Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
File:                     kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json)
Hash identifier:          ZnnY4cD0nCFxEp19m0AvpaHkbc7IPTpH4Mzz6K3HH6U=
Subject key identifier:   46:8B:88:19:36:84:41:F0:A2:B5:73:64:42:3F:88:97:FB:76:40:13
Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
Certificate issuer:       /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
Certificate serial:       04D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
Manifest number:          39F7
Signing time:             Thu 26 Mar 2026 14:39:27 +0000
Manifest this update:     Thu 26 Mar 2026 14:39:27 +0000
Manifest next update:     Thu 02 Apr 2026 14:39:27 +0000
Files and hashes:         1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: GDNq8lLpKu8r6g/pOdaKXJ4jUC7bjvvInuPwF596V8A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl
                          rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1237 (0x4d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
        Validity
            Not Before: Mar 26 14:39:27 2026 GMT
            Not After : Apr  2 14:39:27 2026 GMT
        Subject: CN=69c5451f-3e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ab:2b:2d:1b:6f:06:80:9f:4b:3d:e2:9e:f2:
                    e2:cd:d9:42:49:c3:85:75:57:d6:b4:af:b8:57:6c:
                    57:b3:61:31:f4:d3:66:22:a3:c1:d1:09:38:7f:24:
                    b7:34:f9:29:40:d1:6e:44:8b:94:46:11:af:f8:ed:
                    d6:71:d2:d8:1f:83:8c:25:2f:8c:ca:35:d3:53:04:
                    f8:12:ba:72:6e:85:76:72:9d:59:75:e0:c1:ce:60:
                    bd:74:ef:49:5f:b3:0c:c3:33:27:7e:2c:65:81:4a:
                    b0:69:95:4e:f4:bd:f1:e7:64:f9:65:25:e5:22:2a:
                    67:19:5d:6b:3d:3e:68:47:05:fc:a1:56:5f:4e:47:
                    a7:26:27:25:a6:85:54:ed:d8:56:ee:d4:ea:c4:98:
                    9b:96:5d:ea:7b:96:8e:44:9d:fa:0e:38:e8:00:4f:
                    17:91:ca:93:11:92:a2:5c:7b:ab:15:89:30:30:ad:
                    67:d5:e0:7a:8f:25:fb:e4:5e:60:db:28:6b:e4:2b:
                    37:08:18:98:1c:50:fd:07:ce:61:59:e7:69:ee:66:
                    91:c4:7b:b3:ba:70:0f:c8:17:87:7d:57:35:b5:11:
                    47:27:ac:d6:1e:0f:c5:4c:49:9b:74:91:9f:d3:4e:
                    a4:71:bf:71:11:5a:4f:a1:3d:1d:31:82:f5:de:c6:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8B:88:19:36:84:41:F0:A2:B5:73:64:42:3F:88:97:FB:76:40:13
            X509v3 Authority Key Identifier:
                keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:aa:30:ed:84:af:e0:53:1a:43:9e:a5:f0:11:78:41:fe:8e:
         6d:f9:77:ea:f3:7e:13:e9:60:b8:00:f5:f8:ab:95:0d:9f:7b:
         db:de:2c:e8:47:59:3a:cf:88:3e:78:d5:23:cb:3a:88:ba:82:
         e4:22:78:12:a3:8a:89:78:fd:eb:8f:ab:8a:39:09:56:00:60:
         65:39:7c:9d:1b:76:bd:f9:62:b5:ee:4a:03:ac:ce:f5:4d:55:
         0f:43:4d:36:5f:dc:26:35:5d:40:b9:bf:a2:1e:91:31:a2:f5:
         e9:bc:f4:f0:a6:79:1e:01:07:11:0e:97:48:9b:0d:50:42:3d:
         76:59:59:be:bb:86:c6:2b:1c:06:bd:b2:59:7f:5d:d6:01:7c:
         a4:a3:1c:26:d7:53:d7:cc:de:b6:4a:64:94:38:d3:8f:5e:28:
         52:a0:f8:b6:b7:8f:25:25:ce:e9:ed:2c:f8:d9:0d:6e:7c:8a:
         b7:27:a2:61:3f:7b:83:2d:0d:3a:17:0c:21:72:01:14:6e:4c:
         c6:a9:50:68:5a:93:ee:be:a3:31:61:7a:4a:39:25:1c:9a:11:
         04:36:31:1c:bc:2c:15:e3:d0:1f:29:a2:dd:e1:cd:44:5c:03:
         7c:a2:a2:f9:a4:ab:15:97:56:0c:81:37:b6:cd:85:29:fd:01:
         80:e1:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:32:03 2026 by rpki-client