Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
File:                     _knPM_vkJHsroe6aVISnQK07bg4.mft (raw, json)
Hash identifier:          9iAdCG+UXxgcgvqV6+Kozt5wEsvayyFASR6mFZlYEak=
Subject key identifier:   16:CB:B0:2F:FC:05:31:49:70:F1:97:F7:1D:92:B7:70:52:A5:81:6F
Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
Certificate issuer:       /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
Manifest number:          6F
Signing time:             Wed 25 Mar 2026 07:03:37 +0000
Manifest this update:     Wed 25 Mar 2026 07:03:36 +0000
Manifest next update:     Wed 01 Apr 2026 07:03:36 +0000
Files and hashes:         1: _knPM_vkJHsroe6aVISnQK07bg4.crl (hash: KjopxIXNkU4M0VFnyJgVpvn45b77P6tTPfrluiN+0+8=)
                          2: 0E06126A7E4011F084643A20C4F9AE02.roa (hash: BOcoiAspHCwkr5azVOhAvR+BAnY8G++2Bq7+nnR+vDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
                          rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
        Validity
            Not Before: Mar 25 07:03:36 2026 GMT
            Not After : Apr  1 07:03:36 2026 GMT
        Subject: CN=69c388c8-cd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:57:e2:53:e0:93:03:52:0b:16:4b:1a:cd:
                    2b:d4:88:b6:72:5a:a2:53:79:f2:8f:91:23:d9:74:
                    cc:78:52:bc:6a:11:da:2a:48:44:32:bf:b1:55:0a:
                    4d:f9:d5:98:b5:f2:a9:7f:fe:81:16:60:c3:1a:32:
                    ff:12:f9:39:76:92:14:9e:e2:77:87:e3:17:f1:68:
                    c1:74:ce:c8:ab:55:cb:86:f5:75:60:dc:c6:1f:9e:
                    51:07:34:eb:d0:2f:54:cf:8c:31:bb:66:a2:6b:30:
                    a9:c2:f3:8d:12:78:6b:46:51:12:d3:a9:3c:a6:ad:
                    f6:2a:30:52:ce:5f:ce:6b:17:32:a9:1c:93:5d:d9:
                    32:a2:df:f6:44:7d:98:b3:8c:4c:01:38:96:80:2a:
                    02:c3:e1:67:df:43:b4:50:dd:39:7d:17:55:43:04:
                    20:e6:fd:f8:b9:1f:40:5c:9e:8b:89:fc:da:e1:e5:
                    4e:bd:42:71:04:7b:f5:1e:0c:15:85:2e:bb:ec:00:
                    74:11:f9:4d:64:3c:92:9d:78:6f:eb:b6:c7:cc:24:
                    2d:50:ae:d5:84:3b:68:cf:63:f4:0d:4b:49:7c:9f:
                    b2:9d:fb:6a:f4:36:73:67:2b:96:0c:4d:8f:c9:6b:
                    81:e8:53:94:f8:67:1d:8d:01:c7:3c:6e:de:65:e3:
                    90:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CB:B0:2F:FC:05:31:49:70:F1:97:F7:1D:92:B7:70:52:A5:81:6F
            X509v3 Authority Key Identifier:
                keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:12:4c:d4:6e:27:15:02:21:da:1e:54:1d:f1:aa:f1:9d:
         31:f8:50:09:53:ea:4f:11:a6:18:b7:1a:75:bf:79:5d:05:6c:
         7a:5e:d5:bf:fa:4f:18:b8:1c:2c:0a:fd:f8:c2:97:17:06:0d:
         1a:7a:6a:14:b9:d3:20:08:40:f5:2c:98:e9:1d:8d:a2:32:86:
         8d:83:ff:40:e8:8b:8b:e4:4c:a1:f1:51:ea:70:fb:73:a0:16:
         73:be:43:24:bc:60:02:e4:28:f0:91:1e:43:e0:fc:75:19:13:
         ea:d6:3e:e8:1b:9e:cb:90:1b:f9:6e:a1:0c:79:44:09:44:1e:
         3f:e7:e8:66:5d:11:46:66:57:98:f7:7f:9b:85:84:24:06:09:
         ac:fd:90:3a:22:61:d9:b7:0c:dd:87:e8:aa:e5:38:21:e5:6c:
         cb:b6:e0:8c:92:76:fc:a5:f9:6e:17:13:c9:19:a0:24:b4:87:
         84:e9:b1:41:2f:87:3a:c5:7b:d6:61:8b:1f:c2:ac:a6:36:dc:
         2b:04:0c:65:66:c8:1e:1f:b3:4d:a9:b9:04:12:01:31:c4:99:
         06:70:a0:19:c5:09:ca:cd:71:d5:06:6e:2d:30:e4:f6:20:da:
         03:07:26:a1:3e:d3:39:9e:08:42:a7:cb:d1:d2:be:01:27:ee:
         77:91:e2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:14 2026 by rpki-client