Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
File:                     kFj-3Oxfh289_hYZQxnBRcnAzLU.mft (raw, json)
Hash identifier:          PtqEvefayDjiWjZvvCCLGc9DEjBwMqh3aAUMRYX3WUY=
Subject key identifier:   3B:44:92:78:37:07:59:9B:C1:4D:DC:35:E5:BE:84:75:BA:BC:4C:D2
Authority key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5
Certificate issuer:       /CN=A9185B0F/serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
Certificate serial:       06FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
Manifest number:          06F3
Signing time:             Tue 24 Mar 2026 21:45:59 +0000
Manifest this update:     Tue 24 Mar 2026 21:45:59 +0000
Manifest next update:     Tue 31 Mar 2026 21:45:59 +0000
Files and hashes:         1: kFj-3Oxfh289_hYZQxnBRcnAzLU.crl (hash: //7d+xzXvT2D2Utg2r2pp4pJQyK2XoGGfXLTTOnYJfE=)
                          2: 25A7FE7E855211EB8DEDD812C4F9AE02.roa (hash: JFLwuBXWDX0J8f5lX14aiOUiyE2v7U9ODxE/5aeQfZg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl
                          rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787 (0x6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B0F, serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5
        Validity
            Not Before: Mar 24 21:45:59 2026 GMT
            Not After : Mar 31 21:45:59 2026 GMT
        Subject: CN=69c30617-88a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:64:fb:a7:1e:cc:71:d1:54:eb:68:57:1b:
                    2f:76:2f:da:b8:f8:c3:64:1f:6c:7d:34:6e:26:9d:
                    11:e4:17:2e:9d:1c:1d:d4:ed:b2:bf:40:b1:5e:57:
                    1f:0d:e3:ae:85:d7:98:f2:64:ad:9e:0c:e0:31:ca:
                    38:ec:4f:15:ef:41:7a:aa:f9:a7:96:ec:21:31:a7:
                    31:6e:f7:7f:57:f9:71:72:97:5c:34:ab:85:33:90:
                    1a:9d:d7:ae:ce:b4:4c:55:25:21:bf:09:56:39:49:
                    63:6b:4e:7b:9f:d6:36:bf:0f:e6:f0:7d:0f:30:db:
                    eb:b2:3e:7f:1c:c7:8c:b8:22:b3:7e:3d:4f:59:19:
                    da:10:a8:e4:ab:f9:c8:2b:ba:f3:2f:a1:b5:49:9b:
                    21:8d:30:26:02:c0:31:35:70:2e:03:53:a5:79:93:
                    d0:45:1b:7c:5f:18:8b:e6:49:6f:26:d2:a8:5e:98:
                    ba:cd:0f:e4:a8:b6:7d:b4:bf:18:1e:97:6f:a6:0d:
                    9a:f2:c6:b6:f9:05:ab:b7:eb:86:70:87:79:d7:4f:
                    8a:b3:86:90:f8:82:24:d3:77:19:7e:07:72:00:1a:
                    49:a1:56:23:ae:9b:a4:d4:ce:8e:7e:bc:84:83:dc:
                    84:f5:9a:38:84:40:0b:74:cb:e3:6d:cf:a4:5b:02:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:44:92:78:37:07:59:9B:C1:4D:DC:35:E5:BE:84:75:BA:BC:4C:D2
            X509v3 Authority Key Identifier:
                keyid:90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:3c:82:c3:a3:7a:6d:6b:24:06:66:0d:d7:47:40:9f:cb:5c:
         26:bd:a4:74:06:7f:a9:40:d7:84:28:3e:06:13:4c:27:64:84:
         f6:0b:e5:a1:6b:ca:76:74:6d:77:0a:c0:0b:0b:d4:21:fe:0c:
         97:55:de:a7:68:e6:3f:c4:e3:d2:c8:83:3b:1a:be:5d:49:6d:
         8b:3d:d9:7b:42:15:d0:e1:07:74:07:5d:d9:60:dd:74:b0:5f:
         1b:9e:73:7e:c0:56:3a:14:ef:01:c1:6a:cc:bb:e9:1d:20:5e:
         b0:66:50:8c:b5:9f:19:72:17:00:e4:b1:5b:ff:d7:c7:56:0b:
         42:57:ed:45:5c:92:53:df:a8:fb:2a:7b:83:d6:86:95:16:0e:
         de:36:06:1a:18:e8:c5:e2:00:6c:42:61:dc:01:fd:4f:84:a5:
         37:f9:a2:92:16:d0:ad:30:13:01:c8:70:2d:7c:bb:9a:25:20:
         54:c5:5d:d2:ec:93:20:f7:bd:e6:d4:94:53:c8:9c:d3:8c:9e:
         85:72:43:1e:fb:6a:75:ba:f1:d4:cc:69:71:62:dd:3c:a1:3a:
         f2:14:6b:ae:11:02:38:74:87:33:28:34:25:f5:2d:fa:f8:8b:
         dc:36:e8:5b:e2:dc:b0:40:5c:67:ef:2d:57:1b:e7:4f:9a:21:
         0e:01:0f:0e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVCMEYxMTAvBgNVBAUTKDkwNThGRURDRUM1Rjg3NkYzREZFMTYxOTQzMTlDMTQ1
QzlDMENDQjUwHhcNMjYwMzI0MjE0NTU5WhcNMjYwMzMxMjE0NTU5WjAYMRYwFAYD
VQQDEw02OWMzMDYxNy04OGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp+xk+6cezHHRVOtoVxsvdi/auPjDZB9sfTRuJp0R5BcunRwd1O2yv0CxXlcf
DeOuhdeY8mStngzgMco47E8V70F6qvmnluwhMacxbvd/V/lxcpdcNKuFM5Aandeu
zrRMVSUhvwlWOUlja057n9Y2vw/m8H0PMNvrsj5/HMeMuCKzfj1PWRnaEKjkq/nI
K7rzL6G1SZshjTAmAsAxNXAuA1OleZPQRRt8XxiL5klvJtKoXpi6zQ/kqLZ9tL8Y
Hpdvpg2a8sa2+QWrt+uGcId510+Ks4aQ+IIk03cZfgdyABpJoVYjrpuk1M6OfryE
g9yE9Zo4hEALdMvjbc+kWwLGEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDtEkng3
B1mbwU3cNeW+hHW6vEzSMB8GA1UdIwQYMBaAFJBY/tzsX4dvPf4WGUMZwUXJwMy1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUIwRi81MkQwQTEyMDg1
NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094ZmgyODlfaFlaUXhuQlJjbkF6
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tGai0zT3hmaDI4OV9oWVpReG5CUmNuQXpMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUIwRi81MkQwQTEyMDg1NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094Zmgy
ODlfaFlaUXhuQlJjbkF6TFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMzyCw6N6bWskBmYN10dAn8tcJr2kdAZ/qUDXhCg+BhNMJ2SE9gvloWvKdnRt
dwrACwvUIf4Ml1Xep2jmP8Tj0siDOxq+XUltiz3Ze0IV0OEHdAdd2WDddLBfG55z
fsBWOhTvAcFqzLvpHSBesGZQjLWfGXIXAOSxW//Xx1YLQlftRVySU9+o+yp7g9aG
lRYO3jYGGhjoxeIAbEJh3AH9T4SlN/mikhbQrTATAchwLXy7miUgVMVd0uyTIPe9
5tSUU8ic04yehXJDHvtqdbrx1MxpcWLdPKE68hRrrhECOHSHMyg0JfUt+viL3Dbo
W+LcsEBcZ+8tVxvnT5ohDgEPDg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:37:54 2026 by rpki-client