Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
File:                     KWYvUTolTw218H21gZ--rkD3vxU.mft (raw, json)
Hash identifier:          UoJ4NM/N1+VyKYGixKitVw50bML8fyUvDS2wyQm0ZkM=
Subject key identifier:   09:60:EC:BC:6D:13:8D:29:6A:55:FF:0F:B2:DA:1A:21:E6:22:12:19
Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
Certificate issuer:       /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Certificate serial:       037C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
Manifest number:          0368
Signing time:             Wed 25 Mar 2026 00:31:34 +0000
Manifest this update:     Wed 25 Mar 2026 00:31:33 +0000
Manifest next update:     Wed 01 Apr 2026 00:31:33 +0000
Files and hashes:         1: KWYvUTolTw218H21gZ--rkD3vxU.crl (hash: 3AKnLUWRAcdErc/mp0wZry2RylCmg/IIgC7dedqYJjU=)
                          2: F09C691AEBB511ECA410BF6DC4F9AE02.roa (hash: Rw8wdhCI/rNZP6FgC9C+qd0EQ9zAMz5LAI5l6VZT91I=)
                          3: EFF97098EBB511ECA410BF6DC4F9AE02.roa (hash: 9gkyYiNnNSTo4I2N7Ylm4fDivPDrnTxE1jPV8VJbGZE=)
                          4: EF6D9D70EBB511ECA410BF6DC4F9AE02.roa (hash: X5xFnTuKzWqPd40Q2TFaDH7BIRtN7Zf8wD6VwT6xhXU=)
                          5: F123461AEBB511ECA410BF6DC4F9AE02.roa (hash: rA7lCUagwlSoXVmBALjvh/zo0E3ghTMaHw2IDn8o0rE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
                          rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892 (0x37c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
        Validity
            Not Before: Mar 25 00:31:33 2026 GMT
            Not After : Apr  1 00:31:33 2026 GMT
        Subject: CN=69c32ce6-90b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:7d:18:c4:2a:85:19:79:cb:a0:79:6c:46:
                    6c:7a:c0:b4:c0:d7:04:e1:bd:a6:84:db:1c:d9:5a:
                    a1:a7:ac:f8:5f:42:d4:68:36:b2:50:47:5c:f5:e4:
                    c4:ba:ac:b6:a5:86:26:58:4b:ab:4d:f5:17:58:f8:
                    5a:1b:44:dc:4d:de:9c:f1:e8:a4:1f:7a:d4:c8:ee:
                    7f:26:b2:aa:aa:49:c6:76:d2:0d:ec:56:82:48:22:
                    d8:f4:bc:0c:08:ad:f1:04:e2:b5:ea:45:9d:c7:df:
                    e1:49:18:f9:8c:26:b5:b5:3e:40:2c:1d:84:2c:7f:
                    1d:18:60:82:4e:c8:06:7a:33:e1:9a:70:87:9d:86:
                    33:35:76:99:c5:e9:4b:98:32:f3:f0:de:4f:a1:c5:
                    17:01:3f:62:93:d8:69:a5:b8:c7:cd:1c:24:fe:5b:
                    cc:ce:27:45:c0:f3:00:e8:01:85:8e:35:69:7f:22:
                    a4:fb:42:a4:df:75:15:4c:ad:0f:74:08:26:db:d5:
                    c4:cf:f5:1b:28:a3:0d:c5:7d:5a:79:90:54:89:d1:
                    c4:9e:c7:a2:eb:79:7d:b4:55:75:13:f6:da:84:87:
                    a6:a8:e4:96:e5:27:31:7d:a3:60:c2:15:78:10:8d:
                    d0:25:3c:05:1f:5c:98:68:5d:6f:99:d1:d5:ec:dc:
                    45:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:60:EC:BC:6D:13:8D:29:6A:55:FF:0F:B2:DA:1A:21:E6:22:12:19
            X509v3 Authority Key Identifier:
                keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:00:8e:8e:51:73:a2:35:23:0e:b7:fa:e8:a8:91:98:ff:7d:
         2b:ae:57:0e:b5:07:39:f4:20:c0:49:08:99:9f:2f:1b:76:f0:
         a0:7e:2b:02:ec:ee:76:1e:4c:3e:03:ad:f3:08:07:d5:f2:c1:
         c9:e2:d7:91:80:34:1d:85:35:61:d8:9f:dd:35:d8:ca:ed:19:
         7e:8c:b9:15:f9:d8:b9:19:eb:1f:5a:cb:13:84:e9:a0:5a:3c:
         85:dc:b9:1b:aa:dd:be:84:ed:b8:a1:8b:e8:41:e1:de:04:78:
         92:6e:37:13:dc:b6:23:35:7d:b3:f2:df:35:4f:90:c0:87:a1:
         49:47:4b:e6:99:65:60:ad:68:6a:24:0b:2e:25:00:51:78:82:
         8d:49:80:05:7f:38:c9:04:a4:6d:b4:07:03:57:4d:9a:33:d6:
         7b:e9:47:2d:ed:c3:72:13:ee:f7:a6:76:42:ad:3e:63:f3:db:
         86:a1:fa:97:28:b5:a0:8d:02:3a:eb:73:1f:c7:64:b8:84:3f:
         7b:43:74:3c:27:05:d5:74:3e:3c:e2:58:a4:da:33:7d:28:45:
         c2:1d:a5:2d:a2:d3:c6:70:c6:b5:be:88:f4:46:16:08:e7:1a:
         0b:37:68:c8:d7:1b:63:ed:f9:3c:87:80:3d:eb:a0:33:82:29:
         25:2a:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:07 2026 by rpki-client