Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft
File:                     knWZPcnEM_JdNYCsd-OV0GaWSD0.mft (raw, json)
Hash identifier:          gaFaAzVs88PjMgsv6vfkDZLTXT64kaixfOQqkl2UKSU=
Subject key identifier:   21:90:2C:8F:3B:DB:20:62:AE:B0:2A:4A:42:72:9A:45:74:07:2A:7A
Authority key identifier: 92:75:99:3D:C9:C4:33:F2:5D:35:80:AC:77:E3:95:D0:66:96:48:3D
Certificate issuer:       /CN=A91276A3/serialNumber=9275993DC9C433F25D3580AC77E395D06696483D
Certificate serial:       0779
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft
Manifest number:          076F
Signing time:             Sat 28 Feb 2026 22:04:42 +0000
Manifest this update:     Sat 28 Feb 2026 22:04:41 +0000
Manifest next update:     Sat 07 Mar 2026 22:04:41 +0000
Files and hashes:         1: knWZPcnEM_JdNYCsd-OV0GaWSD0.crl (hash: AuWjIqpmUIrTWHjCs8icCOd9ctGoEALev0sjPvX4+wI=)
                          2: 57BAE77C517D11EB8949D438C4F9AE02.roa (hash: vb9o8zIrEVzx4v17rwtm5KylYiP5uvQUJ9LusllPhN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.crl
                          rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913 (0x779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91276A3, serialNumber=9275993DC9C433F25D3580AC77E395D06696483D
        Validity
            Not Before: Feb 28 22:04:41 2026 GMT
            Not After : Mar  7 22:04:41 2026 GMT
        Subject: CN=69a3667a-311b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:94:db:08:05:03:60:b5:ff:5b:2d:22:9f:3d:
                    ff:7d:c3:71:8a:50:0c:69:67:6e:c9:81:4f:f7:bb:
                    1f:50:d5:ab:f6:b3:3a:18:44:59:65:80:dd:06:2f:
                    e1:e1:18:b1:2a:f2:29:55:76:0a:5c:5b:2b:30:6a:
                    d5:52:70:27:a9:35:02:4d:42:86:28:1c:a0:3f:e3:
                    4b:92:05:c6:28:26:2d:93:59:82:e6:ba:2c:40:61:
                    69:fc:6e:18:b2:f1:1c:58:0b:81:ab:39:1c:62:91:
                    84:03:f2:1a:9e:15:1c:0c:cb:e1:2a:70:6f:ec:8b:
                    cd:15:53:b3:28:73:7a:87:b7:32:a9:11:44:2f:3d:
                    13:b1:c5:a0:32:10:8e:16:e7:c3:c2:c4:b0:e0:68:
                    d6:e4:75:0b:4e:f2:8a:2b:41:df:39:bc:23:53:f8:
                    f4:21:28:c5:d4:2f:ab:da:c9:15:5b:a3:7a:a4:9a:
                    2d:d5:ab:4f:f3:96:f2:75:c0:c0:12:6d:0b:3e:94:
                    da:58:75:ef:80:2e:07:de:89:8f:9a:ff:2e:10:37:
                    af:ab:38:54:c6:38:3a:00:ac:66:e1:5d:12:f4:9a:
                    d8:d7:7d:28:5d:58:88:4b:52:98:c6:d0:ee:44:d2:
                    10:8f:2d:d6:83:b2:bd:e3:4d:c9:38:6c:4a:33:3c:
                    97:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:90:2C:8F:3B:DB:20:62:AE:B0:2A:4A:42:72:9A:45:74:07:2A:7A
            X509v3 Authority Key Identifier:
                keyid:92:75:99:3D:C9:C4:33:F2:5D:35:80:AC:77:E3:95:D0:66:96:48:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:41:95:c5:01:10:6e:2c:06:8c:57:ad:16:ba:08:db:af:31:
         60:d9:a7:35:7e:0e:81:ec:0b:0a:2e:e3:a9:40:cb:57:1b:42:
         22:33:1a:b5:a0:24:a2:57:eb:8b:2d:18:ce:b0:22:23:61:c0:
         14:fc:4f:16:a0:ca:c3:74:85:53:f0:9f:a3:cb:0b:a2:8a:b5:
         82:07:b8:9d:60:0b:06:eb:8e:60:d2:b4:5c:d2:ac:0b:2f:4d:
         4c:89:75:13:1c:aa:3a:42:62:a1:8c:cc:9e:be:63:84:46:bb:
         b6:30:ff:20:b6:41:d6:a9:78:5d:3d:1b:b3:33:b6:8b:af:96:
         b5:5f:77:86:0e:cc:db:61:91:ce:19:b6:f9:e3:47:da:1b:29:
         74:6d:9d:d3:eb:ae:09:bf:db:be:4a:b3:4e:1c:56:72:bf:57:
         ab:f8:20:99:19:70:14:7d:05:f1:52:59:63:c3:88:21:49:e3:
         f8:81:96:41:92:b3:70:85:c4:1d:3c:16:23:4c:b1:30:b7:9d:
         21:9e:73:5d:ad:87:c9:f1:08:93:ed:fc:4b:fe:d8:e3:d6:f6:
         55:bb:82:02:a2:dd:26:26:1f:3a:d2:49:81:ba:f5:2a:25:04:
         35:87:61:a1:cc:fb:0d:f6:40:5d:e3:aa:73:43:5d:48:dd:7d:
         f4:6a:7f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:26 2026 by rpki-client