Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
File:                     kBpDycSAhnF-284lXAKi8DU9qvo.mft (raw, json)
Hash identifier:          PfHnRpYJxHmwsUoBNvUd96L9we7X+ZAlheFzmPEnMU4=
Subject key identifier:   D6:22:BC:75:B9:DB:AC:50:2A:11:37:B7:37:8B:63:93:B2:70:CD:B8
Authority key identifier: 90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA
Certificate issuer:       /CN=A9165DB1/serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA
Certificate serial:       0325
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
Manifest number:          0325
Signing time:             Wed 13 May 2026 01:14:07 +0000
Manifest this update:     Wed 13 May 2026 01:14:06 +0000
Manifest next update:     Wed 20 May 2026 01:14:06 +0000
Files and hashes:         1: kBpDycSAhnF-284lXAKi8DU9qvo.crl (hash: mMRSUM5JJZvqerswlpVV9KyATTamQkhGVMrPSi9ukzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl
                          rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805 (0x325)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165DB1, serialNumber=901A43C9C48086717EDBCE255C02A2F0353DAAFA
        Validity
            Not Before: May 13 01:14:06 2026 GMT
            Not After : May 20 01:14:06 2026 GMT
        Subject: CN=6a03d05e-bbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:ff:2a:4a:e8:c6:d6:e8:51:52:63:81:ef:
                    4c:5a:9b:dc:c2:71:2c:c4:41:fe:15:65:2d:90:55:
                    db:32:47:66:f0:33:db:4a:5a:02:6e:13:59:ce:d4:
                    2e:f4:0d:0d:c2:4f:35:aa:fb:40:9e:f2:e4:f0:11:
                    d8:8f:ee:a0:d8:1b:c1:06:ee:19:e8:9d:fa:72:41:
                    f7:9a:94:c5:48:c0:36:fa:f1:41:6d:a9:9d:0a:32:
                    2f:14:e7:66:99:46:94:94:98:59:79:05:46:07:3b:
                    37:6b:0e:4f:e9:8f:de:29:45:ce:36:4d:01:73:97:
                    24:68:8e:52:aa:75:8e:9c:5b:ef:90:63:57:ee:1f:
                    88:9b:fa:b2:48:12:c9:12:0a:0e:0a:ed:7d:6c:0a:
                    0b:71:22:f3:73:64:02:91:60:b1:9f:48:95:a6:06:
                    9c:1b:6a:c7:8b:73:bb:4c:cc:5b:6a:95:c8:4d:70:
                    ef:91:18:56:5f:4c:2e:6b:d3:be:65:40:5c:01:e5:
                    ae:66:76:65:5b:61:52:40:8b:72:87:63:3e:4f:5a:
                    37:76:01:ab:39:c4:91:e5:22:08:cb:9c:ae:57:3e:
                    ee:eb:ce:e3:63:9f:73:62:46:dc:c2:1e:05:cd:c5:
                    c4:74:f3:f2:c2:13:a0:bf:ad:d7:87:13:0d:35:a3:
                    4b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:22:BC:75:B9:DB:AC:50:2A:11:37:B7:37:8B:63:93:B2:70:CD:B8
            X509v3 Authority Key Identifier:
                keyid:90:1A:43:C9:C4:80:86:71:7E:DB:CE:25:5C:02:A2:F0:35:3D:AA:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBpDycSAhnF-284lXAKi8DU9qvo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/50C1BF920E1711ED8E3BD915C4F9AE02/kBpDycSAhnF-284lXAKi8DU9qvo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d5:23:00:66:25:8e:64:68:5a:5d:55:59:4f:cc:5f:23:69:
         1b:3b:b0:54:1f:9b:93:e0:e2:d6:1d:ed:a0:ad:e1:a6:f8:91:
         f5:a3:61:6e:75:72:94:e6:96:f8:8e:8e:90:09:b5:23:f7:20:
         0f:06:93:73:9e:85:e2:38:c0:6e:42:78:70:0f:7f:df:04:49:
         88:d1:b8:c7:02:ae:66:52:65:bb:0c:30:3d:18:73:c3:95:5b:
         6c:e6:33:b7:48:74:a6:f9:80:4d:ce:36:87:ee:bb:8c:70:4e:
         74:5b:05:4d:a7:12:b7:df:52:5a:91:a4:ab:b4:3b:2b:c4:40:
         47:0f:9c:c1:ed:e0:c3:d4:4e:1b:cd:3c:d4:29:fd:d5:7e:b8:
         31:75:74:9c:fd:f0:9e:d6:0c:11:9a:54:bb:01:a3:05:9d:5d:
         1f:2c:ce:c8:92:87:5b:ad:fc:9c:6b:08:f8:c9:01:2b:d3:24:
         9e:c1:5a:d8:0f:72:fa:30:68:27:ad:86:d8:4e:42:ad:0e:0b:
         6e:bb:e3:a9:7e:a8:36:6b:a0:2b:b2:22:ce:69:f5:3f:17:99:
         06:09:d6:5d:1f:ea:d3:1e:4f:44:b1:fa:07:4c:40:be:fa:33:
         c3:9e:df:c0:05:64:20:ac:05:a2:f4:c8:60:bc:e0:c4:eb:fd:
         34:1d:cd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:19:00 2026 by rpki-client