Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft
File:                     kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft (raw, json)
Hash identifier:          5R0TrTYSgVyoik4Ju4xUpzoBGEzYF4syYbUdi9euXfg=
Subject key identifier:   8A:6A:08:48:D7:97:C6:EC:22:3B:1E:ED:99:08:55:35:64:0E:4C:D8
Authority key identifier: 91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49
Certificate issuer:       /CN=A91BB6E3/serialNumber=919FA819B2FFF145521AF664035278E7E7914A49
Certificate serial:       026D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft
Manifest number:          0251
Signing time:             Wed 25 Mar 2026 01:55:34 +0000
Manifest this update:     Wed 25 Mar 2026 01:55:34 +0000
Manifest next update:     Wed 01 Apr 2026 01:55:34 +0000
Files and hashes:         1: kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl (hash: M6iFo1oig5Gl/pWvFj+zLF86aPrKxkysljK446kdoyE=)
                          2: F96174ECC27D11EDB8226F2DC4F9AE02.roa (hash: G5wyunrhNPZHL5dnU3YCTVm9J7AtwfPqbQe5Aa4DplE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl
                          rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB6E3, serialNumber=919FA819B2FFF145521AF664035278E7E7914A49
        Validity
            Not Before: Mar 25 01:55:34 2026 GMT
            Not After : Apr  1 01:55:34 2026 GMT
        Subject: CN=69c34096-4e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:1b:52:1b:4e:5a:5c:bc:c5:25:a3:9e:12:
                    1f:45:f0:a1:52:18:74:38:59:52:15:c7:9a:da:20:
                    15:94:2d:5f:2c:15:3f:c6:2f:ff:3a:98:3a:f0:7b:
                    ce:c4:7e:57:ba:d9:01:91:39:b8:05:56:a5:f1:f2:
                    01:e2:d8:76:ea:3e:0c:63:6b:0e:d7:db:2b:12:31:
                    a3:93:96:fd:88:ac:12:65:66:04:5f:ca:50:75:99:
                    d7:9f:33:63:3c:1d:82:74:ab:15:6a:9c:f9:18:42:
                    e5:6f:ec:ae:4b:e5:c7:65:3d:15:2c:2f:cc:e3:4d:
                    20:a6:22:ab:c7:61:75:19:90:4d:60:1f:41:59:47:
                    39:66:6f:ef:1e:5a:2b:8d:11:7b:d7:87:96:a1:e9:
                    e9:b2:f4:48:ee:d9:9f:75:28:2b:45:12:52:5d:28:
                    d9:a2:f4:54:b7:21:5a:c9:59:90:78:ee:e2:61:e5:
                    2c:9a:a7:cc:73:6a:07:b5:62:48:e1:42:57:5d:7e:
                    60:98:13:7b:91:cf:36:3d:bf:b1:ed:d4:28:f3:48:
                    c3:81:c2:02:52:76:4c:e2:83:03:8d:bf:e3:35:17:
                    4c:d5:30:30:1b:d0:c5:d7:69:73:ef:69:a6:f7:aa:
                    ca:03:f5:0b:dd:65:68:5f:62:95:f3:d6:f9:8f:9d:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6A:08:48:D7:97:C6:EC:22:3B:1E:ED:99:08:55:35:64:0E:4C:D8
            X509v3 Authority Key Identifier:
                keyid:91:9F:A8:19:B2:FF:F1:45:52:1A:F6:64:03:52:78:E7:E7:91:4A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kZ-oGbL_8UVSGvZkA1J45-eRSkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6E3/A22C814CC27511EDB3B4D728C4F9AE02/kZ-oGbL_8UVSGvZkA1J45-eRSkk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:08:fb:43:11:60:a7:c5:99:28:47:47:59:76:ce:3b:d6:72:
         cb:d4:0a:d1:e1:39:9a:f1:9a:c0:5d:4a:33:f0:7a:24:7a:ab:
         11:39:68:8d:22:33:ba:50:8d:eb:3d:cd:99:29:19:90:be:ad:
         3c:85:6a:d6:fe:f6:15:0d:4e:3e:b5:24:d7:87:36:86:4f:94:
         c2:95:61:fb:27:9b:e3:e6:48:32:55:9d:62:8b:f4:c2:69:75:
         9c:2e:d2:f0:54:83:23:9f:0a:da:fa:68:fd:d9:de:db:70:e6:
         a8:cc:1e:8f:31:ba:84:5c:db:ce:6a:69:9d:0f:c2:7e:06:8e:
         b7:55:4b:99:6b:7d:09:30:c5:9f:06:2c:34:76:50:18:ab:83:
         49:07:ed:e2:05:0a:4f:e4:0a:63:88:e0:1e:f6:ae:b9:82:bb:
         0f:27:99:ae:98:6b:f9:fe:cf:d1:b7:9e:3c:99:9e:06:05:1c:
         a6:ef:26:f0:ea:1e:fc:a9:ff:2f:a0:2c:4a:b8:b4:f4:f1:f8:
         9e:b4:6b:b8:84:14:fc:84:65:0f:26:3d:d0:a2:e3:4b:0e:cc:
         01:70:8b:72:56:e1:76:55:eb:cd:6d:12:5d:8e:5d:8c:97:19:
         85:7f:90:5f:ef:c0:dc:f5:9f:12:27:f7:66:5e:c9:2c:8c:2c:
         d3:48:6b:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI2RTMxMTAvBgNVBAUTKDkxOUZBODE5QjJGRkYxNDU1MjFBRjY2NDAzNTI3OEU3
RTc5MTRBNDkwHhcNMjYwMzI1MDE1NTM0WhcNMjYwNDAxMDE1NTM0WjAYMRYwFAYD
VQQDEw02OWMzNDA5Ni00ZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArigbUhtOWly8xSWjnhIfRfChUhh0OFlSFcea2iAVlC1fLBU/xi//Opg68HvO
xH5XutkBkTm4BVal8fIB4th26j4MY2sO19srEjGjk5b9iKwSZWYEX8pQdZnXnzNj
PB2CdKsVapz5GELlb+yuS+XHZT0VLC/M400gpiKrx2F1GZBNYB9BWUc5Zm/vHlor
jRF714eWoenpsvRI7tmfdSgrRRJSXSjZovRUtyFayVmQeO7iYeUsmqfMc2oHtWJI
4UJXXX5gmBN7kc82Pb+x7dQo80jDgcICUnZM4oMDjb/jNRdM1TAwG9DF12lz72mm
96rKA/UL3WVoX2KV89b5j50egwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIpqCEjX
l8bsIjse7ZkIVTVkDkzYMB8GA1UdIwQYMBaAFJGfqBmy//FFUhr2ZANSeOfnkUpJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZFMy9BMjJDODE0Q0My
NzUxMUVEQjNCNEQ3MjhDNEY5QUUwMi9rWi1vR2JMXzhVVlNHdlprQTFKNDUtZVJT
a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2taLW9HYkxfOFVWU0d2WmtBMUo0NS1lUlNray5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjZFMy9BMjJDODE0Q0MyNzUxMUVEQjNCNEQ3MjhDNEY5QUUwMi9rWi1vR2JMXzhV
VlNHdlprQTFKNDUtZVJTa2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXwj7QxFgp8WZKEdHWXbOO9Zyy9QK0eE5mvGawF1KM/B6JHqrETlojSIzulCN
6z3NmSkZkL6tPIVq1v72FQ1OPrUk14c2hk+UwpVh+yeb4+ZIMlWdYov0wml1nC7S
8FSDI58K2vpo/dne23DmqMwejzG6hFzbzmppnQ/CfgaOt1VLmWt9CTDFnwYsNHZQ
GKuDSQft4gUKT+QKY4jgHvauuYK7DyeZrphr+f7P0beePJmeBgUcpu8m8Ooe/Kn/
L6AsSri09PH4nrRruIQU/IRlDyY90KLjSw7MAXCLclbhdlXrzW0SXY5djJcZhX+Q
X+/A3PWfEif3Zl7JLIws00hr/w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:35 2026 by rpki-client