Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
File:                     kDo4Q2eaCxBdykhcPWSPPREnL7c.mft (raw, json)
Hash identifier:          Dn8fUeCi3nVvRn7sB1mP9ttSsC3m0xdLtfAW4rmKVyI=
Subject key identifier:   77:07:3B:5C:21:E5:53:2A:30:68:3A:F8:B2:E6:70:67:7B:95:6C:F0
Authority key identifier: 90:3A:38:43:67:9A:0B:10:5D:CA:48:5C:3D:64:8F:3D:11:27:2F:B7
Certificate issuer:       /CN=A914E488/serialNumber=903A3843679A0B105DCA485C3D648F3D11272FB7
Certificate serial:       02EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
Manifest number:          02E6
Signing time:             Fri 17 Apr 2026 01:12:41 +0000
Manifest this update:     Fri 17 Apr 2026 01:12:40 +0000
Manifest next update:     Fri 24 Apr 2026 01:12:40 +0000
Files and hashes:         1: kDo4Q2eaCxBdykhcPWSPPREnL7c.crl (hash: LWmFvV/ikGvD6eO0Vu3+Ub+pJXCFoms5qixTcQE3y2g=)
                          2: 606EB6AE240911EDBFA59C27C4F9AE02.roa (hash: y0ST3jicOFeoOm4ci3jzTwTh4YCFr/Le+YQuGUog5Hg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.crl
                          rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:12:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E488, serialNumber=903A3843679A0B105DCA485C3D648F3D11272FB7
        Validity
            Not Before: Apr 17 01:12:40 2026 GMT
            Not After : Apr 24 01:12:40 2026 GMT
        Subject: CN=69e18909-4e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:c5:c4:4c:33:71:1f:f4:46:40:85:f4:fd:
                    2f:97:69:ef:fb:6e:40:83:2d:d9:b4:21:55:ce:b8:
                    71:9f:f2:0b:7c:9f:46:96:be:70:44:eb:40:8f:5d:
                    13:ab:72:eb:9a:80:39:ab:8f:b4:4a:0f:6f:27:85:
                    c8:69:7f:68:1a:57:0d:0e:62:08:22:b1:ca:43:67:
                    ac:57:30:e6:4e:78:1e:fc:ae:06:52:86:49:84:ab:
                    4e:a8:c3:07:ab:ee:e1:54:67:07:cc:b2:ca:45:1a:
                    8f:e4:f6:d1:de:93:27:e4:42:86:25:fc:c8:08:7f:
                    45:d3:29:54:02:b0:4b:33:0b:d1:d3:ae:eb:63:db:
                    1d:bd:df:09:62:a0:04:8d:7b:41:62:b4:26:d9:45:
                    8f:bc:60:01:b3:38:20:d2:03:87:3a:bd:7f:2c:32:
                    d1:9d:dd:fb:9c:42:de:6d:19:ce:f6:8a:d3:08:4a:
                    01:98:b0:2c:34:41:f1:f2:b5:61:73:9a:fc:fe:2b:
                    ee:48:9f:76:f1:09:45:6b:3b:11:8f:ca:1b:7d:19:
                    1d:c4:20:82:ab:f6:8b:f4:a1:4e:29:48:3f:5c:89:
                    64:a4:19:3e:5b:89:2c:ab:db:5a:da:02:76:54:08:
                    28:ad:bb:09:e8:e6:c2:e3:99:a8:67:73:56:78:15:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:07:3B:5C:21:E5:53:2A:30:68:3A:F8:B2:E6:70:67:7B:95:6C:F0
            X509v3 Authority Key Identifier:
                keyid:90:3A:38:43:67:9A:0B:10:5D:CA:48:5C:3D:64:8F:3D:11:27:2F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:00:0d:21:3b:9f:75:1e:9f:54:1c:c3:8e:b1:ee:80:ba:44:
         7e:f5:8d:39:39:3c:02:da:e2:c9:82:a8:c2:52:8b:22:1a:1a:
         5b:ce:2b:73:f2:18:ce:80:47:67:e7:d6:c7:33:ac:d7:9b:dc:
         8c:bf:f0:fa:27:3d:87:27:d2:b1:fd:f2:bd:c9:f3:b6:64:84:
         d5:19:fe:42:3e:f5:64:01:fc:3f:61:00:ff:82:db:34:08:4b:
         29:1c:87:0c:c9:f7:8f:c3:85:f9:88:3c:64:e1:a7:ed:e0:9d:
         33:9b:0c:33:99:c8:54:5d:2a:0b:f5:b8:9a:f7:c7:b4:ee:40:
         c0:28:15:06:52:b0:35:0d:29:67:1f:48:7b:55:f0:d8:6b:38:
         fb:40:8d:30:80:fa:30:43:61:31:d1:6b:5b:79:7e:c8:a9:3b:
         dd:13:1c:12:59:72:7a:b8:54:94:08:2c:e7:e1:bd:a7:78:c5:
         b2:d9:65:a3:e4:85:75:73:cd:9a:38:c0:79:24:33:a9:da:08:
         4b:23:4c:87:5d:80:c3:4b:85:4a:be:70:2d:65:4f:6a:19:63:
         b3:51:d5:a0:da:7e:39:11:51:5f:6b:bd:d7:74:9b:b1:95:28:
         e9:ed:cf:50:db:09:59:f9:60:18:02:ac:b2:cb:11:02:a4:2b:
         2a:85:98:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:06 2026 by rpki-client