Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
File:                     KcmzN9Z7DxREgXmLTVsNc9eIrys.mft (raw, json)
Hash identifier:          LjCxvdIjiJEufYJDrn8C7Jb7ZcHedGteKZKdUiJw7tU=
Subject key identifier:   21:65:D2:D5:95:54:E4:3D:43:54:9C:A4:16:24:14:53:69:97:6C:E3
Authority key identifier: 29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B
Certificate issuer:       /CN=A91608B2/serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
Manifest number:          94
Signing time:             Wed 25 Mar 2026 06:41:12 +0000
Manifest this update:     Wed 25 Mar 2026 06:41:12 +0000
Manifest next update:     Wed 01 Apr 2026 06:41:12 +0000
Files and hashes:         1: KcmzN9Z7DxREgXmLTVsNc9eIrys.crl (hash: zfea6roO1s5mkmMuj2Be7a/t6DI2KovlGjC2Gbiwpqc=)
                          2: 13B4125A4A5311F08B06EF0FC4F9AE02.roa (hash: YZdUm7+WLurwEjDF7nwXv0d6iTCyzNott8Mq+jpg6ms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl
                          rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91608B2, serialNumber=29C9B337D67B0F144481798B4D5B0D73D788AF2B
        Validity
            Not Before: Mar 25 06:41:12 2026 GMT
            Not After : Apr  1 06:41:12 2026 GMT
        Subject: CN=69c38388-04f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:f7:26:85:79:2b:03:53:39:cc:39:89:5e:
                    99:86:40:b2:be:af:a4:31:05:a5:5d:5c:18:d0:45:
                    ee:cc:71:24:c7:05:0d:a8:dd:46:1b:bd:67:9c:96:
                    a7:50:b6:b3:59:ed:29:c5:0b:fe:94:27:db:e7:41:
                    d4:e5:00:ce:8c:77:6d:c0:e8:56:a6:41:10:1e:59:
                    26:3d:ed:45:dc:d2:20:a8:cb:8d:c6:5c:dd:6b:9a:
                    73:1a:db:7a:69:1a:6d:ed:7d:ef:d5:23:af:ef:e3:
                    14:2c:74:63:26:b6:59:f6:2b:92:b1:05:32:62:66:
                    0a:c8:3a:31:f1:57:c3:97:f6:f2:b5:9e:16:1d:e6:
                    da:95:e5:c6:22:33:45:ca:56:c4:0a:3e:f5:07:5d:
                    73:d4:b1:4c:a4:fa:14:1c:ab:6b:ea:b5:48:07:6c:
                    e5:c5:94:47:c4:8f:75:33:9b:89:e5:9a:24:06:12:
                    9c:c5:45:5b:6f:7c:91:2a:bd:77:33:b9:e2:2d:36:
                    7b:a8:37:fb:b0:96:0f:57:52:ad:1c:05:93:84:6f:
                    9d:83:db:f7:8b:b1:ae:0b:34:16:a0:0a:66:ac:0a:
                    e0:a9:3c:01:41:83:0e:b5:1b:fd:ae:e4:58:8a:b4:
                    af:98:89:05:03:41:de:80:ec:40:78:f6:d0:19:80:
                    18:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:65:D2:D5:95:54:E4:3D:43:54:9C:A4:16:24:14:53:69:97:6C:E3
            X509v3 Authority Key Identifier:
                keyid:29:C9:B3:37:D6:7B:0F:14:44:81:79:8B:4D:5B:0D:73:D7:88:AF:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KcmzN9Z7DxREgXmLTVsNc9eIrys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91608B2/C95A49AE4A5211F0989D700FC4F9AE02/KcmzN9Z7DxREgXmLTVsNc9eIrys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f1:8a:53:10:39:51:af:de:7c:f5:7d:34:3c:e0:a5:22:98:
         c0:d5:9a:57:50:4b:0d:8e:84:0c:d9:67:b2:86:24:14:5d:ad:
         d2:cc:9e:cb:40:67:5e:1d:5b:5c:74:ba:47:bf:f1:ec:04:aa:
         14:3c:93:cb:7e:23:8d:c8:fd:e1:a6:13:aa:6d:27:75:d0:66:
         a2:37:08:89:0a:6a:65:40:49:07:81:26:ac:14:66:9e:49:b5:
         d8:35:59:65:f6:a0:4e:d2:e6:0f:82:06:b9:60:0e:bf:5f:81:
         8f:b4:3b:1f:81:6b:51:05:1c:a7:f9:56:14:b9:f8:ac:b0:47:
         a0:ed:44:67:68:91:57:2e:eb:13:01:a9:c9:9a:21:5a:8d:af:
         d6:d4:f9:ef:4b:dd:ff:f4:6c:50:14:8d:aa:87:fd:20:06:ab:
         ce:c9:8a:88:71:9b:ad:86:b9:24:3b:aa:24:29:b9:11:87:8d:
         ce:25:40:03:54:54:d2:ce:5a:04:c4:f5:0c:53:ca:86:2b:f4:
         5d:87:5b:bb:d1:58:9f:9d:95:07:b4:b1:28:9a:93:4a:92:59:
         10:0b:6c:4c:f5:c2:bb:45:20:93:d4:10:c9:05:be:18:2c:f4:
         86:66:6d:76:6a:70:a1:63:d8:f7:b0:c0:2b:d2:54:20:fe:8e:
         a7:0a:d9:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA4QjIxMTAvBgNVBAUTKDI5QzlCMzM3RDY3QjBGMTQ0NDgxNzk4QjRENUIwRDcz
RDc4OEFGMkIwHhcNMjYwMzI1MDY0MTEyWhcNMjYwNDAxMDY0MTEyWjAYMRYwFAYD
VQQDEw02OWMzODM4OC0wNGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx0T3JoV5KwNTOcw5iV6ZhkCyvq+kMQWlXVwY0EXuzHEkxwUNqN1GG71nnJan
ULazWe0pxQv+lCfb50HU5QDOjHdtwOhWpkEQHlkmPe1F3NIgqMuNxlzda5pzGtt6
aRpt7X3v1SOv7+MULHRjJrZZ9iuSsQUyYmYKyDox8VfDl/bytZ4WHebaleXGIjNF
ylbECj71B11z1LFMpPoUHKtr6rVIB2zlxZRHxI91M5uJ5ZokBhKcxUVbb3yRKr13
M7niLTZ7qDf7sJYPV1KtHAWThG+dg9v3i7GuCzQWoApmrArgqTwBQYMOtRv9ruRY
irSvmIkFA0HegOxAePbQGYAYBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFl0tWV
VOQ9Q1ScpBYkFFNpl2zjMB8GA1UdIwQYMBaAFCnJszfWew8URIF5i01bDXPXiK8r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDhCMi9DOTVBNDlBRTRB
NTIxMUYwOTg5RDcwMEZDNEY5QUUwMi9LY216TjlaN0R4UkVnWG1MVFZzTmM5ZUly
eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tjbXpOOVo3RHhSRWdYbUxUVnNOYzllSXJ5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDhCMi9DOTVBNDlBRTRBNTIxMUYwOTg5RDcwMEZDNEY5QUUwMi9LY216TjlaN0R4
UkVnWG1MVFZzTmM5ZUlyeXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC/GKUxA5Ua/efPV9NDzgpSKYwNWaV1BLDY6EDNlnsoYkFF2t0syey0BnXh1b
XHS6R7/x7ASqFDyTy34jjcj94aYTqm0nddBmojcIiQpqZUBJB4EmrBRmnkm12DVZ
ZfagTtLmD4IGuWAOv1+Bj7Q7H4FrUQUcp/lWFLn4rLBHoO1EZ2iRVy7rEwGpyZoh
Wo2v1tT570vd//RsUBSNqof9IAarzsmKiHGbrYa5JDuqJCm5EYeNziVAA1RU0s5a
BMT1DFPKhiv0XYdbu9FYn52VB7SxKJqTSpJZEAtsTPXCu0Ugk9QQyQW+GCz0hmZt
dmpwoWPY97DAK9JUIP6OpwrZ+g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:38 2026 by rpki-client