Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
File:                     KN1yVzxbraKIuDKzmB_0yYsvjFE.mft (raw, json)
Hash identifier:          SnSLo+uIE/VxFWgmC7EZGWMcMstlsGqT0MCedHKkYss=
Subject key identifier:   65:00:20:FA:A9:DD:82:36:6E:6B:15:85:25:EC:C2:AC:AB:B3:9E:81
Authority key identifier: 28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51
Certificate issuer:       /CN=A9180174/serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
Certificate serial:       0595
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
Manifest number:          058C
Signing time:             Tue 24 Mar 2026 22:56:55 +0000
Manifest this update:     Tue 24 Mar 2026 22:56:55 +0000
Manifest next update:     Tue 31 Mar 2026 22:56:55 +0000
Files and hashes:         1: KN1yVzxbraKIuDKzmB_0yYsvjFE.crl (hash: KuTlA/dpHygqCU0ygPyMvrQGBh5nBjZ7e6PKgoUDqAo=)
                          2: F6750B60168D11EC89C9CB5DC4F9AE02.roa (hash: a2MlG0wEMN1OaH7j49XfTWV8ol9vPnU4AAth6CS9+gs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl
                          rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429 (0x595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180174, serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
        Validity
            Not Before: Mar 24 22:56:55 2026 GMT
            Not After : Mar 31 22:56:55 2026 GMT
        Subject: CN=69c316b7-f087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:a9:6a:d3:b9:fc:e2:d8:6f:80:57:4c:bf:
                    ca:72:66:0b:58:ea:65:06:4f:a5:18:b8:c5:c9:fc:
                    5f:da:ef:b6:6b:91:b6:c4:ef:68:9b:4c:54:e0:73:
                    79:65:33:0f:d8:bb:65:16:d5:be:46:93:25:2e:46:
                    91:28:d8:a1:30:11:e1:76:99:02:e5:e8:af:b1:1f:
                    64:d5:dc:3e:24:75:5e:09:89:b0:55:bc:0e:00:9e:
                    47:cd:b7:46:49:25:b8:1c:29:75:93:f6:8f:3c:f9:
                    fe:41:93:2d:d9:08:c3:eb:c6:52:4a:2c:f8:fe:99:
                    67:e9:c8:51:ef:de:66:60:0b:4b:15:a3:96:72:a6:
                    6b:15:6b:54:5b:9b:5e:64:bc:ea:27:f4:bc:68:7d:
                    73:2e:fe:43:90:12:f7:f4:00:72:51:5c:01:9d:09:
                    d9:91:35:01:12:08:a0:ae:1e:1e:0f:bb:a5:a4:84:
                    69:42:cd:37:75:27:e6:f2:75:83:f5:b7:03:1b:0f:
                    18:eb:c9:7f:6a:4d:c0:e6:3b:a7:0b:42:1a:fd:90:
                    78:10:b4:33:6f:f7:d8:b8:5b:43:07:e3:7d:91:b9:
                    8c:90:e1:17:4e:9b:ad:9d:3e:64:6b:17:30:bc:ce:
                    22:07:46:a3:d9:b5:76:33:df:b4:03:5d:af:6a:9d:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:00:20:FA:A9:DD:82:36:6E:6B:15:85:25:EC:C2:AC:AB:B3:9E:81
            X509v3 Authority Key Identifier:
                keyid:28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5e:11:ec:64:39:c6:e0:48:11:73:8a:7a:87:30:42:55:7e:
         b5:6b:68:9e:e1:85:d4:34:e4:23:72:36:f8:29:28:9d:be:8a:
         fd:5c:f6:dc:5a:c8:99:c8:8f:e3:06:bb:5e:82:c4:93:08:0f:
         d0:e3:c1:24:80:bb:a6:ed:36:d6:ee:94:27:d7:34:1b:fc:52:
         fc:68:3b:8f:a0:7a:e8:b8:36:38:6f:71:17:0e:a4:d7:89:3a:
         b4:bf:e6:a8:c3:e7:63:2f:9b:78:cf:6c:22:51:f2:90:09:c4:
         67:dc:7a:76:58:03:3b:19:5c:b3:1b:0f:da:16:22:07:44:df:
         ee:b0:6e:ac:56:37:db:27:6a:bc:d1:b4:e7:57:8f:f6:a3:18:
         ea:e6:a4:3c:cb:00:4a:dc:e6:88:11:c2:2f:23:c8:67:c0:d5:
         5a:b5:a2:78:2c:69:43:b4:92:a7:ee:b4:a8:33:f6:1b:d0:b4:
         10:66:ff:bd:34:b9:7c:8b:19:b7:0c:7b:2c:39:03:da:a6:a3:
         89:ba:9c:71:65:c9:ab:60:f5:01:cf:29:0b:55:ae:da:02:2e:
         9c:9e:4f:81:7b:5b:57:33:b0:e1:42:3f:bb:61:50:4e:49:26:
         5a:3e:15:7f:e5:b2:2f:a3:17:2e:21:d5:73:80:1c:35:d6:c2:
         be:20:0b:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxNzQxMTAvBgNVBAUTKDI4REQ3MjU3M0M1QkFEQTI4OEI4MzJCMzk4MUZGNEM5
OEIyRjhDNTEwHhcNMjYwMzI0MjI1NjU1WhcNMjYwMzMxMjI1NjU1WjAYMRYwFAYD
VQQDEw02OWMzMTZiNy1mMDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt/GpatO5/OLYb4BXTL/KcmYLWOplBk+lGLjFyfxf2u+2a5G2xO9om0xU4HN5
ZTMP2LtlFtW+RpMlLkaRKNihMBHhdpkC5eivsR9k1dw+JHVeCYmwVbwOAJ5HzbdG
SSW4HCl1k/aPPPn+QZMt2QjD68ZSSiz4/pln6chR795mYAtLFaOWcqZrFWtUW5te
ZLzqJ/S8aH1zLv5DkBL39AByUVwBnQnZkTUBEgigrh4eD7ulpIRpQs03dSfm8nWD
9bcDGw8Y68l/ak3A5junC0Ia/ZB4ELQzb/fYuFtDB+N9kbmMkOEXTputnT5kaxcw
vM4iB0aj2bV2M9+0A12vap2E4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGUAIPqp
3YI2bmsVhSXswqyrs56BMB8GA1UdIwQYMBaAFCjdclc8W62iiLgys5gf9MmLL4xR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE3NC83OUQ2NjYyQTE2
ODkxMUVDODE2MjU4MENDNEY5QUUwMi9LTjF5Vnp4YnJhS0l1REt6bUJfMHlZc3Zq
RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tOMXlWenhicmFLSXVES3ptQl8weVlzdmpGRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDE3NC83OUQ2NjYyQTE2ODkxMUVDODE2MjU4MENDNEY5QUUwMi9LTjF5Vnp4YnJh
S0l1REt6bUJfMHlZc3ZqRkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXF4R7GQ5xuBIEXOKeocwQlV+tWtonuGF1DTkI3I2+Ckonb6K/Vz23FrImciP
4wa7XoLEkwgP0OPBJIC7pu021u6UJ9c0G/xS/Gg7j6B66Lg2OG9xFw6k14k6tL/m
qMPnYy+beM9sIlHykAnEZ9x6dlgDOxlcsxsP2hYiB0Tf7rBurFY32ydqvNG051eP
9qMY6uakPMsAStzmiBHCLyPIZ8DVWrWieCxpQ7SSp+60qDP2G9C0EGb/vTS5fIsZ
twx7LDkD2qajibqccWXJq2D1Ac8pC1Wu2gIunJ5PgXtbVzOw4UI/u2FQTkkmWj4V
f+WyL6MXLiHVc4AcNdbCviALnQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:27 2026 by rpki-client