Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
File:                     kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json)
Hash identifier:          XfelhIY0c4fHZPYXmGhFj2AjqeUk8Wh6lqwMQF8YhNI=
Subject key identifier:   13:47:B8:47:DF:EB:74:F9:60:E1:07:D5:A9:51:9E:C6:B4:8A:67:CF
Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79
Certificate issuer:       /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
Certificate serial:       06EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
Manifest number:          06E2
Signing time:             Tue 24 Mar 2026 21:52:21 +0000
Manifest this update:     Tue 24 Mar 2026 21:52:21 +0000
Manifest next update:     Tue 31 Mar 2026 21:52:21 +0000
Files and hashes:         1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: nPjcrZSwYvTumvmSXVsWJj/E+fLuKfw4AU840cVM7nw=)
                          2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: ZLw8huOg2nveXXA6ySB0lncxnJt9V0PAEh/Tv0xMDkY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl
                          rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:52:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1770 (0x6ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
        Validity
            Not Before: Mar 24 21:52:21 2026 GMT
            Not After : Mar 31 21:52:21 2026 GMT
        Subject: CN=69c30795-6cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:06:30:7b:44:91:1d:4c:78:d0:b3:e7:51:
                    67:74:ab:ec:11:f0:04:8b:33:00:eb:67:c4:07:43:
                    10:a8:af:99:89:15:28:e5:75:ab:02:ed:f4:a7:48:
                    a9:a4:4d:dd:0a:68:3f:5f:73:c6:0d:6f:53:01:d7:
                    ed:75:6f:a3:19:0a:2e:a6:28:5d:8f:f2:f4:09:1f:
                    2d:2e:aa:3a:87:07:78:25:99:2c:e5:d9:e7:46:29:
                    59:15:fe:85:35:0f:36:97:94:f8:96:dd:b1:98:67:
                    6c:d3:7b:2e:72:e1:c6:21:df:bf:17:25:52:14:b4:
                    19:db:49:e9:eb:d4:e8:5c:0d:47:e9:02:ee:86:d4:
                    20:45:08:12:7b:40:e8:da:e3:77:b0:51:dd:5f:05:
                    76:d7:58:8d:58:85:e3:5a:42:91:90:f5:e2:c1:b6:
                    31:50:12:e3:f8:38:61:d1:f8:5e:79:5c:f1:cb:ff:
                    20:b9:b2:d6:07:a1:f7:c4:4d:17:2e:42:41:87:e7:
                    9a:5f:e5:27:4f:e5:6d:91:fd:cf:36:09:16:f8:71:
                    cb:14:0b:db:46:53:09:ae:80:b2:be:9e:00:5d:04:
                    30:72:a3:25:65:30:60:90:c9:50:99:4f:c7:f3:df:
                    fa:b7:34:e4:91:b6:7b:87:f2:bc:4c:96:c1:14:fc:
                    20:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:47:B8:47:DF:EB:74:F9:60:E1:07:D5:A9:51:9E:C6:B4:8A:67:CF
            X509v3 Authority Key Identifier:
                keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:60:38:79:aa:e5:21:a3:fd:83:c3:5e:85:7a:fb:22:98:71:
         e1:e0:bb:ca:00:2b:45:95:94:a6:22:2a:14:98:10:26:68:71:
         3e:2b:ff:00:f3:8e:33:a4:02:0a:6a:2e:27:98:49:64:f3:57:
         5c:da:71:99:62:f1:c5:c7:32:14:73:05:be:95:39:64:5b:6e:
         ef:78:6b:4a:5e:8c:3a:6a:23:f8:bc:43:a7:2b:36:bf:f3:4f:
         d9:32:e1:d3:5c:bd:f9:b0:68:5a:b2:6e:d0:4d:62:42:b6:bd:
         5e:de:5c:7b:86:db:37:0a:cb:66:7c:be:b3:5f:a8:fa:ff:f0:
         90:56:0e:9d:a1:04:ef:e2:b2:fd:56:c0:5d:87:e4:ee:91:b0:
         ce:58:61:2f:4a:28:68:4b:04:3a:7e:83:9f:5c:b1:3b:a2:7f:
         7b:18:f3:24:95:a3:8b:25:88:dc:af:03:10:49:5b:f2:7b:6a:
         4f:29:77:92:56:7c:dd:5f:5a:2d:06:67:af:d3:ad:80:dd:00:
         7e:ec:32:c5:8f:e9:8d:d7:58:c7:35:72:2c:28:06:c8:e7:95:
         09:6a:a6:46:31:6c:0d:c1:04:84:06:80:30:ee:6a:a7:4f:b0:
         fb:1d:d7:32:c4:59:bc:58:ef:ae:60:ed:17:cb:f9:98:ca:09:
         d9:06:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:20 2026 by rpki-client