Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
File:                     KtPYi16OCwUUGjvJL4XkJzoFYqE.mft (raw, json)
Hash identifier:          yzJmXw/kLg/MhQi7+8PwpezdZeHndjLOQeun21QN+ik=
Subject key identifier:   BC:3B:10:19:7D:84:11:1E:73:9A:AA:89:B0:53:3E:30:48:DF:D9:BE
Authority key identifier: 2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1
Certificate issuer:       /CN=A9132F27/serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1
Certificate serial:       01B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
Manifest number:          01B0
Signing time:             Wed 13 May 2026 04:06:13 +0000
Manifest this update:     Wed 13 May 2026 04:06:12 +0000
Manifest next update:     Wed 20 May 2026 04:06:12 +0000
Files and hashes:         1: KtPYi16OCwUUGjvJL4XkJzoFYqE.crl (hash: givmFuNZqVM1U/9Yf8xbunOSZwCcKRAIElYcjN2tZV8=)
                          2: 1D74CCE2BB6D11EEB670B00CC4F9AE02.roa (hash: KGc0TSSoFoKqnsUVoh0np4Cm7NUT/EBHE/n1p8DVqTw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl
                          rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132F27, serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1
        Validity
            Not Before: May 13 04:06:12 2026 GMT
            Not After : May 20 04:06:12 2026 GMT
        Subject: CN=6a03f8b5-6cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:21:53:57:45:bb:a9:52:3d:cf:0f:21:0c:d7:
                    db:ca:36:75:97:83:3c:f2:65:29:c4:cc:d8:12:f8:
                    ab:bd:79:a2:ee:64:46:7d:dc:ae:8c:1d:f9:53:75:
                    e8:4f:a0:c8:54:75:4b:92:52:22:0a:10:de:6d:30:
                    41:c6:dd:b3:d2:73:4c:4c:6b:fa:f8:44:b7:cb:e7:
                    e1:62:b8:22:36:90:cf:f7:39:25:4d:3a:cb:5d:64:
                    3a:76:bb:4e:5c:05:a1:c2:c9:02:73:6b:46:c1:7c:
                    25:62:3b:9d:3f:ba:4e:c2:bf:a2:8e:ce:61:c4:95:
                    16:8d:16:a2:f7:67:55:49:78:cd:fc:13:6a:b3:89:
                    2c:2d:c8:7c:42:32:f2:95:dc:b3:dc:e4:08:30:d5:
                    07:dc:6e:cf:14:28:05:5e:e4:49:eb:0e:f3:8b:c1:
                    96:25:b5:3e:df:83:b1:f1:1d:a2:45:45:35:da:6c:
                    4c:56:50:04:68:7a:19:d7:83:3b:9a:8b:75:df:a3:
                    84:66:63:20:6b:e6:ce:5f:a6:3c:89:58:8f:2f:28:
                    7b:97:1b:1a:ca:1a:fe:b2:45:56:39:13:f1:85:8e:
                    23:0c:8d:58:51:57:ca:67:3a:86:9e:56:20:85:3b:
                    c7:03:6b:f3:24:df:2d:17:d2:b2:89:e6:35:f8:20:
                    18:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3B:10:19:7D:84:11:1E:73:9A:AA:89:B0:53:3E:30:48:DF:D9:BE
            X509v3 Authority Key Identifier:
                keyid:2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a9:7e:ca:03:65:d0:cc:35:8d:99:93:9a:1d:bd:5e:f7:8c:
         34:92:66:c7:3a:e2:dc:bf:51:a5:79:f9:74:6b:d3:c5:92:7f:
         00:e5:2a:ac:67:af:33:1b:76:f1:7d:f8:8b:53:7e:28:95:93:
         81:a3:67:c1:6f:03:a6:ba:d2:06:b9:bf:cf:5a:76:06:e5:15:
         fc:75:93:40:6a:90:aa:d4:6f:d5:c4:bf:9b:11:9e:a3:ad:ea:
         1d:5f:07:10:a2:a4:f9:2a:36:ac:fb:f2:dc:d3:26:33:e4:a6:
         bf:9e:19:fc:ef:86:95:a2:8b:55:fa:f8:61:97:e8:bf:f6:60:
         44:2c:e4:f2:98:e3:ac:de:32:25:1a:89:cc:fc:a7:d9:ef:3f:
         b2:54:2c:7e:7e:1a:82:16:ed:f9:1a:6e:37:32:2f:d5:28:99:
         1e:79:ae:0b:53:3c:57:5f:2f:df:19:b9:1c:77:cc:45:55:e5:
         f0:dc:f3:8f:2a:36:44:b8:9d:4a:62:da:4f:16:01:cc:1f:ef:
         1e:66:bc:1e:71:70:08:b1:02:71:d3:35:87:fb:13:08:c2:c2:
         dd:9d:43:b4:15:34:20:a3:70:c0:4a:5b:c8:79:d8:e3:f6:d7:
         2b:d4:f9:a7:1f:c0:fc:67:14:2f:15:52:6a:2b:91:0e:5f:82:
         6c:75:ba:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:53:31 2026 by rpki-client