Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
File:                     KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft (raw, json)
Hash identifier:          ty2ue6GZHMnMFnCh8491N1Sgci36yeX9JZhopl6fra4=
Subject key identifier:   9B:A4:3D:5F:E1:32:35:10:B9:01:78:7E:35:A8:88:9F:A6:87:94:EF
Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8
Certificate issuer:       /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8
Certificate serial:       0723
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
Manifest number:          071A
Signing time:             Thu 16 Apr 2026 21:47:45 +0000
Manifest this update:     Thu 16 Apr 2026 21:47:45 +0000
Manifest next update:     Thu 23 Apr 2026 21:47:45 +0000
Files and hashes:         1: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl (hash: tbLCHHzWfAgpl+p5bX/azKxB2XOZcHQd5G2ezEIRxgo=)
                          2: 7883418E943A11EBB6706530C4F9AE02.roa (hash: SMXgd0Qe6A0+Zb1ETGRTYsNnB3dN/PWbVvtwDpEc6yw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl
                          rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1827 (0x723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91602ED, serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8
        Validity
            Not Before: Apr 16 21:47:45 2026 GMT
            Not After : Apr 23 21:47:45 2026 GMT
        Subject: CN=69e15901-5160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c0:2e:09:8c:2a:73:bc:44:9d:e5:9f:04:37:
                    70:e8:f1:06:57:9f:78:58:0b:51:28:99:bf:ba:de:
                    e6:b1:f9:d9:d6:97:95:57:c4:6b:b5:4d:70:83:6a:
                    aa:3f:c8:0a:d5:ac:ed:3a:a1:18:6e:5b:67:40:68:
                    dd:82:a8:f0:80:cf:10:da:f3:5e:28:6c:de:ed:81:
                    16:39:7e:10:24:60:ae:f6:f5:d2:d5:f1:97:da:ce:
                    23:df:af:ac:b5:67:e3:2f:90:94:ee:7c:38:1a:b0:
                    11:cc:e1:9d:41:79:67:a5:59:93:f8:17:68:36:2b:
                    d7:00:36:6a:3b:51:80:ce:dc:0e:71:53:65:93:8c:
                    49:8f:d4:68:38:ca:b9:b9:ee:f6:2f:a5:03:3e:50:
                    ea:c6:e9:c8:ed:e2:ef:f5:f0:b5:58:d1:86:a8:c2:
                    37:d9:f4:2c:40:c6:32:c7:79:2c:45:12:0b:8f:db:
                    a1:d8:71:92:7e:2c:e7:ca:63:55:af:91:a5:63:da:
                    49:08:a1:53:d2:b3:eb:90:73:2f:55:fc:0b:d3:db:
                    7c:5e:a4:8b:52:70:27:f9:92:cc:eb:2b:cb:8d:32:
                    ab:03:6a:fe:f2:5c:19:57:e6:3c:d1:2e:f0:5b:1e:
                    0d:d8:13:77:51:44:79:8a:5c:7c:43:9e:b1:36:2c:
                    ce:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A4:3D:5F:E1:32:35:10:B9:01:78:7E:35:A8:88:9F:A6:87:94:EF
            X509v3 Authority Key Identifier:
                keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cd:59:04:91:9a:f1:57:0d:ff:44:67:e0:a5:c5:2b:4f:5e:
         bd:d7:d1:3b:d9:97:e3:99:13:bc:c1:b8:08:21:1f:d5:30:e1:
         e0:c3:b3:34:7d:c9:07:d5:56:33:b6:a0:18:a8:21:3c:b7:33:
         5a:28:10:d6:27:d5:dd:dd:ca:74:a7:4e:e2:ef:7c:c0:98:d8:
         0f:56:98:05:07:50:a7:57:a7:77:55:cb:91:d0:b6:fd:8a:80:
         56:d9:56:59:0a:10:26:24:ea:dc:bc:a6:72:71:79:32:13:05:
         4c:72:75:2e:09:cd:49:44:c0:b0:6c:3a:bb:ce:65:0c:a5:cd:
         b4:1e:93:75:9e:f7:dc:d7:c0:6e:8f:a9:54:7f:a3:7d:dc:2f:
         8b:86:c6:00:f7:45:bb:72:0c:6c:88:14:4b:98:d6:a8:8f:0d:
         7c:43:90:1f:70:1a:8f:39:87:f5:98:98:80:9e:c5:f2:ba:1f:
         94:9a:fb:19:1d:6b:c3:32:58:ae:0e:de:ef:94:d0:66:cf:6d:
         89:fa:f9:8a:3b:eb:48:71:b4:20:c0:3d:71:40:a3:11:15:c9:
         2c:08:0c:05:86:89:5a:84:85:8b:87:fa:f3:83:86:e5:cd:54:
         e0:61:e4:9d:5e:0b:3e:4a:6e:fa:42:52:11:c1:df:87:b3:1a:
         ec:a9:66:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjAyRUQxMTAvBgNVBAUTKDI4NzUyOURDMjBDQTBFQ0U5NUE3QTU1NkUxMEJDREZE
NzIzN0Q4RDgwHhcNMjYwNDE2MjE0NzQ1WhcNMjYwNDIzMjE0NzQ1WjAYMRYwFAYD
VQQDEw02OWUxNTkwMS01MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA28AuCYwqc7xEneWfBDdw6PEGV594WAtRKJm/ut7msfnZ1peVV8RrtU1wg2qq
P8gK1aztOqEYbltnQGjdgqjwgM8Q2vNeKGze7YEWOX4QJGCu9vXS1fGX2s4j36+s
tWfjL5CU7nw4GrARzOGdQXlnpVmT+BdoNivXADZqO1GAztwOcVNlk4xJj9RoOMq5
ue72L6UDPlDqxunI7eLv9fC1WNGGqMI32fQsQMYyx3ksRRILj9uh2HGSfiznymNV
r5GlY9pJCKFT0rPrkHMvVfwL09t8XqSLUnAn+ZLM6yvLjTKrA2r+8lwZV+Y80S7w
Wx4N2BN3UUR5ilx8Q56xNizOlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJukPV/h
MjUQuQF4fjWoiJ+mh5TvMB8GA1UdIwQYMBaAFCh1Kdwgyg7OlaelVuELzf1yN9jY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDJFRC8xNjdCQzYzQzdD
MUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0RzNlZwNlZXNFF2Tl9YSTMy
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tIVXAzQ0RLRHM2VnA2Vlc0UXZOX1hJMzJOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDJFRC8xNjdCQzYzQzdDMUIxMUVCOUYzRjNDNjVDNEY5QUUwMi9LSFVwM0NES0Rz
NlZwNlZXNFF2Tl9YSTMyTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmc1ZBJGa8VcN/0Rn4KXFK09evdfRO9mX45kTvMG4CCEf1TDh4MOzNH3JB9VW
M7agGKghPLczWigQ1ifV3d3KdKdO4u98wJjYD1aYBQdQp1end1XLkdC2/YqAVtlW
WQoQJiTq3LymcnF5MhMFTHJ1LgnNSUTAsGw6u85lDKXNtB6TdZ733NfAbo+pVH+j
fdwvi4bGAPdFu3IMbIgUS5jWqI8NfEOQH3AajzmH9ZiYgJ7F8roflJr7GR1rwzJY
rg7e75TQZs9tifr5ijvrSHG0IMA9cUCjERXJLAgMBYaJWoSFi4f684OG5c1U4GHk
nV4LPkpu+kJSEcHfh7Ma7KlmVQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:33 2026 by rpki-client