Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft
File:                     KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft (raw, json)
Hash identifier:          LZI78E7XBprGYTms7k0D5gxz0g2N3NW104UiBm7M31s=
Subject key identifier:   20:D4:75:69:D1:FA:53:E2:2D:52:08:0D:92:AD:75:50:A2:38:E2:8E
Authority key identifier: 2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9
Certificate issuer:       /CN=A91A4EF9/serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft
Manifest number:          018A
Signing time:             Fri 27 Mar 2026 03:57:42 +0000
Manifest this update:     Fri 27 Mar 2026 03:57:42 +0000
Manifest next update:     Fri 03 Apr 2026 03:57:42 +0000
Files and hashes:         1: KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl (hash: 99pFNnd+x6N25byjlh7vatpg05HuBPVL7s/LQPkQxlA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl
                          rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4EF9, serialNumber=2AC53E26202F4BCBC14806F13E9E860D0AC677F9
        Validity
            Not Before: Mar 27 03:57:42 2026 GMT
            Not After : Apr  3 03:57:42 2026 GMT
        Subject: CN=69c60036-8be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:d2:82:1d:a8:6f:0c:70:35:49:3d:ef:1c:
                    38:c2:ee:90:64:e5:cf:9f:9a:85:24:31:29:ef:31:
                    cb:13:e5:c0:d1:14:ac:70:90:9c:85:e0:4f:c5:e4:
                    90:af:94:a7:08:1d:39:80:30:5a:62:24:25:1d:22:
                    bb:59:16:ce:74:de:71:62:84:c1:a4:01:6a:21:ca:
                    4e:70:19:de:16:6a:5b:2c:5e:68:90:73:74:6e:05:
                    eb:bf:06:56:3c:28:c8:68:19:73:20:38:03:b6:a3:
                    37:2a:5a:20:e9:e7:a2:f4:77:64:6d:47:3b:d8:ca:
                    e1:7b:59:66:4d:c7:1e:66:e5:1f:86:56:79:c0:4f:
                    55:d1:8a:bd:06:fe:03:64:2b:6a:91:77:d2:35:6e:
                    a9:c6:26:2b:c2:47:b2:30:c8:ed:a4:cd:d9:c4:80:
                    ca:b9:60:70:43:2f:55:c8:da:9e:29:af:7e:a2:7e:
                    85:1d:99:9e:8f:81:31:59:85:f7:3e:13:e9:98:25:
                    78:67:63:73:08:e1:b4:f7:15:c3:f9:e3:e2:f2:71:
                    09:66:b5:28:3f:97:81:3f:09:c3:fa:4f:a7:7c:96:
                    04:bc:30:97:37:ab:96:f0:4e:97:9f:a4:1e:26:c5:
                    a7:45:c6:65:9b:28:14:91:86:41:0b:26:c5:82:f8:
                    44:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D4:75:69:D1:FA:53:E2:2D:52:08:0D:92:AD:75:50:A2:38:E2:8E
            X509v3 Authority Key Identifier:
                keyid:2A:C5:3E:26:20:2F:4B:CB:C1:48:06:F1:3E:9E:86:0D:0A:C6:77:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsU-JiAvS8vBSAbxPp6GDQrGd_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/7E9E23F8D13711EEAA9F1980C4F9AE02/KsU-JiAvS8vBSAbxPp6GDQrGd_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:7c:ab:42:95:dd:62:3e:8f:ec:2a:6e:62:7b:a9:b2:52:64:
         d9:33:e7:ef:69:dd:f6:a9:58:97:29:63:06:28:0b:74:3e:2c:
         7c:45:91:e1:6e:a4:a7:87:be:9e:da:90:29:63:c8:b3:01:b1:
         b2:6c:38:70:a1:7e:86:47:cf:84:47:fe:c2:91:2f:99:90:08:
         07:8d:09:f1:79:ba:8c:d7:ec:a7:92:df:d8:1b:6b:92:f0:b0:
         1f:c0:d3:6e:c4:99:51:5d:b1:6b:70:73:44:0e:df:35:94:b6:
         f8:4f:0e:6b:51:4a:c8:49:60:34:e9:9e:d5:8e:4e:81:f8:de:
         bb:75:4d:ac:04:3f:a4:b3:07:67:f9:e7:eb:e4:23:25:fb:cd:
         88:66:f0:cf:6e:1e:c9:7d:cd:34:1a:e8:48:59:e6:f9:2f:a5:
         a9:23:40:be:40:19:ed:f7:11:a4:ea:d7:c8:0a:81:df:39:c0:
         43:25:e9:af:8e:f5:83:33:0e:cd:7e:db:b7:9b:c5:b0:a3:4d:
         d3:d4:29:5d:5b:81:39:e7:0f:64:31:a1:ea:95:64:d6:95:aa:
         82:63:70:a8:2c:e2:d9:aa:6b:55:df:a8:ae:fc:07:30:bf:ea:
         0a:dc:82:a3:0a:62:c3:18:98:ba:65:a1:b7:44:3a:27:a6:91:
         27:e4:85:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:24 2026 by rpki-client