Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
File:                     kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft (raw, json)
Hash identifier:          ogJqEZvMFQ1HLiQZbHtKVmm96PLlQStVG+ZGl+SI/kI=
Subject key identifier:   4B:53:6C:DF:89:7F:58:1D:CC:0F:B2:24:C1:5B:D3:7A:D8:24:9A:68
Authority key identifier: 93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
Certificate issuer:       /CN=A91DE323/serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
Certificate serial:       025D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
Manifest number:          024F
Signing time:             Sat 03 Oct 2026 03:08:38 +0000
Manifest this update:     Sat 03 Oct 2026 03:08:37 +0000
Manifest next update:     Sat 10 Oct 2026 03:08:37 +0000
Files and hashes:         1: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl (hash: gavq4il4oYRsZw2ZdspFMkcGeSwALLQtRVMJCVIO5Xo=)
                          2: 4AB01838FF1D11F0816C691B85EE528E.roa (hash: 73GQqCwii1vmNrsS7r1xrrm5FcLJovRSf9upFdGwKjE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl
                          rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:08:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE323, serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
        Validity
            Not Before: Oct  3 03:08:37 2026 GMT
            Not After : Oct 10 03:08:37 2026 GMT
        Subject: CN=6ac071b6-1d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:30:99:25:29:22:6f:c9:6c:d0:8d:97:a3:
                    fe:ee:bb:c4:54:7d:09:2c:c7:b7:1d:1b:55:33:02:
                    b9:3c:2f:2c:a2:65:1e:5d:ff:2d:6d:d6:53:8b:99:
                    24:1a:75:38:29:c7:cc:c5:70:08:e8:d3:39:68:2e:
                    a2:49:2f:df:04:73:35:81:f5:03:c3:e0:c1:fa:58:
                    aa:43:c3:4d:45:6c:f9:92:2e:69:0b:3c:9b:27:ef:
                    25:2f:83:67:c3:66:a3:63:28:38:4f:a2:bd:a2:17:
                    0c:50:2f:0a:14:82:17:85:c4:9d:5b:a9:ed:0a:b4:
                    27:c8:8e:78:a1:e2:0e:e4:9e:a5:e3:f7:3b:25:b2:
                    df:00:ee:67:7e:46:b4:1a:00:e1:62:e8:ed:8d:02:
                    ab:eb:cd:59:43:d3:0b:22:8b:02:bc:2f:14:f5:ec:
                    d8:62:8a:a2:4c:ce:69:63:5a:48:ac:a7:ff:f7:de:
                    69:d2:39:d9:1b:86:57:ea:93:a7:c5:33:e3:bb:35:
                    19:95:42:7c:a4:d6:62:30:36:14:8b:68:04:d2:71:
                    2e:2f:6f:c7:ff:0b:68:cb:b7:7e:05:06:66:da:ec:
                    bd:0d:46:28:13:72:96:65:50:18:65:67:b6:bb:18:
                    07:41:fe:95:bf:72:f0:55:83:45:d4:e0:e3:0e:9b:
                    36:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:53:6C:DF:89:7F:58:1D:CC:0F:B2:24:C1:5B:D3:7A:D8:24:9A:68
            X509v3 Authority Key Identifier:
                keyid:93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:bf:de:41:31:25:6a:6f:38:d5:03:63:ee:2c:67:8a:03:16:
         3c:ba:ca:bf:60:fb:82:17:17:2e:da:35:e2:d5:53:12:04:1b:
         da:dd:cd:17:1d:ba:dc:8b:84:93:e7:23:5c:15:90:b7:15:6e:
         69:8c:ca:ab:6c:76:f1:e2:df:a8:9f:d0:08:a9:55:f4:d1:2a:
         ab:7e:a8:15:3e:f6:ef:8b:7d:10:65:b3:ca:d1:a7:57:02:e7:
         a3:12:bf:6d:5a:87:c1:77:af:24:39:8c:ed:d3:f4:c1:c5:bd:
         6a:a8:f7:f1:46:32:87:68:c6:8b:67:de:f4:cd:1c:0b:50:7c:
         25:bd:3e:b9:55:c2:ed:09:b1:7e:e3:16:c9:4a:9a:5a:f2:ad:
         30:8a:3a:2d:e4:87:81:f7:87:13:f7:87:79:a9:38:0d:07:82:
         0f:76:64:29:87:8f:31:45:ca:ea:79:7d:6a:34:5f:a8:bd:9b:
         2d:19:02:bb:c6:b3:8b:6f:e4:27:77:00:66:b5:26:41:79:12:
         f5:cf:f4:d1:c3:dd:7b:06:6b:aa:74:8e:20:8d:aa:44:3f:72:
         02:47:fd:44:de:04:d1:4e:db:03:9f:df:4e:18:81:e7:f0:ba:
         a0:48:95:13:8e:bb:71:fc:55:9a:3f:8c:01:0b:23:49:73:8c:
         fc:a4:8e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:38:21 2026 by rpki-client