Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
File:                     kB-Ykfv38n1Bah7gazGwFlquHcU.mft (raw, json)
Hash identifier:          ucPbUipdetyXKQoHMq8vyZTQjbWG0bT4XaFHz17chSs=
Subject key identifier:   47:54:00:77:6E:77:C1:21:CB:52:81:DA:D0:0B:85:2F:EE:F1:54:E3
Authority key identifier: 90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5
Certificate issuer:       /CN=A9132D93/serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5
Certificate serial:       0491
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
Manifest number:          048B
Signing time:             Thu 16 Apr 2026 23:55:13 +0000
Manifest this update:     Thu 16 Apr 2026 23:55:13 +0000
Manifest next update:     Thu 23 Apr 2026 23:55:13 +0000
Files and hashes:         1: kB-Ykfv38n1Bah7gazGwFlquHcU.crl (hash: sPtAn+ZHnGN/9HTH2jwtK8nJ4zTkzc1uo6UhQkiNV6A=)
                          2: 4E0503CA7F3F11ECBB0EA972C4F9AE02.roa (hash: 2diXZhIHeiTIXtGE7hgkGrF2mxwMF4mve/3rvi/DmaA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl
                          rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132D93, serialNumber=901F9891FBF7F27D416A1EE06B31B0165AAE1DC5
        Validity
            Not Before: Apr 16 23:55:13 2026 GMT
            Not After : Apr 23 23:55:13 2026 GMT
        Subject: CN=69e176e1-1d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:23:7d:43:54:d5:d8:a8:d8:23:fb:a7:e8:11:
                    c2:63:66:80:38:72:5c:d6:f8:87:18:e6:df:1a:5f:
                    ff:a6:66:8c:2b:2a:c1:51:88:7e:6b:36:a7:b4:ba:
                    bd:f6:03:8f:22:ef:ed:64:c3:8a:fa:ff:2e:75:c6:
                    a3:3a:f9:9b:a9:c1:42:dd:73:dd:c2:5b:7b:c1:20:
                    4d:78:4e:d2:3f:e1:ba:f8:25:2d:96:22:a6:8e:40:
                    05:4e:f0:a9:c1:33:a8:68:f8:c0:80:aa:da:f8:78:
                    5f:11:41:2e:06:c0:65:44:43:bc:19:09:e3:4b:2a:
                    36:84:57:b2:b6:e6:15:ab:b1:fb:64:ef:c7:13:31:
                    e4:47:c0:3f:a0:ea:4e:ab:aa:b6:29:47:50:eb:76:
                    f1:dd:8a:a4:19:ad:73:c6:31:fe:c6:30:ff:83:66:
                    b9:58:80:6e:ba:5a:d4:d4:79:40:c4:e7:75:fa:1b:
                    76:a3:9f:3f:d4:d3:5a:9c:58:0a:a5:10:c0:e1:90:
                    da:a3:43:db:14:95:25:ec:02:3a:4b:35:61:61:cb:
                    2a:de:fe:f4:00:86:4e:b9:d0:89:ed:a3:5d:94:96:
                    30:3e:02:6d:3c:fa:96:11:c9:fe:0a:1f:59:8a:a4:
                    eb:88:35:e0:d3:37:78:9d:d4:08:d6:20:04:7e:f0:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:54:00:77:6E:77:C1:21:CB:52:81:DA:D0:0B:85:2F:EE:F1:54:E3
            X509v3 Authority Key Identifier:
                keyid:90:1F:98:91:FB:F7:F2:7D:41:6A:1E:E0:6B:31:B0:16:5A:AE:1D:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kB-Ykfv38n1Bah7gazGwFlquHcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132D93/0F874A747F3D11EC8A1DCC71C4F9AE02/kB-Ykfv38n1Bah7gazGwFlquHcU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5c:46:52:a2:0f:91:b4:03:9f:df:be:fe:57:22:36:19:e9:
         23:80:2c:3c:fb:af:b2:e7:ef:0c:72:5a:6d:b3:af:e6:5c:85:
         bc:27:30:8f:23:33:27:90:2c:48:f2:20:e7:6c:e4:3e:e8:29:
         c8:85:29:2f:75:b0:94:e1:df:92:f1:41:80:d9:5e:c4:66:ee:
         b5:62:e4:81:c8:db:b0:fb:e5:05:10:35:9f:b8:37:f4:5e:a7:
         d2:a9:3d:9b:fe:5a:15:5f:d2:42:d2:1b:0f:b9:f3:99:c2:6e:
         9f:da:1b:3e:23:15:4e:c8:7a:66:f9:87:dc:58:b8:a3:25:23:
         2d:e1:39:8d:f2:bb:8c:14:b6:a9:d8:95:cf:81:39:63:dc:de:
         26:37:d2:a4:23:16:f1:c5:b0:fd:3d:1f:35:70:20:d7:3a:ee:
         ae:40:bf:79:a9:85:fa:56:4c:0a:0d:fa:52:02:16:86:dd:55:
         7c:77:53:fb:4c:6f:6d:ca:73:8f:a5:8c:9e:22:d6:c8:de:dc:
         17:3c:80:20:ad:e7:59:41:4f:72:ba:a6:15:d3:4b:dd:c2:a8:
         9a:55:eb:84:65:b1:77:4f:d0:df:b6:39:09:35:33:46:ab:f9:
         ec:11:ee:91:0f:36:d1:42:2c:65:b8:15:49:ce:14:9a:9b:26:
         51:a6:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:53 2026 by rpki-client