Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
File:                     kB-Ykfv38n1Bah7gazGwFlquHcU.mft (raw, json)
Hash identifier:          UvBNs5qbSj1hMfJGDRAvl2jPcjbyhbouO4VEOum7Sas=
Subject key identifier:   86:94:6A:A9:10:C9:4F:35:D3:6E:14:18:8E:D8:45:12:A4:9C:7C:2C
Authority key identifier: 90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5
Certificate issuer:       /CN=A9132D93/serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5
Certificate serial:       0476
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
Manifest number:          0471
Signing time:             Mon 02 Mar 2026 02:56:53 +0000
Manifest this update:     Mon 02 Mar 2026 02:56:52 +0000
Manifest next update:     Mon 09 Mar 2026 02:56:52 +0000
Files and hashes:         1: kB-Ykfv38n1Bah7gazGwFlquHcU.crl (hash: USEuKuiH/4iJStm+xFyQwvZJ1fIfgff9sTXJ+seHjws=)
                          2: 4E0503CA7F3F11ECBB0EA972C4F9AE02.roa (hash: VhGEnB8PzGlt9u4SaXKINqITdxnpUz15HT6SZJLBQQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl
                          rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1142 (0x476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132D93, serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5
        Validity
            Not Before: Mar  2 02:56:52 2026 GMT
            Not After : Mar  9 02:56:52 2026 GMT
        Subject: CN=69a4fc75-3dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:39:9a:d5:42:09:28:61:1a:20:03:01:2d:6c:
                    c7:95:eb:ec:fc:4c:4e:13:c5:f0:be:f1:46:06:3e:
                    36:8c:eb:a6:b9:cb:75:5c:db:8b:a0:57:f7:f7:1c:
                    10:40:8d:e9:14:d5:41:bb:eb:2e:66:83:6f:e5:2a:
                    26:32:2f:97:39:01:b3:64:3d:43:1e:74:af:62:da:
                    c0:f6:18:a9:2e:68:9b:6a:60:5c:4a:29:3f:ed:e1:
                    0a:b9:60:80:de:7b:4d:bd:65:18:ad:46:cd:f9:cb:
                    7a:7c:3d:9a:5a:af:ed:30:da:03:ba:ed:3c:7f:c4:
                    0e:9b:b2:68:ce:71:d6:de:36:d0:d3:de:0f:94:db:
                    47:06:6f:36:7d:95:a5:73:df:2c:d7:5f:29:f2:1c:
                    c3:a5:47:60:79:41:3c:5a:38:25:f6:5f:12:70:20:
                    9e:5f:b7:d8:ad:91:61:e8:50:9b:77:3e:3c:11:17:
                    ee:de:9c:e4:0b:8b:1c:5b:70:2a:06:ee:9a:38:a1:
                    bb:27:20:0d:ce:6f:d4:05:f7:f2:56:97:14:28:e5:
                    28:06:fb:09:4b:b4:80:67:ec:a3:25:1b:ae:88:bf:
                    21:85:83:a8:88:50:63:f0:db:42:50:d8:42:f3:aa:
                    73:8a:5c:4b:67:80:05:e3:bb:97:58:ec:10:a7:fc:
                    ed:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:94:6A:A9:10:C9:4F:35:D3:6E:14:18:8E:D8:45:12:A4:9C:7C:2C
            X509v3 Authority Key Identifier:
                keyid:90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b6:29:e3:2d:00:bb:dc:61:d0:ef:5a:d9:15:af:6b:6e:aa:
         e1:73:d9:f9:8f:f0:99:6c:0d:23:57:27:9f:03:f2:fb:df:3e:
         11:d0:4a:b6:c5:79:a2:2a:ae:00:b7:5d:cf:66:ae:a2:1c:11:
         7b:c6:f5:4c:12:2a:61:f3:83:f2:4c:0b:cc:e3:08:84:2d:2c:
         25:c7:9c:99:10:a6:53:61:cd:f4:5e:28:6b:37:6b:d5:cb:99:
         ba:47:a1:d1:0f:3e:f2:29:cc:19:f2:f5:10:a2:8d:da:49:6b:
         10:46:09:96:93:fa:b2:e3:42:6d:96:9a:ef:39:00:1b:43:7c:
         41:ad:94:08:c1:03:18:89:68:b0:b4:4c:8c:ac:55:f4:c4:74:
         b3:86:81:f7:85:f0:31:2a:6f:dc:82:5b:c2:77:ca:2b:72:c8:
         29:0a:06:34:90:67:fa:bc:60:f5:59:23:07:fa:93:d4:e0:1e:
         dc:8e:99:9a:9b:86:7c:3a:fd:48:04:a9:8e:f5:8b:b8:0f:63:
         49:67:41:5d:5a:76:ae:80:a3:2c:56:42:e5:01:44:c8:3c:45:
         35:cd:71:3b:da:36:32:91:33:fb:fd:16:6e:a8:fa:b3:6c:07:
         9a:bc:ce:98:6f:63:fe:0c:7b:be:6d:12:73:ad:f1:43:d0:23:
         a7:d0:0e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:49:58 2026 by rpki-client