Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
File:                     keKklwM5j7IArA6fpHZpFddL-eU.mft (raw, json)
Hash identifier:          P7KwETav8qdfzRvF24QAFfQOP9LRR/VA1uMWpQuPxZs=
Subject key identifier:   B7:DF:BF:17:E0:7F:28:7E:36:16:26:CE:02:0E:01:1B:93:57:79:B7
Authority key identifier: 91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5
Certificate issuer:       /CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5
Certificate serial:       0269
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
Manifest number:          0262
Signing time:             Sat 03 Oct 2026 02:48:14 +0000
Manifest this update:     Sat 03 Oct 2026 02:48:14 +0000
Manifest next update:     Sat 10 Oct 2026 02:48:14 +0000
Files and hashes:         1: keKklwM5j7IArA6fpHZpFddL-eU.crl (hash: AseJwnkl0R3ri1Lc5ZN5gAkOr+xL72tsIKc5znrsv3Y=)
                          2: 345AD30E1E1311EE846A3261C4F9AE02.roa (hash: rGtM/ZIyGfCd8XkroEzfUOelWmAwZh3Hbyh+PxmqDAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl
                          rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD6E4, serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5
        Validity
            Not Before: Oct  3 02:48:14 2026 GMT
            Not After : Oct 10 02:48:14 2026 GMT
        Subject: CN=6ac06cee-eba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:83:f2:43:7c:be:4b:f5:2f:d3:d5:80:5f:88:
                    a9:45:bf:36:5c:7b:c1:18:93:c6:03:91:91:c7:99:
                    12:3f:e9:bb:72:e9:29:e0:c5:71:19:3c:ab:f6:0e:
                    61:d8:e5:3b:f9:70:67:0e:e9:d7:50:33:01:b6:01:
                    c3:af:b2:67:63:af:5d:ba:86:36:53:ed:3b:59:be:
                    55:4e:f0:ba:89:56:2b:4f:c8:91:5a:4a:4b:7a:6b:
                    6b:81:ee:1d:16:79:9c:34:db:08:15:c1:1f:52:78:
                    5d:3d:c6:18:c6:1d:5f:25:9c:83:70:2f:b6:5e:3a:
                    63:9f:49:cc:6e:03:9b:04:8d:58:65:75:3e:b6:28:
                    29:96:3e:c5:97:09:3a:d9:cd:60:71:5f:71:8f:59:
                    2e:39:fc:cb:e1:9f:c5:73:01:9c:8d:e7:9e:3b:d6:
                    5d:13:1f:c2:35:1c:b0:9d:a6:14:fc:ec:8f:df:42:
                    1a:18:80:64:3d:0d:72:d1:b1:06:2d:18:eb:ed:d7:
                    9c:53:08:5b:b0:12:63:39:96:62:58:31:ff:df:19:
                    64:7b:79:bd:5a:a1:4f:82:ea:c3:28:05:32:6c:ce:
                    00:4d:2b:bd:98:ac:c6:59:17:68:27:5b:cf:d0:ec:
                    10:b1:89:fc:41:ff:be:1d:f2:cc:31:7d:b3:95:60:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DF:BF:17:E0:7F:28:7E:36:16:26:CE:02:0E:01:1B:93:57:79:B7
            X509v3 Authority Key Identifier:
                keyid:91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7d:45:3f:d3:28:9f:6f:ba:7b:67:fc:f3:c5:87:c7:f8:3f:
         cf:44:ea:4b:72:e7:25:d4:93:8c:9d:21:4a:52:0d:ce:01:42:
         1c:d4:50:81:18:a8:f5:2c:2a:af:40:d9:3d:31:a1:e8:e2:1d:
         2e:e8:88:11:a3:23:bf:dc:81:35:54:ce:5e:42:4f:af:7e:dd:
         5a:b5:f9:61:9e:7a:56:65:37:c7:06:c7:31:54:19:93:68:3d:
         b2:90:68:ea:84:60:ee:e2:35:c1:0a:c6:76:0a:e8:03:8f:34:
         18:a6:d7:94:42:57:82:5d:0a:0e:38:b0:67:52:f5:35:cc:0f:
         63:1a:16:b8:45:da:f0:5c:51:f2:6c:8e:8b:8c:12:c9:40:a5:
         73:8f:5d:12:16:55:ea:2c:0b:37:c2:fa:5f:31:ad:a9:ae:45:
         a1:ba:8c:bd:6b:b7:ec:fe:a6:f8:b8:78:8a:20:95:c0:73:5e:
         4f:62:e5:50:eb:8f:67:12:f3:62:ba:ac:0a:0d:18:b7:18:22:
         f6:ab:1a:08:47:90:d7:3a:52:48:6f:7f:21:7a:80:a0:32:97:
         0d:5e:c3:fe:34:75:6d:60:65:50:38:fe:2a:44:91:33:21:aa:
         fb:dd:87:f9:4f:97:4a:17:8b:5a:89:1c:25:b4:7a:13:71:9c:
         75:3d:31:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:35:29 2026 by rpki-client