Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
File:                     Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json)
Hash identifier:          feAcBYwQFNZBxfHrSHmEjHOgmHP/BglRx/486i0MuD0=
Subject key identifier:   3F:A8:B4:D2:77:B5:C1:1F:FB:06:65:B3:3B:11:50:43:66:90:F1:C7
Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
Certificate issuer:       /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
Manifest number:          0108
Signing time:             Mon 11 May 2026 06:11:14 +0000
Manifest this update:     Mon 11 May 2026 06:11:14 +0000
Manifest next update:     Mon 18 May 2026 06:11:14 +0000
Files and hashes:         1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: AuqeVveL8rtR7of8Ha7qT0Fhc6axBLVOzdz6bGdOFII=)
                          2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: fMdXJV+1ucniyu3k/11VAI6qy/FxoiJSc5x07sN7B60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
                          rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
        Validity
            Not Before: May 11 06:11:14 2026 GMT
            Not After : May 18 06:11:14 2026 GMT
        Subject: CN=6a017302-3986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:02:24:0d:8b:f9:ba:ef:d3:62:28:6f:f7:73:
                    0e:a7:ff:7b:de:02:f9:99:11:b4:81:69:d3:e3:dd:
                    30:8a:a1:f6:42:ee:68:24:e6:cf:7d:73:0e:68:97:
                    d1:cf:af:47:cd:24:30:3c:06:88:56:3c:07:33:39:
                    4f:2b:33:61:fc:15:bf:81:82:3a:aa:74:47:c8:b1:
                    c9:65:65:65:a7:f4:a7:da:ee:82:1a:dd:3d:20:72:
                    92:f7:d1:e3:90:72:c5:7a:6e:16:2a:0c:5d:b5:8a:
                    2b:fe:b6:95:73:8e:38:13:d1:96:3d:49:1d:18:6d:
                    7b:00:18:27:20:89:76:c4:b9:47:5a:f6:4a:ea:e8:
                    0c:95:8f:f5:be:54:2d:fb:23:5f:94:fc:5b:df:85:
                    bd:40:6e:7c:1c:7a:3d:a4:48:52:90:c6:95:d0:ba:
                    ed:07:fa:26:86:af:7b:51:84:aa:43:dc:a2:ff:55:
                    6f:96:a1:69:94:6e:cf:6f:7a:c0:4f:20:7c:f3:42:
                    1f:59:a4:81:9a:c9:b4:d7:70:e1:2e:d1:73:ee:28:
                    21:27:60:e6:d0:a6:05:07:08:42:05:58:cd:84:e2:
                    4c:92:c7:08:e9:39:15:a3:79:b5:8e:e3:f6:02:57:
                    fc:9f:bf:62:4c:40:fc:d2:03:c7:32:89:55:5f:6d:
                    90:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A8:B4:D2:77:B5:C1:1F:FB:06:65:B3:3B:11:50:43:66:90:F1:C7
            X509v3 Authority Key Identifier:
                keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c5:0b:54:33:5e:cf:fd:2e:b0:1b:c5:00:a2:dc:8c:60:38:
         5d:76:83:f6:3e:4a:b9:1b:0d:45:18:b3:34:58:7b:59:f6:79:
         01:98:ec:d8:32:78:65:8f:cc:7f:aa:22:2d:66:76:31:e1:a2:
         9d:15:35:07:2b:7e:da:1c:68:b3:58:ce:28:60:09:42:43:13:
         ae:42:e3:10:70:42:5e:9a:59:47:06:c0:a0:6f:b6:b3:b2:c5:
         46:30:2b:1e:c9:bf:60:5b:5b:fd:26:51:2e:84:e5:18:7a:61:
         d9:85:06:14:23:55:28:30:fc:79:e5:6c:b1:79:e8:1e:a5:f1:
         09:9e:e2:46:68:0c:af:03:d9:41:cf:1a:4b:d9:bc:c4:f2:52:
         a6:f2:56:62:02:7a:9f:b8:3d:3e:b1:76:c3:1c:bb:e3:2d:e9:
         1d:23:5f:c3:df:87:89:c9:e7:bd:ee:b0:5d:17:67:88:bd:c5:
         75:ac:60:20:00:9a:8f:d7:cc:3c:d1:0a:e6:23:4a:16:80:d8:
         91:3d:46:e5:21:02:82:41:24:e4:0c:a8:74:2a:35:23:94:1c:
         0b:76:37:54:49:b3:76:04:6a:5d:75:ad:5f:dd:8f:fb:d0:ce:
         53:5e:eb:43:ba:53:50:a1:4e:6e:71:d6:9d:be:da:c6:88:ee:
         6e:4d:c5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:17:40 2026 by rpki-client