Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
File:                     kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json)
Hash identifier:          kza5aZFlPAdwnM7hg+6Pzv5n0JuLvN8Acwg4HmkKNps=
Subject key identifier:   BC:36:69:75:07:FD:FC:32:3A:61:4F:B9:55:7D:D1:C5:4F:1D:53:E0
Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Certificate issuer:       /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Certificate serial:       043C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
Manifest number:          0435
Signing time:             Tue 24 Mar 2026 23:57:20 +0000
Manifest this update:     Tue 24 Mar 2026 23:57:20 +0000
Manifest next update:     Tue 31 Mar 2026 23:57:20 +0000
Files and hashes:         1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: xp9eZVpWAAD0P47VfTCHtqWVK5fW6QsNyR4v21elqa4=)
                          2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: dHCif+Ldj0bWw7XW3VRYigHVgHSS9PTU4XO4u0HGdK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084 (0x43c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
        Validity
            Not Before: Mar 24 23:57:20 2026 GMT
            Not After : Mar 31 23:57:20 2026 GMT
        Subject: CN=69c324e0-9d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:bb:50:ad:4b:b4:df:66:3d:72:fe:95:53:
                    21:7b:61:6d:ff:c4:03:69:ed:2c:a4:7b:9e:ce:f1:
                    95:5d:fc:43:7a:5e:85:3d:c8:57:9f:b2:99:56:c4:
                    5a:11:79:2f:8b:b8:52:c1:9b:a9:f0:0a:39:5e:99:
                    ae:63:d7:b6:a3:61:e2:06:88:e5:3c:4b:57:d4:21:
                    e4:43:fc:74:fe:6c:21:c3:28:29:4b:e6:0d:56:0d:
                    3b:4b:c6:2b:32:bf:01:d1:b8:c1:d8:d1:b5:7e:19:
                    d3:38:77:de:e5:fe:4f:e7:32:b3:d0:65:09:5f:c0:
                    7d:f2:68:44:82:b3:ce:67:dd:74:f0:cc:f3:2d:76:
                    18:9b:f3:87:46:af:fe:98:f5:f6:62:4a:a4:07:60:
                    e0:0c:7a:c8:1e:22:63:91:e8:dc:df:46:93:71:53:
                    81:2e:ee:f2:36:38:28:02:2c:65:83:14:bc:62:55:
                    bc:ae:f6:5f:7f:1d:fd:06:0f:2b:7d:85:ee:e3:fc:
                    f4:05:f9:61:19:ee:fd:64:59:89:20:1d:04:9a:b6:
                    2e:08:93:12:c5:45:a0:27:d1:c4:8d:c7:85:d9:3e:
                    5e:1c:7e:47:fa:6a:48:a1:ad:59:79:20:a3:c1:da:
                    26:a1:14:f3:47:85:42:94:65:38:28:08:03:73:1c:
                    c1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:36:69:75:07:FD:FC:32:3A:61:4F:B9:55:7D:D1:C5:4F:1D:53:E0
            X509v3 Authority Key Identifier:
                keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6e:8d:9c:57:c5:ea:9c:70:cd:07:b2:dc:4d:e6:3a:e1:5e:
         0c:78:79:0d:1b:bb:96:c8:db:cb:78:4e:97:2a:de:d1:ed:60:
         5c:40:a5:7c:39:ed:bf:4b:db:ec:91:dc:cd:99:bb:bd:c1:c3:
         fc:ed:44:a6:c7:8e:4e:31:3e:0f:aa:3c:5d:bf:0d:11:1e:1a:
         96:30:0d:d2:2d:b8:d8:28:8b:8b:94:aa:a4:75:77:f7:43:a7:
         c0:11:29:29:da:1c:12:0d:53:97:d7:19:b5:6b:be:f4:27:d6:
         48:29:64:4e:a3:14:59:84:fd:28:51:05:0a:ae:9e:cb:3e:6e:
         6a:c5:a3:05:39:c3:b2:45:88:16:4e:48:c2:cc:4f:a8:ee:e4:
         b2:d2:fb:92:92:14:0f:49:67:b3:f3:49:95:82:66:39:dc:71:
         2a:8c:6a:76:8f:74:8e:33:90:12:a3:c6:f5:e9:c5:6a:84:e2:
         61:27:a0:5b:64:0a:c1:3d:dd:b3:38:c9:54:db:71:8d:88:a1:
         e9:f1:d2:f9:00:66:15:32:9f:c5:6c:da:84:9d:dc:4c:a6:d6:
         9c:bb:f6:14:ff:ce:af:bc:53:81:c6:c3:ab:df:cd:39:3c:67:
         ec:22:77:75:94:41:0c:9a:b9:0a:cf:2a:42:e4:9e:c1:78:97:
         e9:f0:fa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:31 2026 by rpki-client