Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
File:                     pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json)
Hash identifier:          HOf/usHkYPRhcGS/DJNWMDMks8z7KuRSYUReHnogCPs=
Subject key identifier:   35:BF:2F:32:FA:81:CC:92:73:32:C8:8E:83:AA:AF:3D:99:B5:70:72
Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C
Certificate issuer:       /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
Manifest number:          0107
Signing time:             Thu 16 Apr 2026 18:55:58 +0000
Manifest this update:     Thu 16 Apr 2026 18:55:57 +0000
Manifest next update:     Thu 23 Apr 2026 18:55:57 +0000
Files and hashes:         1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: 7e32gV1K+TUHhOpxzosTGFZWOOO4iTZ7+gUHNt9o6xw=)
                          2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: pkoy3XTlYyZ8zRpQAksJG/nCLkfVOV6ccFZKSXm/Z5A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl
                          rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
        Validity
            Not Before: Apr 16 18:55:57 2026 GMT
            Not After : Apr 23 18:55:57 2026 GMT
        Subject: CN=69e130be-5e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:2f:cf:41:ac:04:ef:ce:e0:5d:9b:19:2c:
                    de:a3:5e:2b:91:0e:4e:3a:57:8f:ff:2f:09:c2:c0:
                    d5:a2:73:b3:f1:59:c6:9d:1e:0b:70:58:a5:48:d1:
                    70:6a:fe:e9:62:92:77:d3:a7:24:a8:ae:e6:1d:be:
                    cd:e3:1c:c6:9c:d2:9e:b4:b9:fe:34:9b:09:98:2e:
                    0c:fe:20:b8:9e:08:59:74:ac:b9:af:f3:70:b2:62:
                    c5:9e:bb:b4:53:06:29:43:6f:45:ba:cf:4a:58:6a:
                    e8:22:79:54:c6:c9:8e:51:35:94:74:35:24:21:39:
                    4f:e0:cc:d0:b3:bb:4d:34:1a:33:0b:37:ee:ec:94:
                    5a:4a:91:91:77:bc:51:e4:3d:92:ac:8f:68:70:ac:
                    4d:70:1f:9d:76:ab:4c:ca:05:25:79:91:bd:a3:eb:
                    c8:ec:5b:68:0f:14:6b:e0:aa:69:c7:48:86:58:21:
                    cd:f4:27:47:f9:89:1a:09:07:96:88:01:10:0f:29:
                    4d:7f:a5:6e:c6:0b:2a:e4:8c:11:86:b2:d6:c3:b6:
                    a5:cb:c1:47:30:26:24:0d:fe:4c:ac:5c:ee:1d:2e:
                    60:79:70:f6:3d:5f:1d:68:cc:f3:55:49:66:e6:76:
                    42:46:06:49:da:4c:79:7e:58:70:40:63:a7:df:23:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BF:2F:32:FA:81:CC:92:73:32:C8:8E:83:AA:AF:3D:99:B5:70:72
            X509v3 Authority Key Identifier:
                keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:3e:fc:cf:e4:9c:08:2b:0d:6b:27:76:ac:a3:d2:f1:a8:73:
         94:aa:c0:23:04:0b:20:f7:30:f3:95:1b:ab:7e:8b:34:de:09:
         0c:76:e7:b9:c6:c5:e8:27:00:b8:90:56:46:68:94:de:9c:f2:
         3e:e1:fe:11:5d:01:65:a3:0e:de:5f:61:e3:d3:56:07:96:27:
         bf:e8:09:a8:cf:30:14:85:6d:cb:89:ab:58:78:04:65:ed:36:
         d2:ae:3b:81:46:4f:98:6c:54:c2:9a:8d:a4:61:2b:65:7d:06:
         ba:f1:60:e7:e5:bc:db:23:2e:50:2c:ef:0d:f9:94:79:35:58:
         d0:4a:8a:0b:d0:30:a0:13:94:92:bd:5a:01:aa:a7:2f:74:e7:
         e3:bf:cf:8c:c9:2b:c9:65:16:43:50:92:e5:01:fc:00:cf:71:
         9d:ec:cf:0b:62:1c:f3:03:60:1c:ee:0a:d6:3c:74:96:83:ef:
         6f:76:fd:4c:ff:7a:2a:a0:f2:65:dd:ee:46:4c:d5:d3:9d:db:
         f9:92:d8:e4:61:ef:a3:20:62:b7:5a:ae:49:7c:93:dd:87:7d:
         2d:00:2f:40:35:2e:5d:ec:78:2d:5a:36:a2:a1:6e:78:cb:9a:
         c0:29:66:94:62:47:a9:e4:51:d7:f8:c0:47:db:b3:7a:66:d2:
         6d:fa:d7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:26:56 2026 by rpki-client