Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
File:                     m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json)
Hash identifier:          qNjfNLCl1zqujnu5CSuuddeox7ATi8VU5dH0+uRA9G8=
Subject key identifier:   E8:BC:40:BA:57:3A:1F:36:B0:63:C8:38:0D:EC:F3:C4:97:A0:CD:D0
Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
Certificate issuer:       /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Certificate serial:       0669
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
Manifest number:          0658
Signing time:             Tue 12 May 2026 22:45:27 +0000
Manifest this update:     Tue 12 May 2026 22:45:26 +0000
Manifest next update:     Tue 19 May 2026 22:45:26 +0000
Files and hashes:         1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: jBPyj7/V7REB5LF1AMEKD96/yQ413CYtOf8kL4O4FxE=)
                          2: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: IMNAWHTLkWxMdEc+cnttaYRy8kitBgpU/B7G6rCH2UM=)
                          3: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: LmMvaPf53ua9EqCaZQMYjzev0cq6fDEk3G0cTqtvmZw=)
                          4: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: W7i3uG5Cv7+btgXKgHVPwYJhNORxSnDJ11busxfZwpE=)
                          5: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: B0Y1Ftxlxts1itlnnfx/vOUQhD3NVD0psDMYkEt54zY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
                          rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1641 (0x669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
        Validity
            Not Before: May 12 22:45:26 2026 GMT
            Not After : May 19 22:45:26 2026 GMT
        Subject: CN=6a03ad86-a504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:e8:1a:c5:03:fd:e5:36:dc:aa:84:c7:28:
                    7c:51:e1:9f:c0:ce:e1:16:f5:9b:72:13:1f:c1:52:
                    f1:f4:5c:10:49:85:1d:d4:4b:3e:04:b1:de:f9:0d:
                    cc:a5:3b:d6:95:70:35:6e:a5:84:53:e4:82:24:cb:
                    86:62:73:e4:54:6c:97:9f:15:44:23:35:32:09:4d:
                    d3:99:d5:90:19:67:ce:ef:46:13:ea:04:37:e4:33:
                    73:9e:10:6f:2a:9f:7f:11:23:12:8b:94:71:76:8a:
                    76:bd:67:f0:ea:74:7f:7a:3b:c2:6c:bd:03:90:4c:
                    7e:13:ae:89:c6:f8:58:8d:8d:a9:1a:07:d2:b8:be:
                    03:a3:fb:ca:66:50:96:27:67:b7:64:d9:ea:91:e9:
                    2b:9b:8d:b6:7e:dc:fd:9f:95:bf:4a:51:7a:fa:97:
                    75:72:5a:a3:de:4b:33:a8:e7:91:de:da:2a:64:73:
                    73:f8:3c:1c:2c:cf:dd:59:05:f5:2c:f9:63:6f:d7:
                    9f:50:54:b8:ff:c7:fd:cb:44:fb:a4:7b:40:c0:5c:
                    4f:b0:4f:bd:11:cc:88:33:29:48:65:bf:6a:1e:be:
                    97:da:1c:57:bb:8a:2d:09:08:dc:ca:34:b7:64:7e:
                    fa:69:ec:ad:2f:69:a3:2e:b1:9c:f0:9e:c4:7e:25:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BC:40:BA:57:3A:1F:36:B0:63:C8:38:0D:EC:F3:C4:97:A0:CD:D0
            X509v3 Authority Key Identifier:
                keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c6:bd:df:60:8c:39:74:f4:46:ed:84:54:a8:1e:4b:15:e6:
         1e:5e:f5:33:6b:d8:54:97:66:7d:be:e5:1a:01:a1:17:5f:ad:
         40:0e:83:0e:7a:fd:7b:98:0c:2d:2e:ae:f7:75:00:1d:09:c7:
         79:a6:f3:1e:0c:a3:dd:ac:4f:3c:41:61:58:b3:b9:f3:2e:29:
         cc:14:36:eb:88:29:49:6c:fc:a4:e5:38:3d:94:6d:c8:d9:2c:
         f6:eb:6f:07:0c:70:09:19:9a:ec:6b:51:25:89:58:a1:d8:8d:
         fd:fd:50:4e:71:86:79:a7:33:3d:fd:80:a5:35:91:c6:9a:d8:
         04:ea:c7:b6:82:fd:a7:55:c3:2d:f7:c3:47:6f:6f:33:0e:cc:
         da:6e:7f:3a:b3:b7:8f:8d:ac:09:2c:ee:79:ec:ca:6d:af:c4:
         aa:4e:d6:3f:89:b4:a9:a7:92:e9:ea:4b:21:c5:5f:c9:cc:53:
         92:2a:f8:ac:e9:27:10:cf:33:9a:b2:5d:09:42:d7:6b:fd:b7:
         e7:05:46:37:4f:db:0b:d2:4d:68:1e:a7:e8:a8:a5:67:96:20:
         3c:e8:49:e9:4f:e1:83:75:31:d5:b1:b6:bc:29:64:5f:67:8f:
         ff:4b:e7:10:c1:ba:35:35:38:68:1b:80:e5:d9:a2:46:6c:56:
         a0:e3:e8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:24 2026 by rpki-client