Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
File:                     1KTwtgAN4CJIxGV6-d0msCPF9nk.mft (raw, json)
Hash identifier:          55fIsEi2N8Du+Vl/AoAMPyV+R5w3aBJpM86uZkt30Lk=
Subject key identifier:   D0:7E:33:A9:9E:4B:19:63:14:16:8D:5E:78:0E:9D:7F:EB:F4:06:60
Authority key identifier: D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79
Certificate issuer:       /CN=A9136C1F/serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
Manifest number:          60
Signing time:             Wed 25 Mar 2026 07:15:33 +0000
Manifest this update:     Wed 25 Mar 2026 07:15:33 +0000
Manifest next update:     Wed 01 Apr 2026 07:15:33 +0000
Files and hashes:         1: 1KTwtgAN4CJIxGV6-d0msCPF9nk.crl (hash: o5H0qhBwCGQsLBm0S206OrxoJjn9KNUJyVXEF46h71I=)
                          2: 515DD9629A8811F08FD4A810C4F9AE02.roa (hash: Pc2Gm0El6C7yNRFdvtcnQRtp9swqk0Qn5OUm8Fjkbqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl
                          rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136C1F, serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679
        Validity
            Not Before: Mar 25 07:15:33 2026 GMT
            Not After : Apr  1 07:15:33 2026 GMT
        Subject: CN=69c38b95-f4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:46:27:19:29:37:dd:d2:05:93:ea:36:24:
                    1e:55:d4:d2:3c:73:fb:a4:34:dc:74:49:61:e6:cb:
                    e7:b1:b2:7a:98:79:3d:50:6d:ad:67:d7:12:60:22:
                    42:8e:70:ec:d6:da:ce:a3:d4:bc:f1:05:31:83:80:
                    73:6b:db:16:09:26:4f:3e:79:b7:3f:3a:ea:a7:da:
                    7d:19:2d:c2:1b:43:9b:5f:cc:92:cc:25:76:75:bf:
                    34:ba:31:39:41:ef:9a:c6:76:24:90:01:64:1b:e7:
                    07:94:92:7a:ff:c0:63:2c:41:6e:c0:91:fc:00:c4:
                    ea:a8:87:2c:df:85:de:dd:12:e7:5e:46:7c:10:37:
                    33:09:d4:17:c7:cf:f9:3b:12:bf:52:a2:39:c6:bc:
                    74:86:58:d8:2e:96:e9:d3:ae:a6:7c:20:e5:2a:5c:
                    55:f6:70:f2:ae:67:fc:20:66:16:ca:31:c6:2e:35:
                    f6:70:1c:1e:1b:6b:63:b0:3f:31:8c:49:06:ce:42:
                    1e:fd:24:89:23:39:cc:dd:9e:4a:ea:de:c4:22:40:
                    f7:24:13:3e:62:e8:3f:ba:65:06:9e:f8:93:d6:d0:
                    2c:cc:d4:e7:ef:b7:cd:bb:9f:9f:06:f5:8f:1f:70:
                    c2:07:84:39:55:3f:fc:bc:5c:d4:fc:84:7a:76:62:
                    df:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7E:33:A9:9E:4B:19:63:14:16:8D:5E:78:0E:9D:7F:EB:F4:06:60
            X509v3 Authority Key Identifier:
                keyid:D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:dd:0e:fe:c5:1e:30:25:6f:3a:35:f1:9e:52:c9:18:84:c0:
         cc:ce:5d:54:95:9a:66:b8:c9:2f:de:c9:d9:5e:d5:2a:0d:c5:
         3d:22:32:a3:b9:78:b7:48:36:d3:87:71:c6:78:d8:d2:86:4c:
         3c:7b:0e:c9:8f:2c:51:6e:1e:57:9a:1a:35:b1:d8:37:51:ca:
         ad:eb:e8:e1:87:13:26:7e:18:56:d6:4a:fa:11:0d:f7:01:1f:
         48:1e:de:38:5d:56:f1:f0:a5:49:e3:70:5b:e9:c0:af:68:96:
         9b:38:b2:1f:7c:5e:7e:34:87:07:6b:54:69:d1:2e:fa:86:77:
         df:a2:03:f7:39:99:9f:89:97:01:52:3d:73:df:7f:bd:8c:97:
         14:e4:a6:bd:8a:bd:82:bc:c4:2b:92:50:07:59:6b:ac:6d:16:
         15:65:c0:ce:1c:06:af:7b:8b:70:f4:4c:ec:61:9d:ee:aa:0b:
         7a:5c:8d:37:54:3f:ae:4f:cb:47:fe:71:4b:bf:1e:85:28:ee:
         53:b9:03:c2:27:5e:81:1c:6a:63:1a:32:41:58:9c:07:a1:3f:
         9b:d1:81:f8:51:70:4c:d8:f8:b6:cd:0e:8b:d9:c3:b6:a0:3d:
         3c:e1:6f:dd:bc:42:94:29:6e:5d:c6:f9:82:d8:4a:d1:e5:9e:
         01:50:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:03:28 2026 by rpki-client