Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
File:                     kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json)
Hash identifier:          NjrLiQTfMjbHu4nDQm0GhP0Mc5sHzArBnHKb6B4z+V0=
Subject key identifier:   F4:14:E0:C1:E1:E6:20:B1:F8:D6:C1:0E:ED:00:AC:57:AE:47:14:E7
Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E
Certificate issuer:       /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E
Certificate serial:       0D93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
Manifest number:          0D80
Signing time:             Tue 12 May 2026 17:59:26 +0000
Manifest this update:     Tue 12 May 2026 17:59:26 +0000
Manifest next update:     Tue 19 May 2026 17:59:26 +0000
Files and hashes:         1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: PR2K1sE5ZFqdyL3gn+VRJ/+94LUoW44jc7uTjzv+XMY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl
                          rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3475 (0xd93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E
        Validity
            Not Before: May 12 17:59:26 2026 GMT
            Not After : May 19 17:59:26 2026 GMT
        Subject: CN=6a036a7e-7a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ef:04:8f:d1:1d:ed:ff:08:08:7a:1c:1c:8a:
                    dd:fa:36:20:3e:4d:43:de:b2:3a:81:10:e5:74:4f:
                    ad:47:bb:dc:11:8b:a8:cc:01:85:59:ab:28:da:27:
                    5d:59:c1:70:8f:3a:d2:e9:64:bb:26:1f:17:5e:bd:
                    19:40:d8:4e:69:28:bc:42:ae:87:ce:2d:7a:9b:ff:
                    bd:e1:3a:6f:75:73:21:aa:01:60:5b:e2:74:04:4b:
                    e8:f5:ed:af:4d:ad:65:60:a5:08:03:d4:34:b1:e4:
                    29:72:02:3e:c0:9f:e4:be:ef:92:5a:0c:80:82:00:
                    22:f5:05:05:42:5a:dd:33:8e:60:8c:6f:b7:4a:6e:
                    4d:0c:c2:8b:a6:76:e5:ae:8b:b9:9f:52:fb:a1:96:
                    1e:63:75:9b:4f:b3:a3:1f:6b:fc:c7:73:49:1f:3e:
                    32:17:fe:7b:be:c7:d7:8b:3b:88:85:a7:6f:dd:ef:
                    68:02:66:07:ee:88:a4:46:90:c1:88:e7:90:ef:dd:
                    f3:64:7c:1b:f1:41:8c:7b:3b:2b:a0:9b:58:dc:aa:
                    59:8c:18:b2:e2:13:92:38:a8:a4:c4:42:0e:b5:22:
                    e1:41:83:21:d1:35:04:e7:87:62:d7:ae:aa:4f:e6:
                    10:4e:89:bb:25:cd:77:74:34:39:10:3a:d6:22:2b:
                    15:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:14:E0:C1:E1:E6:20:B1:F8:D6:C1:0E:ED:00:AC:57:AE:47:14:E7
            X509v3 Authority Key Identifier:
                keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:27:69:64:73:c2:e4:c6:20:a8:01:4e:16:a8:08:90:3a:f3:
         03:5b:f0:9b:6a:9d:46:df:2c:86:fd:cb:df:d2:23:98:0d:dd:
         71:65:3c:6b:e8:24:87:db:a8:b4:0c:38:93:44:b1:82:de:a6:
         72:22:4e:51:71:b2:28:24:2d:81:22:86:47:fa:52:bf:e1:44:
         92:f9:0e:8e:79:5a:de:2a:f1:08:e7:8e:a1:2e:9c:16:8f:3e:
         4a:77:a3:c3:fb:e1:a0:eb:57:81:4b:df:c8:51:53:17:29:13:
         a3:ec:f9:21:dc:15:4e:be:72:b5:8b:43:ca:fe:f2:7e:ad:db:
         10:13:e4:b9:3a:64:7b:6e:12:12:d1:2b:07:f2:f1:50:24:e5:
         cc:83:6d:00:8b:e0:12:26:cf:ba:7c:f6:4c:51:e0:ad:88:6c:
         46:29:d9:f7:94:cd:7b:0a:b1:62:b3:26:f4:0e:ea:12:cc:56:
         a6:d1:70:1d:38:4c:22:ff:db:df:a4:48:0a:ed:ab:5b:a6:7d:
         81:21:a7:1a:68:04:8e:5d:be:22:c0:a6:f3:e3:d6:6e:d3:76:
         bf:1a:20:99:63:73:a3:33:41:e5:46:35:1e:1f:b3:f2:9d:b8:
         e3:07:99:c4:9f:cc:57:19:5b:66:60:67:98:32:cb:ec:64:19:
         cf:00:2c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:16 2026 by rpki-client