Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
File:                     kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft (raw, json)
Hash identifier:          0NV/D+EhxleJD0BYe4kNyOMrvwiOxRXeBjoDFLn8bI8=
Subject key identifier:   E1:D6:FF:F7:95:C5:FA:9B:77:D1:12:32:41:AE:F8:CC:C6:C9:0F:48
Authority key identifier: 92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF
Certificate issuer:       /CN=A91EF163/serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
Certificate serial:       174B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
Manifest number:          1734
Signing time:             Thu 26 Mar 2026 16:34:56 +0000
Manifest this update:     Thu 26 Mar 2026 16:34:55 +0000
Manifest next update:     Thu 02 Apr 2026 16:34:55 +0000
Files and hashes:         1: kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl (hash: uFPwaRbpPWR6up1MWygl5bVCJBktCzNITZCUapIG0cI=)
                          2: 47F9786C171B11ECB022FD54C4F9AE02.roa (hash: grjTjwUmIQWnJUgfXc//a/uLJu9sPuMlpiThsp7xszE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl
                          rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5963 (0x174b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF163, serialNumber=920EC6FC3657D3FB009882598C986A74F55558DF
        Validity
            Not Before: Mar 26 16:34:55 2026 GMT
            Not After : Apr  2 16:34:55 2026 GMT
        Subject: CN=69c56030-c089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:f7:bf:39:63:29:88:ed:0d:5c:29:37:a4:
                    53:a0:b3:8a:5a:fb:3e:93:96:5f:96:a9:84:73:f4:
                    30:11:6b:0b:ee:34:50:d3:b5:ca:ff:83:ef:ba:df:
                    1d:73:6b:97:5f:8d:3e:68:2a:c9:df:18:28:76:80:
                    3f:22:ca:ed:ea:20:56:29:d1:a8:b0:17:90:b0:7c:
                    c3:d5:23:ea:a7:84:68:29:c4:95:b3:24:2e:64:22:
                    54:f8:f2:a1:09:ac:5e:eb:5e:25:a0:f4:4f:3f:b8:
                    a0:02:8c:10:11:f7:bb:fa:75:15:b3:d5:d0:14:38:
                    d0:2f:66:e0:60:ff:8b:d8:17:0e:41:d6:4d:87:3f:
                    b2:15:6b:c4:c2:b5:5a:79:b4:0c:38:fe:8b:d5:50:
                    8a:ad:e3:55:c8:d6:ca:f4:37:0d:8e:3d:29:14:56:
                    5a:84:e5:aa:32:c2:e1:01:7b:1e:ad:74:60:9a:8e:
                    17:4e:92:39:8d:e4:1f:2c:b1:72:eb:fb:4f:c2:17:
                    7c:92:a4:79:76:50:74:7f:3f:7f:19:0f:38:ec:f9:
                    f7:80:57:d2:f8:ed:c5:10:0a:39:c4:dc:4d:f3:26:
                    83:75:3e:31:af:7c:0b:75:00:62:7c:a8:32:26:70:
                    56:b9:b4:e6:fd:05:78:5a:a5:71:b2:2f:dd:53:42:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D6:FF:F7:95:C5:FA:9B:77:D1:12:32:41:AE:F8:CC:C6:C9:0F:48
            X509v3 Authority Key Identifier:
                keyid:92:0E:C6:FC:36:57:D3:FB:00:98:82:59:8C:98:6A:74:F5:55:58:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kg7G_DZX0_sAmIJZjJhqdPVVWN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF163/029AF986007611E8B3599D17C4F9AE02/kg7G_DZX0_sAmIJZjJhqdPVVWN8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b7:92:10:c1:0a:c0:9b:df:cc:72:9b:ae:1b:e4:5b:e7:29:
         5b:40:d0:f4:d1:e8:c0:b4:6a:23:92:4d:df:30:db:36:51:b8:
         ff:61:d5:ba:b8:8a:48:3b:e5:48:ca:09:4f:2a:d3:53:be:29:
         4e:75:f1:58:52:ed:d2:dc:e1:68:bb:04:3a:e2:22:73:9c:2c:
         b7:29:ed:28:77:b8:e8:33:4f:48:c8:eb:e0:16:67:1a:f9:bf:
         31:8b:62:2c:92:69:9d:be:bf:7e:8f:ac:ef:57:31:20:7e:6f:
         91:65:5f:0d:cc:92:cb:08:bd:8e:32:d1:92:1a:9b:32:16:bd:
         69:a1:00:31:26:0a:c0:57:47:62:ce:2e:04:6f:c4:c4:1c:97:
         cf:8a:5e:e9:f1:3c:d7:04:dd:6c:36:fd:47:c9:e7:84:77:84:
         ca:10:67:37:10:4e:db:10:dd:93:a2:b4:80:b9:4a:20:df:23:
         d0:4e:cf:bd:d3:13:10:13:c5:8f:d4:3b:13:c0:c0:2d:2d:e2:
         41:24:7d:51:ba:08:bb:25:9d:31:11:70:4c:db:9c:1e:2d:dd:
         19:60:13:04:f0:ec:c2:74:9d:43:75:36:b4:2e:c0:51:4c:71:
         f6:7e:15:f7:6b:df:6e:b7:af:ba:0d:73:51:1c:e8:53:96:41:
         11:21:d6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:36:57 2026 by rpki-client