Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft
File:                     kBdT4_LIclCGbxxHOQChAP1Mq1M.mft (raw, json)
Hash identifier:          Bp5gFTfdwBz6RRbdeMAb2rmKCnJ1iAUr4w9MIYEzYkQ=
Subject key identifier:   66:B6:9B:9F:E4:1A:30:24:E4:20:56:ED:33:BB:66:BA:6F:25:83:5A
Authority key identifier: 90:17:53:E3:F2:C8:72:50:86:6F:1C:47:39:00:A1:00:FD:4C:AB:53
Certificate issuer:       /CN=A91E4FA6/serialNumber=901753E3F2C87250866F1C473900A100FD4CAB53
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft
Manifest number:          2F
Signing time:             Mon 05 Oct 2026 09:10:40 +0000
Manifest this update:     Mon 05 Oct 2026 09:10:39 +0000
Manifest next update:     Mon 12 Oct 2026 09:10:39 +0000
Files and hashes:         1: kBdT4_LIclCGbxxHOQChAP1Mq1M.crl (hash: pxYTtjABPYtm+lQpWUyRITNJF/jA1I5Y8jz8HGtBMBA=)
                          2: 93CAB16C7B4211F1AEF4840594A30FBC.roa (hash: tsHb5mr8RbkReF/Lzb1FiewO29ujOLPqtSMY3Pgh1Og=)
                          3: 947763C67B4211F1AEF4840594A30FBC.roa (hash: J3btKuOFaL2iAnmc6q/6qXEqUsLNqUcznVApxNof1zE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.crl
                          rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4FA6, serialNumber=901753E3F2C87250866F1C473900A100FD4CAB53
        Validity
            Not Before: Oct  5 09:10:39 2026 GMT
            Not After : Oct 12 09:10:39 2026 GMT
        Subject: CN=6ac36990-ed4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:2a:93:ca:ef:58:95:50:af:50:96:c1:8a:
                    99:b8:a2:57:25:39:ed:4f:56:e0:77:3f:26:4d:e7:
                    f0:7b:63:9e:7b:8c:96:32:61:2b:29:8b:53:c4:25:
                    ad:2e:d0:47:8c:73:84:56:83:03:e8:c2:e7:2c:f5:
                    06:0f:1e:b4:80:b0:99:9d:60:80:90:2c:30:05:ad:
                    e4:4d:df:2f:fe:19:77:2e:fb:65:45:a6:ba:03:56:
                    05:e7:7a:af:24:58:e5:bc:d8:f4:50:0b:24:8f:54:
                    cc:48:a9:73:e7:f0:aa:c6:5f:64:c6:00:25:19:96:
                    a9:c8:0f:41:1f:1c:ba:29:c1:d4:48:10:21:8f:ca:
                    2e:c7:3f:4e:6b:6b:6f:cb:de:af:b0:18:97:6b:61:
                    4c:db:4e:89:8a:7b:5a:80:2b:60:91:55:37:aa:a7:
                    fd:e9:63:8d:27:ff:3d:36:54:db:7d:f4:c5:6f:99:
                    55:fa:32:97:16:46:15:87:bd:c1:a2:f9:33:d9:9e:
                    4b:52:bf:c2:13:c5:e9:24:f8:7d:98:be:9c:6c:10:
                    82:5e:d8:e4:20:74:8f:c1:09:15:d3:27:b7:e5:65:
                    cc:f4:27:1a:9f:ea:d7:7f:38:9c:4e:4a:bc:ef:01:
                    d6:2c:3a:62:58:5c:12:39:4b:52:bb:bf:82:c1:5d:
                    94:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B6:9B:9F:E4:1A:30:24:E4:20:56:ED:33:BB:66:BA:6F:25:83:5A
            X509v3 Authority Key Identifier:
                keyid:90:17:53:E3:F2:C8:72:50:86:6F:1C:47:39:00:A1:00:FD:4C:AB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBdT4_LIclCGbxxHOQChAP1Mq1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FA6/2B0B951A7B4211F1B55B65AB93A30FBC/kBdT4_LIclCGbxxHOQChAP1Mq1M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:88:d0:5e:cd:3e:aa:b1:ec:82:b4:91:92:c7:25:33:e0:66:
         f1:5f:ef:7b:a8:60:3f:74:93:7d:80:1e:88:35:a5:b0:00:42:
         40:6f:df:ba:c9:cb:7a:36:6a:9e:84:50:e8:4c:77:45:28:05:
         8f:13:1b:c3:79:c8:bd:a0:90:8d:3d:25:1c:9d:c8:7b:d4:da:
         03:bb:74:1c:c5:65:7c:d1:88:6b:be:cd:7a:77:29:d8:41:af:
         21:f2:6a:3c:17:a9:11:8a:9e:19:a2:51:28:c5:b7:5e:41:a5:
         52:69:35:c4:c6:0a:0e:ab:71:dd:dd:c3:f7:79:d1:7d:c3:39:
         40:0c:10:bc:ad:4e:5e:3f:fb:9a:70:0b:b6:be:37:3d:03:13:
         a6:c6:bb:6b:9b:76:72:b5:5d:97:f2:4a:ab:73:c3:55:19:aa:
         e5:ef:73:81:05:27:ac:f8:f9:83:21:a8:47:36:07:e8:83:04:
         5e:32:06:b4:bd:b0:c8:e7:f6:69:5f:c3:15:a0:ee:cd:dd:ec:
         8e:dd:21:82:2b:2e:4e:73:6b:47:a6:23:51:75:38:22:d8:2e:
         b2:61:c0:dd:85:74:bd:1e:30:3a:0f:31:93:51:87:8a:dc:e9:
         7b:3c:76:e8:c8:88:1c:8f:21:29:24:48:b0:b6:65:8b:e3:8c:
         f3:38:81:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:52:38 2026 by rpki-client