Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
File:                     kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json)
Hash identifier:          ht260K/zVY1luTr/BkTaPXpB2usfwq/VLKD6jq0o5wY=
Subject key identifier:   E6:9C:DC:B2:25:C5:9F:81:9E:AD:12:B1:00:28:DA:95:7A:66:DD:43
Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE
Certificate issuer:       /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
Manifest number:          0149
Signing time:             Wed 25 Mar 2026 04:26:23 +0000
Manifest this update:     Wed 25 Mar 2026 04:26:22 +0000
Manifest next update:     Wed 01 Apr 2026 04:26:22 +0000
Files and hashes:         1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: FK0zumaNG9ip9MfBOIPAtAmZylW4mMumjfzhXYKRI70=)
                          2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: czoz5UivPk2DZLmeDI+JHyZhgkVk8064UwjiPvLfMg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl
                          rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
        Validity
            Not Before: Mar 25 04:26:22 2026 GMT
            Not After : Apr  1 04:26:22 2026 GMT
        Subject: CN=69c363ef-f62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3c:0f:29:7f:df:b1:4a:b1:29:83:d5:ad:e2:
                    25:83:6d:fd:98:78:09:14:9d:8c:a1:0c:2d:8c:6b:
                    32:1a:0d:d4:55:0a:b7:7d:85:2e:3c:5a:dd:1f:30:
                    ff:5b:ca:77:a4:f1:14:7b:1d:ba:73:7c:18:e8:43:
                    90:06:8e:10:28:de:80:f8:10:5b:f6:ac:e9:2f:83:
                    94:31:3b:79:88:f4:5e:1a:29:b4:3a:10:34:ac:04:
                    89:80:45:41:df:1f:a5:91:2b:36:5e:88:96:cf:b7:
                    19:d7:1f:0c:d8:92:d5:20:62:8f:90:1a:e0:36:8a:
                    85:cf:6e:68:c0:0e:85:01:8c:2d:d0:06:49:d2:77:
                    8a:d8:ec:9c:7d:32:9e:d8:84:35:ec:8d:32:ac:e2:
                    0b:21:90:83:2c:22:ed:f5:ad:d7:12:00:cd:e8:a5:
                    1f:0a:c9:0b:69:fa:21:43:74:55:82:d6:2b:21:bb:
                    f5:5e:f9:12:02:4e:7a:0d:c6:e1:bf:d5:bd:d3:10:
                    dc:50:6a:76:97:04:91:bb:6a:3b:f7:1d:a6:79:22:
                    24:7a:f4:c5:af:79:b1:4d:7c:35:b5:2f:58:a3:e7:
                    b1:f9:40:64:12:b5:4d:b8:28:87:33:17:04:f9:b1:
                    e7:52:a7:cc:44:66:2b:ee:05:a5:5f:36:da:24:91:
                    80:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9C:DC:B2:25:C5:9F:81:9E:AD:12:B1:00:28:DA:95:7A:66:DD:43
            X509v3 Authority Key Identifier:
                keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:44:75:4f:53:cc:1c:88:35:0f:46:d8:c7:a5:fc:82:e0:51:
         9c:71:76:ee:fe:9c:ad:53:43:e3:cc:0e:90:e2:ef:1e:61:3b:
         31:f7:d3:85:30:4b:3d:32:93:84:eb:eb:e5:6e:fc:cc:03:ad:
         5e:55:a0:66:c6:df:4b:84:4b:d8:44:47:f8:6d:d3:5b:a5:3c:
         9e:32:1e:72:f3:a3:9f:22:59:42:13:6d:e3:7c:ee:b9:fc:73:
         32:96:69:7c:37:10:de:ce:d1:63:16:3d:17:67:de:02:6f:c8:
         3b:be:01:5e:60:40:cb:51:13:1b:ee:f8:bd:e2:cd:c0:e9:ce:
         53:76:ad:1d:8d:80:4c:dc:68:68:a7:ea:7c:16:da:00:2d:76:
         ff:60:e7:6d:04:5b:21:0e:60:7d:89:81:13:70:90:e6:3c:0d:
         f8:c7:d9:18:3a:d5:77:47:89:3e:48:ee:38:5b:e7:b8:b7:50:
         e6:ab:ed:dc:6f:03:e3:fb:03:1e:cc:ad:77:ce:16:f3:ed:85:
         50:78:70:87:70:6e:63:dc:fd:f8:56:0e:70:de:65:4f:41:c4:
         93:76:45:a0:3e:07:bc:07:4d:0a:b3:86:ed:99:99:4b:0e:c9:
         7a:62:27:a0:73:f0:56:b5:c3:f6:5a:b7:88:23:5e:14:aa:f2:
         cc:68:b6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:30 2026 by rpki-client