Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
File:                     KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json)
Hash identifier:          TCE5x5XQ04EwHOoTljtUCJ5/48omr0Fq4A8NvoVZnUs=
Subject key identifier:   57:BA:9F:9F:E3:20:EE:5B:64:91:90:D8:C8:FD:8C:60:4A:E5:7D:9A
Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
Certificate issuer:       /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
Manifest number:          AE
Signing time:             Wed 25 Mar 2026 06:24:33 +0000
Manifest this update:     Wed 25 Mar 2026 06:24:32 +0000
Manifest next update:     Wed 01 Apr 2026 06:24:32 +0000
Files and hashes:         1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: rTweildz+mS8S44meMvvgvw9Sx/ZaFZYnRmt/RN/pvI=)
                          2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: QsP9uqEiNFI8mG4UNJDemIDsWI8VClhN6iYFmbVOcY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
                          rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
        Validity
            Not Before: Mar 25 06:24:32 2026 GMT
            Not After : Apr  1 06:24:32 2026 GMT
        Subject: CN=69c37fa1-ecc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d8:53:67:d2:75:bb:62:eb:53:0b:da:cb:8a:
                    ca:80:b7:5f:46:f0:1a:81:7e:de:40:73:77:a0:81:
                    6e:dd:9d:ee:af:38:14:5c:4b:0f:38:c2:92:d3:45:
                    10:b6:97:be:0e:2d:0a:d1:01:ab:90:14:d7:2b:c5:
                    88:99:e5:2f:9a:66:87:bd:19:51:bf:1e:bb:26:ee:
                    69:cd:ac:14:d1:6f:8f:83:14:56:0b:bb:4d:4c:f3:
                    cc:7c:05:8f:dd:ff:36:77:53:42:3b:d3:f0:81:ee:
                    fd:68:e4:33:f4:2c:66:b5:bb:f9:c2:77:48:af:01:
                    04:82:83:ad:aa:20:78:1a:5a:65:47:51:53:9e:77:
                    fe:14:81:76:0f:e6:63:89:c1:bf:92:83:a0:29:41:
                    29:64:83:0d:3f:f8:a5:83:8a:88:1e:85:39:c7:01:
                    de:6c:71:d7:bc:c8:25:a7:38:0d:66:12:92:b5:d9:
                    64:a5:58:d8:f8:41:e5:6a:5c:55:13:8b:f8:ff:f9:
                    94:ce:44:33:c0:51:46:05:2d:71:16:fb:2a:c3:34:
                    a3:24:ee:fd:02:f2:5e:f8:dc:87:32:03:b6:fc:b1:
                    fa:dd:ab:56:8f:77:16:8c:bf:57:de:ea:e7:4f:ce:
                    7b:ce:16:2e:4a:3e:03:c6:48:b3:e0:dd:e7:23:c2:
                    e1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BA:9F:9F:E3:20:EE:5B:64:91:90:D8:C8:FD:8C:60:4A:E5:7D:9A
            X509v3 Authority Key Identifier:
                keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:77:eb:96:ee:51:73:a4:dc:fc:3e:2b:32:75:71:7e:02:7c:
         94:f1:3f:17:52:44:3a:2f:8c:3c:0f:fc:6b:98:5e:2e:2c:32:
         27:e5:66:7a:d3:91:2e:08:9e:f3:b3:8b:fb:c5:4f:02:20:f9:
         08:56:50:90:5c:45:f3:44:53:e5:b1:34:76:57:94:1f:dc:4b:
         b4:a2:ad:6f:d6:aa:f5:1b:f5:f1:8d:59:ef:37:ec:b5:05:b1:
         c3:41:ea:37:80:f6:cd:2b:67:25:06:72:d9:f2:51:26:8f:7d:
         62:39:1a:ec:25:5a:3f:24:db:b6:e3:6e:3c:cf:64:1f:ae:b3:
         7d:86:c9:79:21:d4:29:b7:d5:d1:af:20:f9:d4:b2:2d:9c:c8:
         32:40:24:bd:d5:ae:d2:01:42:d0:99:80:30:bd:8c:f9:32:9c:
         e4:48:e1:17:5d:5c:d7:c6:f3:02:12:c1:13:c7:02:dc:66:be:
         ec:87:76:48:61:0d:a4:39:99:f5:3a:8a:6a:4e:40:3f:f2:a0:
         b0:e6:ad:00:ba:55:11:87:df:ef:e3:d9:c6:5b:14:f1:56:70:
         a7:5e:61:c9:57:99:b5:31:93:9f:10:82:50:e9:24:4c:1a:7e:
         c8:a5:5c:e3:62:9a:44:b0:c5:99:6f:f3:07:9b:27:c9:85:a8:
         82:98:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:17:21 2026 by rpki-client