Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
File:                     kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json)
Hash identifier:          8GVlNvhaijtJGVl9rg8QjVhlzIRO9fGr6k4+B5L4M7U=
Subject key identifier:   02:55:52:87:C7:08:C2:E7:4E:43:F3:7A:41:3A:ED:40:71:D6:E1:5F
Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE
Certificate issuer:       /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
Manifest number:          0161
Signing time:             Mon 11 May 2026 04:58:39 +0000
Manifest this update:     Mon 11 May 2026 04:58:38 +0000
Manifest next update:     Mon 18 May 2026 04:58:38 +0000
Files and hashes:         1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: nFEAp5iKGCoD+QaQSDohMS30LF2pZcJ3KW0l94deCmY=)
                          2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: czoz5UivPk2DZLmeDI+JHyZhgkVk8064UwjiPvLfMg4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl
                          rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
        Validity
            Not Before: May 11 04:58:38 2026 GMT
            Not After : May 18 04:58:38 2026 GMT
        Subject: CN=6a0161ff-1a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:7f:44:ed:83:ff:15:19:2b:a5:61:44:57:
                    ef:29:68:9f:b7:9f:f6:54:af:65:47:d4:df:49:61:
                    26:c8:11:7b:b7:08:9a:ae:d7:34:f4:0f:5d:31:a6:
                    75:34:db:43:1d:b8:43:ef:ce:f1:3b:6e:a0:db:2c:
                    d1:a9:e7:9e:1b:78:97:6a:75:79:3b:16:24:11:bb:
                    fa:94:e8:d7:a5:5b:3f:9c:3a:e9:83:97:08:22:7a:
                    92:12:8c:89:b6:2d:a5:22:4d:1c:11:0b:ac:b4:b4:
                    b2:34:a3:a8:33:03:01:19:35:fd:17:57:ef:7d:6a:
                    8f:8e:22:fa:e1:c2:63:62:f1:8d:65:6b:1d:64:0e:
                    9b:2c:a2:97:92:86:78:77:4b:a6:d0:d7:8c:b2:dd:
                    4b:ec:63:4b:d2:d7:31:69:71:d1:17:49:91:e7:e6:
                    a8:48:d8:4e:48:58:7a:a8:27:b5:ec:06:58:60:f1:
                    c9:42:c0:82:a9:b5:89:98:1d:14:58:95:6c:f5:5f:
                    60:4b:e0:ae:04:2b:b1:6c:c0:87:91:8d:42:8a:c8:
                    3d:ed:4f:df:8b:ad:76:15:3f:3b:6b:e6:ef:a6:72:
                    6d:0a:6f:a3:e0:39:ee:11:aa:cc:94:15:0d:d1:a6:
                    30:20:08:31:c9:46:28:a4:44:82:0d:f0:2f:80:94:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:55:52:87:C7:08:C2:E7:4E:43:F3:7A:41:3A:ED:40:71:D6:E1:5F
            X509v3 Authority Key Identifier:
                keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f1:46:33:24:cb:fb:42:ff:32:ac:f3:53:ea:97:21:02:1e:
         8f:ff:65:29:75:d6:fd:e9:75:a0:1e:f7:ab:5e:e5:84:38:f1:
         09:8f:2b:9a:9f:f9:b6:73:18:7e:ce:de:48:e7:e7:e8:4f:bb:
         cf:26:59:74:fb:a3:9f:5d:89:33:2e:c2:73:f2:b5:45:cd:16:
         3d:56:64:10:1e:fd:33:a7:31:7f:44:53:d7:fe:68:22:60:0c:
         d1:b5:27:e0:27:83:7c:33:fb:7b:9e:dd:4c:2e:d0:65:d1:1e:
         b2:1d:2e:b2:1f:cb:58:b3:9d:eb:c7:73:ef:90:42:65:38:f5:
         43:c1:58:5e:9f:52:b1:bf:4b:39:f7:86:f6:40:5c:89:a3:1e:
         8c:d5:ea:a2:9e:71:de:86:f4:42:96:3b:0a:23:0b:4f:20:a0:
         4d:04:b0:6e:bd:b6:46:ba:c4:63:aa:a0:be:ca:30:91:7a:81:
         86:ca:c7:41:4d:8b:cc:7f:28:48:56:c5:c1:f7:b4:be:79:3c:
         15:ce:52:50:ec:eb:aa:26:ac:1c:e9:09:2e:29:32:83:b3:cb:
         02:9f:7f:ee:0c:cb:a8:04:11:70:b5:24:5b:7f:02:f5:ef:11:
         33:24:2d:52:90:07:73:9f:f4:29:c8:52:7d:f4:0e:92:03:46:
         39:df:8b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:51:40 2026 by rpki-client