Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
File:                     KM0J5lDCaex9K8n-99VmwQEtIEw.mft (raw, json)
Hash identifier:          tK+t5hDXn/PLmcZekfksgwk98Ah1HkDf/Ma/IrgfhuI=
Subject key identifier:   B4:42:BC:BA:40:A4:4B:A7:A6:4E:E2:A4:2E:F9:ED:41:09:7E:56:4D
Authority key identifier: 28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C
Certificate issuer:       /CN=A916AC73/serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
Manifest number:          AF
Signing time:             Wed 25 Mar 2026 06:24:43 +0000
Manifest this update:     Wed 25 Mar 2026 06:24:42 +0000
Manifest next update:     Wed 01 Apr 2026 06:24:42 +0000
Files and hashes:         1: KM0J5lDCaex9K8n-99VmwQEtIEw.crl (hash: BEeVle5tQQeG9TTWaflnfV8ZQFp5OoCY/7c3j0YlFC4=)
                          2: FAA72960259911F0953E0023C4F9AE02.roa (hash: O09UdOIvOj1qcl3/WTrZg9iUeXJv//L0a5ehI9CYUR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl
                          rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC73, serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
        Validity
            Not Before: Mar 25 06:24:42 2026 GMT
            Not After : Apr  1 06:24:42 2026 GMT
        Subject: CN=69c37fab-42a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f1:01:02:c8:b3:a1:77:23:92:b0:44:09:09:
                    e9:55:14:e0:41:3c:fd:ca:ba:15:13:5c:c4:41:ed:
                    a0:b9:fe:3b:99:27:b9:23:24:93:3e:24:2d:c0:44:
                    95:2f:6d:86:c1:d2:57:d3:73:d8:20:83:60:5d:13:
                    a7:07:8d:de:5c:eb:8d:6b:81:4f:64:92:21:b4:42:
                    61:b5:7b:3c:f9:a1:76:a7:3e:99:96:99:30:87:ec:
                    c4:0b:de:ae:50:17:43:1d:8f:8b:83:06:95:6b:a0:
                    de:f0:67:67:6c:d4:cc:59:8a:8e:0a:59:11:a6:9a:
                    db:85:2a:3b:9d:e7:8b:5f:db:31:9f:56:b5:7b:af:
                    1f:67:52:b5:4b:31:c3:3a:a0:64:ca:75:55:ef:78:
                    ac:18:92:00:05:dd:08:96:9f:b1:7c:0e:96:b4:c6:
                    af:1b:9d:f8:b2:0d:b5:c9:0a:ec:1f:5a:a2:50:45:
                    d9:64:d7:5b:3d:d8:11:30:66:b2:e7:51:78:2e:3f:
                    41:91:18:2c:bb:d8:67:fe:a2:57:ed:eb:19:86:24:
                    e1:18:f9:5d:18:c8:91:90:fb:8d:da:b1:40:39:ca:
                    39:94:d0:11:80:3d:f7:f5:38:0b:06:37:58:58:89:
                    6a:6e:50:4c:ab:48:96:42:15:c1:67:7b:1f:2d:90:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:42:BC:BA:40:A4:4B:A7:A6:4E:E2:A4:2E:F9:ED:41:09:7E:56:4D
            X509v3 Authority Key Identifier:
                keyid:28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5e:f4:48:7d:a2:e5:84:2e:11:de:5b:79:59:eb:b4:70:83:
         be:e8:fc:5d:7c:d1:9b:cf:0e:da:f7:de:55:6f:ba:87:d3:e0:
         90:0f:bf:16:ce:ef:e1:a7:eb:3a:29:41:40:69:08:88:a8:e1:
         b3:ca:29:06:17:6a:2c:b8:14:b1:c1:2c:ba:24:1c:42:fd:4d:
         83:ea:c9:81:75:eb:f4:d3:ae:be:ce:40:31:0d:9b:63:41:94:
         2a:cf:a5:34:26:8c:45:56:24:c0:64:90:d5:e0:28:38:9d:2e:
         85:7d:25:68:01:c0:32:e3:a8:18:f7:e8:15:44:2e:57:c2:87:
         e8:7f:fe:aa:22:3b:02:f7:ae:04:d5:fc:fb:7f:ff:2d:81:d7:
         5b:26:7a:bf:4a:99:35:91:dd:3b:b1:92:d3:01:eb:16:49:87:
         b1:4e:c9:dd:b5:39:6c:b0:5f:31:82:7f:d3:60:1e:02:5f:73:
         4f:7e:db:74:99:b7:29:bc:f2:15:2b:87:94:e5:16:32:07:cf:
         23:21:8c:cf:27:8f:e8:e2:35:23:00:93:f7:26:2f:db:59:f9:
         a9:e9:73:7e:42:d2:f1:5e:9d:71:83:c9:df:87:14:2c:d7:60:
         4b:41:fb:58:e9:a1:ec:e2:20:c2:d3:f5:d6:c5:6a:ba:ed:07:
         ae:8b:8a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:35 2026 by rpki-client