Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
File:                     kTeon0YQ2uLIjGlNyVLOWDVScHk.mft (raw, json)
Hash identifier:          60qvIOOpfNvXNCf07vFRipEDFbb2i3YVBRkPqpAs4Xs=
Subject key identifier:   17:39:0E:59:86:95:71:F1:9C:CC:2D:01:2A:A4:33:CA:99:7D:B2:42
Authority key identifier: 91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79
Certificate issuer:       /CN=A913F8BC/serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079
Certificate serial:       1095
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
Manifest number:          1085
Signing time:             Thu 16 Apr 2026 17:18:30 +0000
Manifest this update:     Thu 16 Apr 2026 17:18:29 +0000
Manifest next update:     Thu 23 Apr 2026 17:18:29 +0000
Files and hashes:         1: kTeon0YQ2uLIjGlNyVLOWDVScHk.crl (hash: BCxm/6hLuwYomR02I+6U9HRrl2eeHhXf5p2rJ6ysJP4=)
                          2: E9056E5A520611E9ABE43055C4F9AE02.roa (hash: RzwYZuvd4XyjCOm9BluFD+cQ9dlkUBoYuq3X1xwqlGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl
                          rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4245 (0x1095)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F8BC, serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079
        Validity
            Not Before: Apr 16 17:18:29 2026 GMT
            Not After : Apr 23 17:18:29 2026 GMT
        Subject: CN=69e119e6-385b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:36:8e:cd:3b:29:d5:a0:2f:a4:98:06:9c:ce:
                    09:68:48:ac:96:56:21:e5:7d:9a:7c:b2:ee:32:35:
                    97:43:07:68:78:bd:88:c2:82:2a:ba:cb:3b:cf:56:
                    cd:42:bf:68:c5:c7:25:0b:52:b4:81:94:ac:62:d3:
                    a8:11:5c:72:3b:ff:37:61:8a:da:68:1a:70:16:74:
                    dc:33:ef:aa:dc:42:72:a7:6d:98:07:41:2b:ed:19:
                    a3:a9:fb:10:d0:5e:06:e2:f0:12:15:1f:44:82:6f:
                    48:06:76:c1:96:35:47:49:11:78:91:e4:4c:8e:4c:
                    79:ca:47:37:93:a1:50:03:33:88:78:82:f1:94:8c:
                    66:1e:28:30:12:45:5e:79:39:0f:81:3b:ed:60:f1:
                    4f:9b:b5:9d:7f:b4:12:20:8f:60:6e:f8:ce:ef:fd:
                    59:df:f0:3d:6b:33:2d:3c:ac:eb:8b:a2:ec:73:20:
                    94:79:38:ec:e3:63:b8:4a:81:30:dd:36:33:46:1b:
                    b2:15:d8:80:c1:13:24:21:51:13:7b:3f:18:ab:c4:
                    f6:ae:2f:79:54:aa:38:e7:4f:c0:70:62:a5:71:ba:
                    9b:1a:f0:89:85:d0:7d:47:d7:c4:f4:3a:23:a9:f6:
                    71:21:49:cd:ac:f6:16:0c:fb:a1:d5:25:c0:b8:e0:
                    ba:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:39:0E:59:86:95:71:F1:9C:CC:2D:01:2A:A4:33:CA:99:7D:B2:42
            X509v3 Authority Key Identifier:
                keyid:91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:55:9d:ba:bc:d0:41:5c:22:de:7c:0e:50:e7:c2:89:4a:1b:
         0e:dd:62:2d:5f:af:cc:64:d4:11:76:24:9e:ea:25:18:7f:9a:
         6a:6a:db:21:23:78:63:bb:be:cb:c7:bd:49:22:8a:f3:bb:c6:
         b1:73:f3:16:87:a5:62:3c:1f:ff:3b:28:7c:fa:4d:55:2e:05:
         c0:18:06:cc:06:68:a7:63:cc:c7:54:bd:42:b8:9f:ed:8b:b7:
         0c:b7:66:ea:31:c8:d3:0c:9c:35:89:fe:79:a9:eb:ad:12:62:
         87:aa:46:b4:c2:54:57:bc:d0:7f:5d:36:d5:45:94:62:52:6d:
         0b:60:92:e0:9a:cf:28:7f:11:41:47:00:e0:35:92:d4:dc:42:
         22:94:5c:d0:90:34:8f:e7:c7:88:d2:ff:18:e2:0f:c2:d4:30:
         59:91:c9:fc:e1:86:f4:cf:7a:26:82:14:1e:e0:85:32:1b:72:
         e1:de:72:ba:44:c1:34:2b:ec:76:97:22:0e:ab:32:b9:eb:0a:
         aa:41:8a:c7:08:43:dc:4c:af:54:31:db:59:67:97:16:09:43:
         e1:95:ff:e1:e5:f5:94:95:fe:89:a3:4d:ec:b4:fe:26:17:11:
         d0:2d:23:aa:c2:02:03:1f:c3:0c:2e:31:f3:1d:b1:d8:99:7d:
         99:59:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:42 2026 by rpki-client