Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
File:                     rKkepAl9np8x9W76xr1I8Ba-mNM.mft (raw, json)
Hash identifier:          lkh7u8/P+u3cDciC3YtreD7HIiEHolohqdDxdLNI+Zg=
Subject key identifier:   B3:9E:BC:4B:53:CB:7F:D5:44:F9:F6:CF:7A:B0:7A:31:C7:CE:8E:65
Authority key identifier: AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3
Certificate issuer:       /CN=A919905B/serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
Certificate serial:       0634
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
Manifest number:          062D
Signing time:             Tue 24 Mar 2026 22:28:01 +0000
Manifest this update:     Tue 24 Mar 2026 22:28:00 +0000
Manifest next update:     Tue 31 Mar 2026 22:28:00 +0000
Files and hashes:         1: rKkepAl9np8x9W76xr1I8Ba-mNM.crl (hash: ketsGPWvpKcZnW+ptb1RR+ulRxllVQt5dAARSX5yX44=)
                          2: 7B16F590D3EA11EB99BAC229C4F9AE02.roa (hash: pIzlQIo1teMnXltG2bbIgb5DMh87y0gd2JDDDBIFb8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl
                          rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588 (0x634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919905B, serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
        Validity
            Not Before: Mar 24 22:28:00 2026 GMT
            Not After : Mar 31 22:28:00 2026 GMT
        Subject: CN=69c30ff0-1f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4f:4e:dc:0e:04:ff:94:89:7b:3e:eb:0f:4a:
                    49:2c:a0:92:ff:ff:24:78:aa:ec:81:9c:5d:3b:69:
                    43:dd:60:32:1e:48:66:b5:b8:80:f3:b5:11:06:b2:
                    68:42:fb:f2:4e:27:51:fa:0e:3e:79:e3:4f:04:ec:
                    b1:c6:e5:c1:27:68:42:4e:8a:5a:16:15:f7:af:93:
                    c6:48:27:d9:19:4f:2a:c7:f2:79:26:82:e1:58:40:
                    33:a2:99:16:37:68:8b:ce:13:d7:2a:0a:9c:55:db:
                    d6:8e:33:2d:00:79:b8:0e:bd:e9:c9:8d:27:54:75:
                    34:7b:48:51:dd:e0:e6:07:72:9f:b6:5f:d9:a4:75:
                    c5:5a:0f:44:9a:3a:cc:c7:38:33:c8:5c:84:03:21:
                    f9:e1:d4:d6:f3:38:9e:b1:28:53:4b:ee:a0:9d:61:
                    59:53:0e:b0:93:9b:32:8b:e7:ea:43:7a:ef:8c:e4:
                    2f:84:4c:9c:f4:5b:5d:32:12:89:83:10:74:6c:1d:
                    31:0f:87:47:fd:56:2f:c4:cd:86:fe:5e:5d:63:86:
                    b8:9d:ef:f5:02:21:97:63:db:d1:f1:45:11:b4:a3:
                    0e:fc:0b:68:95:15:99:38:c9:e7:88:d6:07:85:70:
                    a9:f9:e5:ff:d3:f3:77:4a:54:b4:1e:f5:c9:48:34:
                    8c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9E:BC:4B:53:CB:7F:D5:44:F9:F6:CF:7A:B0:7A:31:C7:CE:8E:65
            X509v3 Authority Key Identifier:
                keyid:AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:be:0b:76:0f:c1:e1:ae:20:4b:9f:44:50:9a:34:ea:db:10:
         5c:91:80:d0:69:8a:37:26:45:a6:17:8c:cb:8f:4a:9a:8e:7b:
         53:1c:1c:f3:ee:ea:23:a4:9a:40:58:6a:85:25:b1:fa:73:36:
         62:43:a3:e2:6a:56:be:df:3f:03:a4:85:de:9a:a7:d4:23:81:
         6b:9f:ab:76:f9:ff:8e:30:10:bc:85:c8:58:73:08:aa:9e:83:
         0d:ce:20:92:30:2e:74:36:9b:b3:20:f5:56:8b:c7:e0:a0:4c:
         56:26:4b:b2:19:ea:f9:72:dc:b2:93:20:2e:0f:fe:82:c3:19:
         99:81:81:75:b7:c0:ca:71:74:d6:a4:a4:2c:a9:a9:cc:06:13:
         03:dc:ce:64:82:22:c2:1e:81:91:9e:03:9d:f6:97:66:73:8c:
         53:db:53:89:8e:58:9d:57:c6:04:53:9a:af:6f:4b:37:06:b1:
         9f:0c:97:0b:96:e8:f8:f3:25:48:9f:c3:57:f2:6e:0a:fe:69:
         fd:0b:a1:b9:0e:13:19:b2:92:0a:eb:17:98:46:fb:ca:4d:c0:
         d9:ae:8c:28:8c:85:9b:ff:d4:2c:1f:3d:3e:72:c5:2e:fe:45:
         28:aa:e7:d7:72:33:f1:63:be:83:b2:6c:10:06:e9:78:f9:36:
         1d:80:f7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:20 2026 by rpki-client