Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
File:                     kTOsvs_e7PTaOiIigng09bc6-qc.mft (raw, json)
Hash identifier:          cqu3ytkb3jF111tpa+6tRi7mPmbJtBtt4nt8X/Ws/54=
Subject key identifier:   87:66:D5:58:E7:FE:1D:B6:C9:07:E7:A2:CD:A7:5A:62:F8:06:55:9E
Authority key identifier: 91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7
Certificate issuer:       /CN=A91F79A2/serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
Manifest number:          014E
Signing time:             Wed 25 Mar 2026 04:20:37 +0000
Manifest this update:     Wed 25 Mar 2026 04:20:36 +0000
Manifest next update:     Wed 01 Apr 2026 04:20:36 +0000
Files and hashes:         1: kTOsvs_e7PTaOiIigng09bc6-qc.crl (hash: kdxbwl9Wp9EduSlseTvhkaQ3VVGcPnE6OypElcf/Gcg=)
                          2: 6B9D491C379A11F0B3AC7740C4F9AE02.roa (hash: LMXTxM7l4JdcF/ON7Kkss11xFLRKbb61J2H/ZhTQ8eY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl
                          rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F79A2, serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
        Validity
            Not Before: Mar 25 04:20:36 2026 GMT
            Not After : Apr  1 04:20:36 2026 GMT
        Subject: CN=69c36295-8bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:02:75:ce:8d:24:7e:1a:6a:1b:33:4c:71:44:
                    0f:aa:b5:b3:3e:a8:74:58:24:4b:50:5e:5a:5a:94:
                    a7:fa:9d:25:9a:f6:c4:7f:67:38:42:1c:8a:23:09:
                    61:b4:b7:d5:35:dc:26:ac:7a:68:c1:51:99:e9:82:
                    57:7d:91:e8:6a:e0:3a:44:0b:ad:4c:49:58:f0:10:
                    0e:61:8e:57:74:1e:38:b3:02:bf:13:6e:9e:ed:aa:
                    d7:fb:cc:25:42:a8:27:62:f6:c2:fb:ed:1f:9c:01:
                    d2:c9:10:28:12:a0:b7:cf:59:70:85:f1:29:dd:6e:
                    30:20:88:e8:76:97:93:d0:76:81:e8:6d:57:0c:5d:
                    91:77:93:50:93:35:43:16:74:05:6d:d9:d4:16:77:
                    60:d1:1a:41:c7:4f:c4:d9:b7:4c:1f:6a:a0:ea:c4:
                    a2:77:97:97:25:0a:29:88:98:b3:4e:c2:6f:54:2c:
                    90:64:86:19:69:14:31:be:fb:2d:a7:ff:dd:de:db:
                    61:68:55:85:28:a0:a2:12:ab:d3:11:61:54:a5:2e:
                    b9:d4:ad:63:23:c1:bf:b4:19:d2:88:b0:d7:83:23:
                    cd:86:f6:48:91:7b:c4:a0:63:44:56:84:cd:15:51:
                    4c:3c:dd:5e:62:6a:ca:ab:70:86:83:39:ae:07:0f:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:66:D5:58:E7:FE:1D:B6:C9:07:E7:A2:CD:A7:5A:62:F8:06:55:9E
            X509v3 Authority Key Identifier:
                keyid:91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1d:88:68:82:4e:00:8a:63:5a:7a:f9:a3:85:b7:af:22:78:
         e4:72:8f:59:a9:7d:28:a3:cb:a3:b9:1d:4f:d1:13:82:7b:b4:
         2a:ba:d6:38:5d:55:b4:6d:b4:ef:da:24:fc:f2:b8:79:1b:44:
         71:77:d8:25:f6:7c:8a:59:d0:ab:9f:3f:1b:57:50:b0:37:86:
         1d:16:0e:bc:67:eb:83:ee:77:85:8c:a2:d3:d6:f6:8c:cb:d9:
         53:21:60:98:fe:d0:83:2b:9f:40:cc:eb:9a:fc:24:05:d9:4e:
         30:83:be:52:62:ea:33:80:4c:b3:7d:3b:a5:86:2d:9d:b1:c8:
         3a:9f:04:d4:a6:6b:bc:02:08:f2:80:c3:83:9b:66:bf:48:66:
         7b:dd:47:11:c2:18:d7:e8:6f:08:2c:41:66:a1:39:29:10:d4:
         2e:98:20:70:91:8f:e5:59:d0:ea:26:b9:6f:b1:a0:4b:e4:bf:
         0a:07:bd:d1:c3:24:c5:19:86:2c:72:1b:6a:80:f7:8f:55:28:
         73:ba:27:b3:92:84:de:53:08:d5:5d:47:8a:8c:8c:fb:35:94:
         18:d7:ca:62:a3:c6:54:0a:cb:6c:7f:ae:d2:18:7f:e9:d2:77:
         76:eb:25:e0:d0:87:2c:50:d7:6f:ef:d1:17:ea:3a:ee:01:b0:
         e3:69:93:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:14 2026 by rpki-client