:9e:f2:bb:5a:d3:f0:0c:4a:6f:3a:2a:9b:a8:
                    6b:ee:f7:0f:8f:22:9e:30:ee:fd:6c:6b:03:7f:c6:
                    ea:18:03:6d:d2:25:43:45:78:76:1f:3b:8f:70:90:
                    ba:0e:02:cf:53:f9:1b:60:a1:7b:bb:cf:a9:f6:f0:
                    62:9a:5b:dc:86:bc:37:1c:04:f9:8d:10:61:f9:78:
                    b0:c3:80:d6:ee:6e:90:cd:e3:32:5c:35:ee:1f:0b:
                    ef:73:79:38:56:b9:0b:87:62:c3:bf:1d:86:f1:95:
                    b3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:14:A6:65:2D:92:AB:B1:04:4A:89:D1:7A:89:D2:3F:B2:F7:EB:7C
            X509v3 Authority Key Identifier:
                keyid:90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e0:60:1a:5e:3f:d3:c8:09:24:9d:41:25:41:e4:b2:54:2c:
         ad:ea:7d:49:c7:d0:cb:54:fc:e2:36:f2:a9:40:a8:de:d6:b5:
         df:6f:a1:50:5f:7a:0b:b6:b3:1f:30:d7:ce:05:74:67:76:f6:
         06:f1:3d:1b:c9:8d:84:8c:6c:ce:6d:bb:27:a7:2b:c7:34:da:
         da:c1:d6:fe:43:06:7a:45:08:93:05:bf:82:3a:71:96:64:1a:
         f2:b5:92:ae:cc:ff:de:eb:79:ef:aa:21:ba:62:fa:d1:c1:46:
         d6:c1:eb:09:ac:8c:92:63:1a:64:77:9c:07:69:ee:5c:e7:e5:
         5c:bf:3b:5f:cf:38:01:ba:59:72:18:69:31:7c:41:fb:13:1b:
         98:d7:30:c6:2a:ea:c9:7b:8a:d8:40:62:14:9d:de:9f:73:e1:
         df:a8:9d:2b:ee:89:f5:ff:c7:90:89:8b:51:d2:ee:a2:2b:80:
         cb:ff:51:e2:e8:25:8f:4a:c2:b6:b1:c3:68:fe:35:8b:a0:4c:
         05:12:3f:35:60:15:e6:9d:de:97:a5:2c:57:93:a9:1d:0b:f3:
         1c:46:26:34:a2:bc:68:f2:a6:05:ad:bc:f7:0d:1d:84:0c:37:
         fc:36:c2:d9:33:0d:e8:fe:4b:19:40:c9:d9:26:ba:ba:5d:04:
         8e:fa:80:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:12:38 2026 by rpki-client