Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
File:                     KxuyStzbFPbix7uy2Iq62x3diY0.mft (raw, json)
Hash identifier:          OTtNoOTiRhRGGbupnayLUaiOkkk1IkO6mMeyZmU19hQ=
Subject key identifier:   61:D6:0C:10:57:4A:63:EF:77:3D:93:B4:C5:E0:53:D9:2C:38:73:CF
Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
Certificate issuer:       /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Certificate serial:       039E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
Manifest number:          0394
Signing time:             Wed 25 Mar 2026 00:25:40 +0000
Manifest this update:     Wed 25 Mar 2026 00:25:40 +0000
Manifest next update:     Wed 01 Apr 2026 00:25:40 +0000
Files and hashes:         1: KxuyStzbFPbix7uy2Iq62x3diY0.crl (hash: eGQKEmt4XGYH6DeTrsAAUWs7gvJpWCzKRFbIwipT4DI=)
                          2: 3486D47412D511EFB1EF161DC4F9AE02.roa (hash: noY77zuBNX8xTUWwrf35ANzxZz07dvvKvq+tI08iw0s=)
                          3: 95CA439CDAE211ECA14A8254C4F9AE02.roa (hash: DXFn9IbM02w7n1eFZzgRJrQaHr06yYFyVzCtJliHjPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
                          rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
        Validity
            Not Before: Mar 25 00:25:40 2026 GMT
            Not After : Apr  1 00:25:40 2026 GMT
        Subject: CN=69c32b84-c33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:6b:02:32:a4:9a:3c:83:92:28:30:84:98:
                    f7:9c:4f:a7:49:e2:ec:f0:87:b9:01:78:d9:dc:e4:
                    17:8f:18:2d:69:c3:bb:7f:b8:f2:77:f8:be:7e:12:
                    94:58:9f:25:d9:b1:f1:79:83:4d:c0:38:2a:7d:cb:
                    58:68:a8:d0:09:03:9a:8a:5c:f8:07:b2:51:37:53:
                    45:fd:30:d5:6b:d9:c0:37:80:be:46:23:5b:f8:28:
                    e3:15:f4:e9:af:4c:fd:0e:5b:c0:17:18:83:4e:69:
                    29:90:6b:d1:f3:53:1c:84:bf:dc:4c:b4:3f:f3:92:
                    ef:7b:44:31:50:d4:b4:e4:25:31:88:e9:bc:89:0c:
                    bf:31:f2:91:6b:97:1d:28:ca:d2:ff:c0:98:da:37:
                    ff:04:ec:10:81:23:fd:cb:17:95:16:76:a0:ca:53:
                    eb:d4:5f:26:84:f7:e5:65:d0:9c:70:6a:01:ca:42:
                    71:ed:45:e1:78:76:cd:f4:5e:d3:af:76:1b:39:6a:
                    54:8a:07:c0:d5:31:38:a5:16:43:96:75:f6:fa:cb:
                    68:84:e0:ba:90:5b:b9:02:53:74:21:8d:63:57:ab:
                    1f:e9:dc:48:f6:c4:6d:a9:5a:d4:96:4b:1a:45:55:
                    ca:73:db:aa:5a:98:2c:f2:0c:94:dd:d7:f9:5d:45:
                    e8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D6:0C:10:57:4A:63:EF:77:3D:93:B4:C5:E0:53:D9:2C:38:73:CF
            X509v3 Authority Key Identifier:
                keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:bb:49:a7:52:0c:f7:1a:c3:58:cd:58:b4:04:a9:3c:65:b4:
         a6:bc:69:89:29:56:2d:17:e9:26:a1:77:d1:e4:98:ff:1c:9a:
         30:4e:b2:47:9d:92:ae:5a:8a:28:fa:b4:84:43:95:02:8e:77:
         0a:a8:58:44:d7:ce:f8:53:71:54:9c:46:ab:6b:06:08:99:a5:
         23:70:9b:90:d8:e4:fd:c5:61:90:bf:eb:a2:89:13:32:b9:43:
         c6:93:84:e5:19:f4:85:f2:e9:9e:ba:33:22:61:b9:f5:0c:a5:
         18:d8:38:c1:6f:56:d6:d2:6d:8f:db:91:d4:bf:49:3a:b3:33:
         d7:3c:8a:06:92:f1:e0:ed:8a:e6:e2:57:b5:8f:ad:4e:32:17:
         4c:f8:3f:50:0d:a9:b2:67:08:71:d3:36:91:7e:70:9e:b6:14:
         36:64:17:3f:e2:b9:83:61:57:87:db:b8:2f:48:de:77:e3:e2:
         dc:b9:e5:ed:b5:e4:e1:18:a6:d7:50:01:b9:18:8b:af:ef:77:
         9f:16:e8:37:40:2e:2f:2c:b5:42:e1:23:46:88:eb:d3:f8:8b:
         19:df:3d:e7:2e:e9:c4:b7:5f:ac:4d:39:ec:93:34:21:83:92:
         4f:d4:8c:c7:b2:e7:a2:e1:18:15:99:95:56:93:be:db:e9:8d:
         d4:b9:53:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:50 2026 by rpki-client