Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft
File:                     KQN7v5LysPTDMKHN1KdiVs16VCI.mft (raw, json)
Hash identifier:          jbDR/m6gbKNRCxj29j17z47VP62LCM4aYaYSkARSUSI=
Subject key identifier:   32:11:94:0A:06:05:76:67:08:63:1C:AE:BE:DB:28:AC:CC:1C:25:8B
Authority key identifier: 29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22
Certificate issuer:       /CN=A91E9B89/serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft
Manifest number:          0181
Signing time:             Wed 23 Sep 2026 04:27:22 +0000
Manifest this update:     Wed 23 Sep 2026 04:27:22 +0000
Manifest next update:     Wed 30 Sep 2026 04:27:22 +0000
Files and hashes:         1: KQN7v5LysPTDMKHN1KdiVs16VCI.crl (hash: k/BD6NsydRZBI3BYWfw83AuF44vMmgVGCGqW1eUuKKk=)
                          2: 2025BD6C6C3311EF99E0EF34C4F9AE02.roa (hash: 1xxchiebCxLNftly6au7Pkd2xXnWXWVrUcEG++FarVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl
                          rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9B89, serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422
        Validity
            Not Before: Sep 23 04:27:22 2026 GMT
            Not After : Sep 30 04:27:22 2026 GMT
        Subject: CN=6ab3552a-d798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:39:e7:0d:6a:3e:11:92:74:0b:66:19:1f:f2:
                    b7:fe:52:5c:c1:f5:1d:c1:1e:8b:55:e7:6a:04:9a:
                    07:30:a5:4b:6d:b7:85:20:1f:66:79:77:ac:4d:47:
                    2c:d8:09:5f:0f:ad:20:04:b5:b0:d4:01:67:5a:3b:
                    08:5e:25:9a:7d:b7:35:a3:d7:f7:7b:45:7b:6d:aa:
                    1d:16:cc:4b:1a:eb:1e:f7:7c:2e:ac:12:59:f5:c2:
                    ce:5b:3b:02:16:c2:5d:d4:b0:69:7a:f2:9c:cf:66:
                    b1:01:7e:48:52:cd:be:78:f8:54:d6:63:59:50:ab:
                    ef:fe:76:69:a9:20:3d:2c:53:a2:da:f2:69:15:63:
                    74:dc:5c:44:ad:63:2a:7d:d3:a6:7d:be:50:ce:f5:
                    00:3e:73:20:80:50:8b:bf:40:25:8f:fc:90:df:90:
                    80:6e:92:d3:57:8c:9f:ec:cb:62:af:79:1a:d0:60:
                    63:fc:ee:94:9e:e1:e2:14:b6:c7:92:c6:be:c4:21:
                    0b:e4:b5:39:0e:6c:33:10:fd:a6:61:06:c1:47:6b:
                    52:23:2c:05:df:60:ad:2a:6a:80:01:de:6b:76:7c:
                    97:fe:68:d5:b0:31:55:d2:e7:d2:9f:48:eb:91:80:
                    b0:3a:59:db:2c:70:d4:17:25:6c:3a:5f:22:96:4f:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:11:94:0A:06:05:76:67:08:63:1C:AE:BE:DB:28:AC:CC:1C:25:8B
            X509v3 Authority Key Identifier:
                keyid:29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:62:2d:d3:6b:a2:0d:a6:a3:1b:f1:23:fd:1e:8c:4a:cf:99:
         eb:5e:b9:bb:26:5b:25:17:75:e5:37:6f:cf:fe:33:ab:a2:8f:
         c7:2d:89:cf:10:57:cf:3b:d9:72:f9:6d:73:23:af:14:88:9a:
         be:d4:ae:81:11:67:84:b2:e9:80:9b:4b:ce:3a:d4:f3:4c:b1:
         05:5b:7e:88:2c:06:0b:fc:29:6f:4e:0b:f4:fc:41:12:de:ff:
         3d:89:65:30:83:23:3c:07:be:ab:61:6c:3f:ad:c1:52:35:61:
         2d:3b:23:6f:1e:22:44:e8:1c:0d:25:0d:c3:7e:0e:fb:b7:2d:
         86:73:b0:f6:b0:d0:6b:7e:a1:e8:6d:8f:0e:94:1f:24:0e:b7:
         fa:77:72:60:5e:fa:ea:19:65:a0:bf:a4:b2:15:a9:b2:29:95:
         53:a4:c1:df:43:57:ee:78:f8:cd:c4:cb:53:f1:6d:67:c8:3a:
         78:0a:6a:f0:4f:7e:7b:ef:a6:46:d7:6f:ff:3c:98:77:13:d3:
         79:1f:44:b9:3b:13:5e:c4:d9:16:25:8b:a6:c3:d3:9b:8c:59:
         44:2e:5b:40:20:e4:38:d4:d5:21:e1:36:22:41:17:6e:f4:59:
         1a:f3:8a:36:02:9b:84:b9:44:5e:58:80:ed:2d:26:84:66:5d:
         7b:85:e2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:29:24 2026 by rpki-client