Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
File:                     rKEv19uyg_Ms3XPPzs8F08uaiKE.mft (raw, json)
Hash identifier:          O3bQTRfDcnOvXVL8Xqd57p/q/5it9+2PfgsU9E8XAQ4=
Subject key identifier:   61:14:BB:CC:50:13:A0:06:F8:4C:35:1E:7C:BF:BF:39:58:CC:57:43
Authority key identifier: AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1
Certificate issuer:       /CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
Certificate serial:       0861
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
Manifest number:          0859
Signing time:             Tue 24 Mar 2026 20:30:14 +0000
Manifest this update:     Tue 24 Mar 2026 20:30:13 +0000
Manifest next update:     Tue 31 Mar 2026 20:30:13 +0000
Files and hashes:         1: rKEv19uyg_Ms3XPPzs8F08uaiKE.crl (hash: Hpmigl/7MRywNWPEnXfDvv6yg+ESlHtL3kirKiQkYv0=)
                          2: CD8C0430F99011EAB54DF63CC4F9AE02.roa (hash: dCi6VvBG8Kieh+LiRI/8SoC0c+Kf0Pviv2GOgnuUocs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl
                          rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91994D1, serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
        Validity
            Not Before: Mar 24 20:30:13 2026 GMT
            Not After : Mar 31 20:30:13 2026 GMT
        Subject: CN=69c2f456-7be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:db:8f:64:0f:22:97:59:cb:15:9a:60:23:
                    83:27:6c:22:6f:b1:e9:af:89:e9:13:60:c6:80:e2:
                    16:c2:fd:72:93:4f:dd:84:91:17:bf:1f:e4:61:e4:
                    a0:5b:62:13:ba:03:3c:11:dc:9e:05:bc:ca:db:b3:
                    66:0b:b8:4f:41:2a:6c:80:0b:f4:9a:e8:4d:5f:e2:
                    90:ef:24:05:7f:da:5f:89:06:bb:a7:e5:f6:30:fa:
                    fa:d8:46:b4:ec:e9:af:25:13:03:ed:2b:b3:f2:1c:
                    2d:89:ac:8c:38:5c:67:ec:d6:7d:a3:9a:8f:a9:8c:
                    dc:2d:06:4c:28:49:90:4f:2a:5f:41:c0:62:bb:7a:
                    76:3f:f8:ad:eb:9e:05:b8:03:74:0b:5f:d6:62:dd:
                    dd:7b:fb:22:31:05:7d:73:79:09:61:b7:bf:1e:93:
                    92:d1:35:0d:bd:70:5e:37:36:45:b8:dc:3a:b4:3e:
                    8e:8b:0d:fb:b1:c9:7a:d5:c4:17:d9:32:0a:b2:3a:
                    ac:f2:2b:f0:2f:44:37:ff:39:34:89:1a:91:14:8a:
                    26:0e:1f:98:8a:d5:a1:dd:d6:06:16:a0:45:dd:ad:
                    04:b9:42:23:32:96:34:a4:e2:fd:ce:b2:c8:96:c1:
                    8c:d9:58:e2:42:83:31:65:4f:2d:d3:d5:b8:e0:e9:
                    01:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:14:BB:CC:50:13:A0:06:F8:4C:35:1E:7C:BF:BF:39:58:CC:57:43
            X509v3 Authority Key Identifier:
                keyid:AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b9:d7:ae:12:e2:65:42:9a:5b:b9:fd:c2:e8:1b:9d:5f:4b:
         52:03:0e:df:6d:af:c1:5b:d7:a1:27:e2:ff:08:c2:95:4f:f8:
         98:20:58:12:fe:1d:0d:79:a8:36:60:ed:f7:ce:1c:f2:cd:72:
         88:27:bd:a5:47:d1:74:ec:98:fc:cd:7b:25:34:09:34:d1:5d:
         68:8e:84:1e:02:ba:ae:53:05:5b:b9:48:08:93:0f:f4:cd:90:
         db:0f:06:74:d8:f1:01:14:89:78:99:12:a3:e4:f3:bd:98:81:
         08:1e:e6:84:48:a9:14:f1:71:d8:11:5e:47:08:2f:57:19:e9:
         48:bf:42:38:14:a4:e5:67:33:c7:1d:a4:01:ec:13:30:62:58:
         3f:eb:2e:b3:57:20:47:ec:f1:b9:8b:ff:74:5e:fb:c8:8f:5c:
         d9:bc:e7:76:c7:57:20:5c:04:e1:f1:60:75:e5:0b:d2:b4:54:
         f2:ca:17:b6:9e:13:28:ee:45:bc:25:32:6c:2f:fd:2e:0a:d0:
         12:7b:4b:db:bf:a2:8b:7e:f3:23:91:d9:70:40:3d:87:d9:5e:
         a8:0b:19:c6:19:b8:fa:78:48:7e:e1:5c:a6:1f:dd:14:cc:ac:
         de:97:2a:e7:60:fc:66:e0:98:cd:22:81:8b:1c:09:da:4d:a8:
         67:5d:ca:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:44 2026 by rpki-client