Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
File:                     kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft (raw, json)
Hash identifier:          Pv+9iQiTDLvStXdTTidK9qt5+VvHZhozCRo5Z2J0LhM=
Subject key identifier:   F3:CE:4E:23:B9:42:E8:1A:01:72:2A:EC:3D:E6:49:ED:0E:09:09:57
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Certificate issuer:       /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial:       027E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
Manifest number:          026D
Signing time:             Wed 13 May 2026 02:13:00 +0000
Manifest this update:     Wed 13 May 2026 02:12:59 +0000
Manifest next update:     Wed 20 May 2026 02:12:59 +0000
Files and hashes:         1: kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl (hash: OIW9KXdnc3RWZaa4U015IVVucgJFTrxVtbHXo1qZH34=)
                          2: F2CE31B608CA11F09E81487CC4F9AE02.roa (hash: 03+5kekzQmObuWmAw5F11iQvy5EJ47wIOoFNPa68NzM=)
                          3: D40271B608CA11F080AEDB7BC4F9AE02.roa (hash: tHSDJxi9sVsTRoz1reKONBiKsyiwl7G8bqwueLtrVHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
                          rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:12:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91403E9, serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
        Validity
            Not Before: May 13 02:12:59 2026 GMT
            Not After : May 20 02:12:59 2026 GMT
        Subject: CN=6a03de2b-5bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1d:b0:36:0c:e7:27:b6:7c:3b:10:09:67:fe:
                    4f:d0:93:59:46:0b:c4:a1:98:0d:87:0a:34:b9:40:
                    54:b8:d1:8f:30:0c:03:ff:ca:25:99:50:60:5c:ec:
                    c0:42:64:62:8b:54:19:e4:f0:7b:2e:e2:ca:b1:68:
                    bf:ed:04:c6:eb:1c:16:69:f4:34:8c:6d:18:58:5c:
                    c6:69:ef:e9:90:76:a8:34:a3:b5:65:d7:03:95:ca:
                    8c:0b:40:e3:0b:84:4e:42:21:95:0b:04:65:96:70:
                    e6:b4:03:1b:1c:d3:ed:96:b4:c3:8b:ce:9a:e6:d2:
                    f5:32:3c:b7:12:13:99:28:c5:2a:0f:ee:17:57:10:
                    7c:c6:67:7a:b4:c7:dd:8c:8c:65:b7:2d:74:ae:2f:
                    cf:6f:b1:b5:4e:74:f1:61:ad:dc:5c:0e:72:2c:d9:
                    ba:16:ec:e4:b6:3a:5e:6c:02:ad:1f:3e:06:ec:48:
                    f4:c9:62:60:78:a4:06:40:cb:45:8a:7e:b5:3e:36:
                    4f:1b:da:f7:45:14:d9:b9:c4:1e:4e:af:9d:3c:e4:
                    21:39:5e:eb:b5:b7:a9:48:22:0e:ba:1a:73:59:88:
                    a2:11:74:de:31:74:94:cf:00:3e:9e:c0:96:ee:7b:
                    51:20:80:c2:c3:56:df:fb:64:04:dd:ba:b0:e7:42:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CE:4E:23:B9:42:E8:1A:01:72:2A:EC:3D:E6:49:ED:0E:09:09:57
            X509v3 Authority Key Identifier:
                keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:80:6f:ac:7a:36:e2:8a:84:92:03:39:a1:cb:ca:8f:0f:d9:
         4a:39:fd:1e:64:dc:5d:dc:96:4e:75:aa:8e:b4:e7:4d:cc:87:
         61:ab:7f:ab:bf:05:3b:03:be:a1:4e:4a:05:c2:3b:d8:17:2f:
         11:d0:80:87:88:d6:5a:33:9b:8a:7a:79:92:ad:13:d9:d8:f6:
         aa:6b:7c:3a:d4:a3:d1:8c:4c:49:7b:1f:34:3b:42:e1:cb:c6:
         15:45:17:ad:09:d5:be:25:31:1c:b1:81:3a:12:f6:cd:d0:27:
         4d:ba:ca:84:0f:e9:05:ce:af:61:6b:99:63:26:8d:96:4a:20:
         c8:db:c2:5c:b2:6d:44:3c:ac:56:c2:76:c9:73:9a:9b:97:f9:
         96:09:b3:4e:ca:ff:52:df:0e:27:3d:b6:c0:40:ad:1d:5a:18:
         0e:38:19:f1:20:3b:36:ad:29:f1:9c:25:13:9a:50:00:50:04:
         14:7e:18:f7:ec:c7:b0:2b:83:9d:63:1d:c3:ab:60:09:c5:de:
         61:0e:8d:3d:6b:f1:8a:c6:b1:3b:15:62:c8:dd:0c:9b:ff:6a:
         dc:84:03:c4:43:a9:91:21:21:96:ee:cf:86:86:db:a2:09:24:
         89:6a:42:0b:a3:9a:3b:3b:4d:82:ae:31:a9:f8:8a:b2:1a:82:
         43:90:b2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:06:20 2026 by rpki-client