Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
File:                     K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json)
Hash identifier:          w1Kny/dyrUx3wW/OxJAMMONJ+vkWSNyibdPYbOmKTRQ=
Subject key identifier:   77:FC:37:A4:15:B8:E9:7E:33:FF:47:BD:BD:EA:44:0F:44:0A:09:FA
Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
Certificate issuer:       /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Certificate serial:       355C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
Manifest number:          3549
Signing time:             Tue 24 Mar 2026 14:23:37 +0000
Manifest this update:     Tue 24 Mar 2026 14:23:37 +0000
Manifest next update:     Tue 31 Mar 2026 14:23:37 +0000
Files and hashes:         1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: Dxp4K4d6QVdcjy671QCc7MgKVxbjlT0mZYbCWyGckFg=)
                          2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: B+l8TJuzuBfxkWLiU727TKBvSyJyZhyj59n2Kpa5X6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
                          rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13660 (0x355c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
        Validity
            Not Before: Mar 24 14:23:37 2026 GMT
            Not After : Mar 31 14:23:37 2026 GMT
        Subject: CN=69c29e69-38fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:34:76:16:ee:c9:f1:c2:6b:6b:40:9d:b9:
                    db:77:65:1a:bd:c1:f0:30:33:5a:0b:89:45:25:cd:
                    33:e2:6a:65:13:7d:38:1a:e2:1a:4c:31:8a:5d:2e:
                    1b:c0:7d:fe:5e:ed:cf:7b:44:a5:8b:ce:8d:0e:66:
                    21:ad:63:06:4f:34:07:9e:72:f5:46:dc:cf:95:70:
                    f1:5b:0f:b0:01:c2:85:da:dc:d9:84:3b:f6:ab:1c:
                    c3:e8:f1:bc:0f:30:ff:4f:70:4c:68:a2:72:26:70:
                    6e:62:b2:17:99:9d:03:24:5e:32:91:c2:2e:29:33:
                    26:b0:51:3e:07:df:e0:bb:20:bb:66:47:e7:52:7f:
                    7e:ba:7d:14:73:83:de:62:42:4f:b2:e9:0c:9b:5a:
                    fc:35:48:0c:3c:12:ab:23:76:87:0b:c3:6a:8f:7c:
                    4d:e6:3c:b7:e7:6c:9b:54:1b:07:77:02:1a:b4:6d:
                    e4:cc:59:97:b6:ff:55:0f:9e:a8:a5:71:f0:ed:e6:
                    df:81:e6:89:cf:2a:09:34:25:54:9a:db:7a:70:5e:
                    50:d0:d1:a0:09:9c:11:c9:af:f2:01:04:d3:f9:57:
                    8a:7f:16:47:af:41:3d:55:b7:ed:b7:ae:91:1b:0d:
                    1e:65:14:9b:b6:90:7f:bc:0d:4e:12:8d:61:f8:b3:
                    a4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FC:37:A4:15:B8:E9:7E:33:FF:47:BD:BD:EA:44:0F:44:0A:09:FA
            X509v3 Authority Key Identifier:
                keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:57:a7:54:9a:b4:e4:bc:05:ef:0b:22:c0:11:08:9b:a9:7f:
         69:50:e3:39:ad:d2:eb:d1:3c:72:ce:42:9c:ea:7f:fc:2f:3c:
         11:bc:42:85:11:3f:2b:dc:05:69:90:4b:47:46:ee:91:5c:3c:
         2a:a3:2b:19:8d:4c:d9:6d:2a:39:fa:b5:7a:ed:8d:12:72:d5:
         41:18:fa:ce:fe:e8:8e:a1:d9:da:ce:20:6f:83:2b:8c:89:52:
         8a:b1:8a:66:8a:ca:e0:56:e1:2b:16:5b:34:d8:67:13:4d:3e:
         c6:cc:fa:5d:f9:52:ea:32:cc:6a:36:dc:77:e2:cf:03:d2:34:
         87:36:03:ca:87:28:85:96:e9:1e:4d:6d:d6:95:da:01:b4:e7:
         4c:72:4d:cc:09:e6:31:7b:28:99:a3:eb:05:50:f2:92:27:14:
         b7:ce:ee:83:42:7e:78:31:61:4c:6a:31:a8:13:d3:5b:d2:da:
         fe:9d:03:58:54:2b:8e:b1:af:30:47:8b:10:85:d0:ff:0f:6d:
         b4:b4:83:b5:a1:ac:5e:ca:d7:64:64:8e:8f:09:a7:6e:8d:a5:
         3c:2f:7d:b0:77:e2:67:06:5c:72:55:44:79:c9:fc:29:0a:85:
         b9:2f:04:21:1e:26:08:47:da:1a:91:54:dd:7e:51:48:a1:11:
         b2:4c:eb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:42 2026 by rpki-client