Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
File:                     kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json)
Hash identifier:          H0iO8Dgj9n+nwW4JLlVdsRMQrcDo5Z6Gk0ZyACao6qQ=
Subject key identifier:   B1:79:1B:0C:51:97:EC:CD:BE:A1:69:5B:94:A1:9C:AA:98:1E:86:40
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Certificate issuer:       /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial:       0685
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
Manifest number:          0679
Signing time:             Tue 24 Mar 2026 22:15:26 +0000
Manifest this update:     Tue 24 Mar 2026 22:15:25 +0000
Manifest next update:     Tue 31 Mar 2026 22:15:25 +0000
Files and hashes:         1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: SSGvCKhPDzCH/Q1RAbJZNg6/r07eMrS9p8arTDTkq/o=)
                          2: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: VEOYpLopU2c9FdbzxqgEzKYlCo37XOpklpOWcyDo3bI=)
                          3: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: rUB8K/gQFaS9QOQ5n+o0moQe0g7Bdol9yJ5xYGhKZ7A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
                          rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
        Validity
            Not Before: Mar 24 22:15:25 2026 GMT
            Not After : Mar 31 22:15:25 2026 GMT
        Subject: CN=69c30cfd-c8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:12:f1:47:20:d1:d1:da:92:51:40:b6:e2:
                    53:a2:66:bb:18:99:01:30:9f:2c:ef:45:c4:b9:c2:
                    22:d2:1c:8b:c2:5f:f0:94:98:68:55:cf:b9:da:90:
                    5b:58:72:2b:cc:e1:6d:20:2a:f8:3f:d7:d2:2b:ce:
                    89:29:e4:f6:54:11:39:61:65:13:a6:84:9b:02:5c:
                    56:23:cf:4f:0c:36:e8:f5:90:98:55:8d:ea:41:43:
                    ec:15:31:97:5f:0a:35:98:84:a8:5f:15:47:37:bc:
                    52:5a:a8:88:01:ac:92:84:ae:65:71:9e:ca:8a:b1:
                    91:23:bf:f7:c9:d6:bc:cf:34:c1:46:89:96:4a:69:
                    cd:28:81:27:f9:85:ff:d1:af:95:fc:cc:ff:9d:69:
                    54:88:a3:c2:19:38:97:b1:f8:6e:72:55:5c:a0:cd:
                    42:34:78:fd:7c:b7:b7:e1:39:23:4f:12:55:5e:f6:
                    8d:c0:5b:de:68:20:65:2b:71:8b:01:8c:f2:57:fb:
                    a0:c8:59:86:cd:04:e2:5f:07:51:10:59:d4:49:b4:
                    1b:4c:f0:0c:01:88:b7:71:8f:d1:14:c3:90:6e:16:
                    9d:d3:2e:ec:27:17:5d:39:b0:20:f1:35:5d:aa:46:
                    3d:07:0a:67:29:75:f1:4f:d8:f6:2f:7c:ac:f2:65:
                    98:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:79:1B:0C:51:97:EC:CD:BE:A1:69:5B:94:A1:9C:AA:98:1E:86:40
            X509v3 Authority Key Identifier:
                keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:80:cc:12:78:e4:33:e8:ae:8f:d6:f4:42:57:95:c5:c0:
         67:44:00:da:8f:64:00:b6:56:bb:94:e1:88:fc:b9:cc:b2:fc:
         26:45:2f:a4:da:67:a3:c0:83:3c:ad:76:11:9f:14:3e:36:e3:
         51:62:2b:7d:d2:87:58:5e:9a:6b:43:93:ca:16:6c:c0:09:9d:
         66:a2:7d:23:ed:8e:0c:86:bf:4a:27:c9:2b:bf:ab:ae:00:3a:
         18:a2:4f:7f:52:09:37:18:f1:89:4f:76:f2:3c:ed:dc:40:88:
         57:d7:e0:75:20:2b:50:fa:f2:c6:95:9e:37:44:af:bd:37:30:
         fc:7d:a1:55:fb:33:ba:15:2f:6d:fd:24:25:44:82:85:17:be:
         f0:6c:12:e9:94:4f:c1:ea:6e:eb:25:02:69:2a:e6:3f:b7:a2:
         f5:03:25:96:62:50:b6:05:2a:1a:27:73:e9:e3:dc:d1:d2:1d:
         84:e6:d5:b7:5f:e2:85:34:85:f7:f2:63:0c:0b:a1:48:ae:e6:
         99:ce:3e:fd:60:71:bd:54:bd:25:ee:01:f6:46:4b:5b:46:89:
         d8:f2:b9:e4:7d:88:71:41:e4:cf:aa:ca:74:3f:19:ec:5e:ba:
         f0:7d:2b:33:8c:1e:38:f2:58:b0:dd:53:bf:a1:87:fc:0a:25:
         02:a1:de:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:52 2026 by rpki-client