Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
File:                     KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json)
Hash identifier:          O7S6xKZtXJEgFcQ8XQbqTSBcY0lZyY2kVfQGYfg6zsM=
Subject key identifier:   45:A8:30:1C:6B:F5:59:8E:89:77:22:C1:D6:9E:1C:9D:B0:E0:AD:76
Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
Certificate issuer:       /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
Manifest number:          C7
Signing time:             Wed 13 May 2026 07:01:34 +0000
Manifest this update:     Wed 13 May 2026 07:01:33 +0000
Manifest next update:     Wed 20 May 2026 07:01:33 +0000
Files and hashes:         1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: ytN9O67ZQtldgUVQ5mp0FDOGYiFcCzyQvLVNNdOcigE=)
                          2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: QsP9uqEiNFI8mG4UNJDemIDsWI8VClhN6iYFmbVOcY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
                          rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
        Validity
            Not Before: May 13 07:01:33 2026 GMT
            Not After : May 20 07:01:33 2026 GMT
        Subject: CN=6a0421ce-a880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:97:60:48:49:34:39:61:fa:94:5f:bd:65:
                    1e:2b:bd:04:98:7f:b8:d4:9c:46:12:fa:f1:9f:91:
                    e7:43:d7:a0:c0:de:b1:5e:79:42:6c:56:b8:10:56:
                    32:7b:54:ce:15:4f:6b:f3:95:7b:9c:d2:77:6e:29:
                    7a:12:22:f0:e4:1d:21:0d:00:e4:24:8b:e4:47:2a:
                    8f:e2:a2:ef:c1:2e:4b:c9:e4:3d:32:21:78:c8:96:
                    7e:b9:89:3c:91:0b:bd:c9:cd:bc:6e:a7:b9:2a:41:
                    d2:82:9c:76:55:25:9c:ba:fb:f8:aa:e5:a5:88:93:
                    d4:e2:3b:b1:dc:19:9c:7e:c0:4b:a4:6c:00:73:24:
                    42:dc:2d:5d:95:f3:23:fc:f4:34:41:8f:e3:95:26:
                    9b:c6:83:3c:69:0b:0a:41:68:db:17:05:dc:0b:60:
                    5d:27:b0:9e:a0:a8:96:89:2e:f8:83:28:52:6e:20:
                    24:e0:46:6c:3b:03:a6:73:a2:35:c5:7b:e8:48:67:
                    b0:01:e5:06:42:29:8f:8b:bc:75:c2:35:8c:5a:20:
                    e7:27:6b:10:22:9a:ee:d9:39:e2:c7:2c:23:bb:ae:
                    dc:1d:ff:f2:ed:01:22:49:1a:71:e6:9a:ac:34:87:
                    7b:97:88:8f:29:09:42:2c:33:31:8d:74:f0:b6:5d:
                    c6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A8:30:1C:6B:F5:59:8E:89:77:22:C1:D6:9E:1C:9D:B0:E0:AD:76
            X509v3 Authority Key Identifier:
                keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:ac:a1:9d:45:1e:5b:a2:7e:06:40:7f:6e:df:72:03:c1:bb:
         87:a9:cc:09:26:93:8f:2e:74:62:16:49:cf:f6:00:af:75:f0:
         fe:0b:c4:84:3b:fa:44:bd:8f:98:ee:b9:c2:fc:da:fe:dc:08:
         06:5f:44:6f:cb:d4:07:53:12:33:8f:d2:fc:06:1e:66:9b:22:
         09:75:b1:7d:6c:6a:be:24:55:a7:92:69:6d:32:50:3d:bd:f0:
         ea:11:a2:df:47:c0:e5:9b:4c:c7:ad:d2:39:28:08:61:dd:19:
         7f:0a:5f:cd:40:5d:92:be:3f:b7:c4:52:a5:52:20:04:df:9d:
         0b:d0:95:08:8c:49:a7:e8:8e:ee:a9:f1:55:b2:c6:56:4d:95:
         02:01:69:f0:22:0e:9e:b0:a3:c3:e6:01:b6:7c:d5:87:ff:5a:
         f0:f3:74:30:25:b1:e5:c6:f9:4a:af:79:ef:87:3b:3d:5c:c9:
         4c:fd:61:14:b8:12:73:30:c7:b8:dc:93:de:a9:75:ee:64:b8:
         a0:08:f2:34:2f:d5:bc:8b:c1:76:51:5e:8d:e5:93:a6:85:df:
         fe:50:40:a3:65:bc:97:ee:3b:8d:56:d8:70:e8:20:2b:7d:98:
         5e:7a:15:80:03:52:84:cc:e4:48:6d:d3:9a:7b:13:8c:ea:8f:
         63:87:63:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:46:10 2026 by rpki-client