Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
File:                     kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json)
Hash identifier:          nvSKhbDWgdzeZF1L1U72pgaIUJFSQvhotqQia9AGV5s=
Subject key identifier:   21:44:0A:0F:A3:BA:09:C9:79:A7:4E:5E:B6:88:CF:D4:38:C1:AA:A4
Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
Certificate issuer:       /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Certificate serial:       CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
Manifest number:          C7
Signing time:             Wed 25 Mar 2026 06:06:04 +0000
Manifest this update:     Wed 25 Mar 2026 06:06:04 +0000
Manifest next update:     Wed 01 Apr 2026 06:06:04 +0000
Files and hashes:         1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: d53eNPQPmNAMU2ySA/bFg5DNsrXr8bPpwD6uQsQFHmQ=)
                          2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: IJ2tS5zh75Ix9kpknsYxaCFNOcdydMZlDx/emMQgKZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
                          rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
        Validity
            Not Before: Mar 25 06:06:04 2026 GMT
            Not After : Apr  1 06:06:04 2026 GMT
        Subject: CN=69c37b4c-ac92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:93:01:51:be:22:fc:ca:88:e2:82:42:f1:
                    9f:87:7b:c2:31:6d:0f:df:14:16:68:36:11:08:38:
                    ff:b5:96:15:e5:b5:95:f5:bc:c0:c6:1b:0c:d9:b1:
                    de:b2:84:83:a3:35:74:12:1a:a1:db:83:cf:f7:b3:
                    e6:77:19:96:fa:31:55:60:e9:6a:23:5c:8e:0c:ed:
                    6a:8d:5a:12:d4:cc:16:1c:1e:c5:ed:48:c0:b3:09:
                    a4:8e:af:2b:bc:43:b0:b3:a3:4f:ba:04:af:1e:ab:
                    06:03:92:fb:59:58:99:90:5a:32:cd:4a:60:46:ac:
                    0d:66:1f:ac:35:be:bc:09:8c:da:c8:37:6a:8e:e2:
                    b9:85:36:a7:fe:a3:f8:5d:a9:46:79:4a:85:12:5b:
                    11:6e:c5:d7:5f:fc:82:9c:58:ed:c8:10:5b:d6:f6:
                    58:a7:1b:2e:37:f1:55:a0:be:0c:83:cb:18:26:30:
                    ee:c3:58:2d:73:22:c9:de:80:dc:c2:ca:38:a1:ef:
                    15:eb:e2:1d:51:36:31:9b:74:80:ce:04:3b:bf:8a:
                    52:2f:e6:e5:3e:1f:08:8f:f5:98:8c:ae:7c:80:81:
                    87:4e:c0:3c:1e:f0:32:2f:f9:c3:fb:55:fa:5a:5c:
                    e8:b8:36:c9:d4:ff:f8:91:f3:17:72:67:ac:8f:9f:
                    a5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:44:0A:0F:A3:BA:09:C9:79:A7:4E:5E:B6:88:CF:D4:38:C1:AA:A4
            X509v3 Authority Key Identifier:
                keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d5:a9:b8:cb:15:56:0b:92:be:79:48:9c:cc:94:9b:ce:41:
         cd:da:ad:15:e9:df:74:ee:32:66:6e:ec:88:91:43:84:56:b9:
         8a:41:42:76:13:d2:fb:2e:d8:90:79:26:80:21:0d:39:75:0c:
         3f:5a:79:19:fd:22:a9:26:9e:71:87:40:ae:09:34:70:8d:29:
         61:a7:47:b1:8d:2c:32:0c:6a:b6:84:b8:ab:2c:58:23:8f:3c:
         fd:43:71:5f:1e:a6:59:8b:e1:04:e8:a8:ae:9d:97:13:57:e5:
         01:c5:39:2b:97:73:ab:c2:3f:f3:b6:0c:ab:a3:9d:81:8f:59:
         09:34:55:e1:1f:e4:96:ac:b9:dd:3d:54:e7:fb:d4:ac:1e:e7:
         67:e7:48:b3:d2:7c:a9:ac:74:a4:39:fa:a9:3c:82:37:2a:5f:
         e6:be:fa:80:24:bf:0b:8c:4c:6f:22:6a:f8:58:6e:85:9c:65:
         1e:24:84:a8:f6:06:0b:50:e7:5e:32:d8:5c:94:61:39:42:55:
         85:ec:7d:5d:1c:12:34:9b:47:90:d7:fb:6f:5f:42:ea:a6:51:
         d4:05:19:5f:b3:c7:c7:4b:12:39:fb:c4:0b:5f:84:6d:5c:6c:
         16:4f:07:58:37:d3:2e:1e:68:8c:42:a1:4e:a5:f2:97:be:32:
         75:e0:d1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:28:24 2026 by rpki-client