Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
File:                     kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft (raw, json)
Hash identifier:          tig5zYEgf+k3kQW1j7c3o8xN3I/mCXp+j5R3se+HXt4=
Subject key identifier:   28:91:C1:E0:30:55:6F:48:ED:FF:37:17:23:67:50:F3:C4:6C:3D:AC
Authority key identifier: 91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
Certificate issuer:       /CN=A91D8157/serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
Manifest number:          77
Signing time:             Thu 03 Sep 2026 08:17:18 +0000
Manifest this update:     Thu 03 Sep 2026 08:17:18 +0000
Manifest next update:     Thu 10 Sep 2026 08:17:18 +0000
Files and hashes:         1: kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl (hash: 9mQKpemFnlwUP9m9ML6aiA20qZlEFVhjvIStkUnjRTk=)
                          2: 174298368DB111F18EE5B03B4611F970.roa (hash: ncEej6Lc0TJTyx32wKUoM2ogTcTqlHpXgc40wTgsiPs=)
                          3: D386B66251D411F185203A1790833773.roa (hash: x9YNhs52Js+F/nkP6R0eX91Umj1eirlfbF7q2WvjGA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
                          rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8157, serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
        Validity
            Not Before: Sep  3 08:17:18 2026 GMT
            Not After : Sep 10 08:17:18 2026 GMT
        Subject: CN=6a992d0e-a837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:bb:e6:0d:1c:67:2a:a5:7e:b3:f2:0f:53:
                    f2:5d:c6:49:6a:a9:1e:85:6d:11:9c:45:da:30:22:
                    c0:db:f6:35:db:03:ea:ff:da:5b:51:c3:52:a8:99:
                    9a:5b:e5:8b:08:ed:9f:79:42:6b:52:6c:9b:ac:03:
                    f6:3d:6d:2f:bf:23:f1:c5:87:ed:24:ac:e4:50:c2:
                    26:10:14:bd:20:79:44:20:96:8b:93:de:bd:24:65:
                    f7:d1:3a:ef:2d:9b:1a:b4:3b:a2:bc:cd:5c:87:ce:
                    d1:f7:d7:30:11:9e:67:6c:6a:4b:71:cf:1d:48:be:
                    56:65:47:bf:03:f5:3f:04:be:aa:f0:45:f1:d5:a8:
                    52:e6:63:6a:f3:f4:0a:4f:c5:f1:06:48:a0:69:28:
                    8c:cd:25:4e:ed:d0:f1:bc:61:c3:26:2c:c4:32:de:
                    d0:3e:b3:b2:af:cf:af:dc:75:b9:08:dd:33:76:9c:
                    07:4e:a8:26:ba:3a:c3:6c:6a:c1:1e:11:ff:f9:ba:
                    5c:8e:3f:eb:3a:55:d2:20:b7:10:54:c5:d9:4d:0f:
                    54:2d:53:a2:2b:8a:4e:27:8b:71:96:30:9d:c5:3a:
                    8a:b5:6d:ba:36:3c:74:a5:32:32:f5:22:c0:15:ce:
                    fd:c5:99:ba:ef:a5:df:4f:7f:18:e8:cf:8c:0a:54:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:91:C1:E0:30:55:6F:48:ED:FF:37:17:23:67:50:F3:C4:6C:3D:AC
            X509v3 Authority Key Identifier:
                keyid:91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e7:ab:1d:8c:9f:d5:07:b6:1c:4f:4c:e1:d2:d3:7e:c3:dd:
         56:bd:f4:08:49:3d:8a:21:b3:2d:6e:d5:95:83:84:90:53:55:
         a3:4e:3d:4f:d1:ef:4f:7b:10:2c:b1:8c:e3:6a:fa:17:fa:9a:
         fa:30:77:95:ca:40:94:aa:48:59:eb:ed:8e:2f:2e:17:de:e1:
         00:06:ad:92:88:9b:e9:71:19:3e:2f:8e:f5:51:b7:0a:5e:67:
         47:50:3f:0d:da:b4:30:12:b9:df:3f:4c:37:c7:46:56:d8:90:
         af:06:a7:d8:db:3c:8f:a6:2f:22:ea:fb:da:c6:a4:3c:87:74:
         87:1d:93:79:c3:68:30:ca:c6:4b:da:fc:4c:35:c6:4a:38:04:
         25:69:0c:ae:fc:b5:32:61:51:b7:d1:3b:8f:c7:69:3e:ba:43:
         16:b3:31:5a:c5:18:41:ce:b2:5d:82:e4:86:db:0d:c4:eb:0c:
         0c:ca:94:f8:e2:68:a6:46:04:f2:c6:7d:5d:b6:41:37:78:48:
         5a:66:07:32:a6:3c:83:b4:f7:f0:14:aa:d4:b8:3b:27:c7:10:
         9e:c2:ee:d8:fb:30:42:36:44:a0:8b:29:9f:9b:04:4f:73:70:
         a7:ac:de:89:bd:f4:26:69:d4:5d:96:62:2b:12:13:cb:79:8e:
         b7:b2:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:27:58 2026 by rpki-client