Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
File:                     -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json)
Hash identifier:          4yHDHWCW6mu3XpHZpzqvwyuhy2P9flZvtPTbNUTQPEQ=
Subject key identifier:   2A:86:4D:6B:9A:B0:28:C6:DB:E1:61:B2:CA:07:3A:22:12:79:08:5C
Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9
Certificate issuer:       /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
Manifest number:          0157
Signing time:             Wed 07 Oct 2026 05:42:28 +0000
Manifest this update:     Wed 07 Oct 2026 05:42:28 +0000
Manifest next update:     Wed 14 Oct 2026 05:42:28 +0000
Files and hashes:         1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: o8i+a7ur3oZjzDYgCeY0PPTK9Pvc3X4DFzyvsyk3tM4=)
                          2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: 0O2Y56VE28BDUyW/y7K+tvSZF089IWlNTSJ1ih9VrPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl
                          rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 05:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9
        Validity
            Not Before: Oct  7 05:42:28 2026 GMT
            Not After : Oct 14 05:42:28 2026 GMT
        Subject: CN=6ac5dbc4-4520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:13:2a:a1:b7:2c:29:1f:f6:01:ca:1d:9e:
                    73:1f:83:3a:5c:26:2a:81:69:9f:3a:13:4d:76:3f:
                    85:b0:16:ab:8d:d4:7f:ab:d7:b0:bc:61:c9:8c:b6:
                    be:02:ed:c7:a9:be:40:dd:2c:75:f3:1d:47:66:1f:
                    dc:b7:76:7b:0a:87:2e:f5:b8:a2:22:d1:08:bd:f9:
                    26:54:e2:d3:64:25:0b:d8:34:6e:a9:90:42:ac:51:
                    92:58:dc:73:73:f4:7b:ae:ee:3c:a5:d7:66:09:fa:
                    46:13:3c:e0:56:e1:8c:45:c5:11:be:0a:e8:d4:5e:
                    cf:46:0d:ed:f7:49:c7:14:63:58:dd:35:ee:62:ee:
                    5a:39:cc:b1:9e:f5:a4:cc:d1:a9:12:43:81:3e:40:
                    12:e0:82:10:93:a7:9b:3a:31:ae:61:7a:04:18:0c:
                    ec:d8:62:08:e5:5c:86:41:20:28:4c:6f:08:19:13:
                    95:e9:12:b3:6a:ea:d4:36:5b:ea:b9:8f:7a:8e:a7:
                    98:04:34:d4:cd:d2:ee:99:ca:37:df:19:13:66:cd:
                    ba:e5:ce:f4:e8:c4:b1:a8:63:3d:c1:5d:6f:dc:d1:
                    be:41:bf:95:3e:f4:65:a4:27:d1:88:68:c1:a2:ff:
                    e2:a1:26:c0:46:4c:21:2c:3e:2e:e3:5f:37:95:54:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:86:4D:6B:9A:B0:28:C6:DB:E1:61:B2:CA:07:3A:22:12:79:08:5C
            X509v3 Authority Key Identifier:
                keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e6:91:d6:f2:14:57:b9:1c:a4:3e:ba:e7:5c:31:a9:ad:96:
         b6:88:23:c0:56:97:44:43:a1:97:0d:38:55:8d:df:9c:4f:04:
         8b:47:c6:f7:a3:ba:06:cc:25:0d:3b:e7:5d:e9:5d:ed:3a:60:
         e1:c1:0f:fd:e3:82:32:1e:47:f0:52:20:fe:5b:f7:78:a0:c4:
         17:34:be:e2:cd:c8:a6:f5:4e:c1:32:a2:99:cb:24:1e:1f:ee:
         ed:e3:5d:76:69:0f:b4:63:d2:ca:6f:96:e9:a6:c8:51:91:3b:
         32:92:da:d6:1a:5c:0f:b4:47:de:98:fb:47:15:9c:42:a5:58:
         df:8d:aa:b1:d6:f9:f0:39:e0:90:84:27:2a:fd:d6:cc:58:76:
         b0:72:3a:f0:ba:91:7c:23:2b:9a:26:eb:93:77:dc:43:45:2a:
         ac:2e:05:28:fd:28:38:d1:b6:da:6c:8d:cf:bd:b8:fd:bf:53:
         b6:7f:d3:5c:4a:bb:1d:77:5d:a9:4b:99:67:74:3a:2a:69:0e:
         84:54:f2:05:5e:b1:61:25:60:91:fa:28:ef:96:2f:44:46:3c:
         8c:e4:78:6b:b1:e9:38:66:15:b4:bc:57:fa:b8:6d:d1:c1:84:
         79:41:b0:7e:5f:85:f4:ed:b2:fa:93:9c:ca:af:2c:65:1b:8a:
         62:f9:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:36:30 2026 by rpki-client