Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
File:                     krTCppKUC1SOY1BEM1qYW-4ivaE.mft (raw, json)
Hash identifier:          8HQhPHDPqRweeWPyKTX0QXv21qPPIqlMMLT88peZBJM=
Subject key identifier:   2F:F5:9E:23:3C:28:C6:D8:5A:BC:75:FB:74:96:F2:9C:E4:ED:F7:DD
Authority key identifier: 92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1
Certificate issuer:       /CN=A91CFDD0/serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1
Certificate serial:       82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
Manifest number:          80
Signing time:             Mon 11 May 2026 07:46:48 +0000
Manifest this update:     Mon 11 May 2026 07:46:48 +0000
Manifest next update:     Mon 18 May 2026 07:46:48 +0000
Files and hashes:         1: krTCppKUC1SOY1BEM1qYW-4ivaE.crl (hash: fsfPYWqmZD+Xk6TicRSg+ZqCw9cWYMIiup6IEKXsBr4=)
                          2: 0D06C406887511F094C09643C4F9AE02.roa (hash: fWHn2iDFgqEBh1OqsVAxNpoFUrx8d2vNfDWyJG2ndTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl
                          rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFDD0, serialNumber=92B4C2A692940B548E635044335A985BEE22BDA1
        Validity
            Not Before: May 11 07:46:48 2026 GMT
            Not After : May 18 07:46:48 2026 GMT
        Subject: CN=6a018968-6e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0c:d7:58:75:a8:af:2e:c6:1c:c7:5a:64:e4:
                    aa:8d:25:43:bc:d6:d9:6e:63:2a:75:ee:e6:18:ed:
                    51:1f:91:b3:8f:8e:f4:db:0b:eb:f3:97:b7:71:49:
                    f4:95:3a:0e:11:e0:dd:d2:5a:1d:6e:00:35:84:1c:
                    93:7d:d6:2d:67:0e:ce:30:b5:84:06:ca:2a:90:46:
                    6b:75:f4:b5:94:11:d6:9c:38:d0:be:0b:11:60:5f:
                    ef:a7:0c:56:38:cc:7b:8c:f4:9e:8a:fc:47:14:91:
                    6a:09:20:82:39:6e:41:fe:b2:65:4d:1d:67:66:7e:
                    2d:69:48:be:77:40:1c:97:d5:fd:d2:55:7a:79:b0:
                    4c:a9:ea:37:23:55:e7:0a:96:7c:3f:bf:ec:0c:3b:
                    16:59:d7:bc:45:d3:e4:7d:74:f1:66:d0:91:d7:92:
                    94:d6:de:41:97:58:80:d9:f4:62:a6:53:94:1d:ee:
                    5b:fa:e6:bd:d7:32:1c:70:76:96:a6:3a:43:11:31:
                    ef:88:c8:80:2a:79:31:7d:b3:12:24:33:8a:3d:6c:
                    fd:bb:12:f8:70:84:56:26:fe:2d:b2:ab:c5:f0:5f:
                    6e:55:34:75:c9:54:7c:a1:27:c2:c6:d2:6f:03:fc:
                    60:69:08:d2:34:0e:e3:22:c0:8c:86:f1:7f:c9:02:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F5:9E:23:3C:28:C6:D8:5A:BC:75:FB:74:96:F2:9C:E4:ED:F7:DD
            X509v3 Authority Key Identifier:
                keyid:92:B4:C2:A6:92:94:0B:54:8E:63:50:44:33:5A:98:5B:EE:22:BD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/krTCppKUC1SOY1BEM1qYW-4ivaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFDD0/9E0EE844887411F08BD73B3FC4F9AE02/krTCppKUC1SOY1BEM1qYW-4ivaE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:90:5d:f4:0e:04:fc:c3:11:93:71:78:b4:f4:60:4e:4c:2a:
         44:39:a1:79:23:22:65:78:33:d4:00:3c:cc:21:25:b1:25:1f:
         8a:95:cf:0d:67:25:3b:f3:d5:0f:57:a6:9f:63:06:6b:63:4d:
         69:d9:07:3d:35:b6:dd:ee:0c:ab:a4:8c:cc:e2:e1:e1:b8:3b:
         0d:73:b8:b3:22:70:76:84:89:36:80:15:23:00:52:02:c3:7a:
         e8:84:69:51:9e:83:45:e7:2f:29:c5:e3:cb:c2:5c:1a:67:20:
         0a:29:9c:65:81:34:0b:ba:a0:2b:0a:e9:78:da:06:34:3d:2f:
         d5:6f:7c:be:ae:ac:3b:d6:53:dc:75:af:d3:7e:76:18:3c:70:
         84:08:ff:cb:0b:4d:bb:b0:74:7f:1d:72:46:fe:e6:54:60:4d:
         66:5b:47:ba:f6:27:32:26:27:7e:81:c2:df:d5:51:16:83:ce:
         50:65:2d:ea:00:ab:8c:af:fd:37:f6:a1:ee:c9:55:f6:1f:ae:
         cb:da:e0:98:69:fe:68:09:36:33:87:95:82:2b:ca:a4:54:04:
         7e:6b:c0:89:04:fd:9d:1d:fb:ce:65:3b:f8:d9:bb:a5:18:19:
         d0:81:7d:2a:91:13:f0:58:91:e3:48:aa:38:97:af:7b:49:35:
         dc:39:3a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:14:24 2026 by rpki-client