Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
File:                     kXkVGVyXGrRB_d7eb_PNNy51TLU.mft (raw, json)
Hash identifier:          q2Ff0U/khIgN+VMZIqN+o8Ns3mSbSa4CyPvEI+Xr9s8=
Subject key identifier:   56:53:CA:E3:0A:BC:E5:FF:FC:36:9B:58:04:F4:0C:B7:D0:C3:47:68
Authority key identifier: 91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5
Certificate issuer:       /CN=A91795CA/serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5
Certificate serial:       06BF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
Manifest number:          06B9
Signing time:             Sat 28 Feb 2026 22:33:47 +0000
Manifest this update:     Sat 28 Feb 2026 22:33:46 +0000
Manifest next update:     Sat 07 Mar 2026 22:33:46 +0000
Files and hashes:         1: kXkVGVyXGrRB_d7eb_PNNy51TLU.crl (hash: S/4ksICaZ9XWjcVagUtLEHKYalFcC4kdvrZERU+HQYA=)
                          2: 2B8D76AE9BB711EBBB7BA02BC4F9AE02.roa (hash: aHkHq3prWV8PYM6R/1n0/cS3AolHN3tQt/aLI9yRoNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl
                          rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1727 (0x6bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91795CA, serialNumber=917915195C971AB441FDDEDE6FF3CD372E754CB5
        Validity
            Not Before: Feb 28 22:33:46 2026 GMT
            Not After : Mar  7 22:33:46 2026 GMT
        Subject: CN=69a36d4b-0931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:ad:92:91:63:65:bc:b0:ba:56:f1:a2:ec:
                    f3:ad:8d:86:e7:24:91:a0:59:00:fd:2d:5e:8f:5a:
                    d9:8c:49:df:27:bc:bb:25:b2:e9:01:82:b9:a7:c0:
                    d0:2a:0d:29:aa:9b:a0:b2:be:a4:65:bd:27:d6:c1:
                    91:bb:dc:13:41:e3:c8:02:2e:b5:c1:cf:9b:34:3f:
                    90:7f:d8:2e:79:df:8e:9d:91:9e:9a:eb:a1:ae:39:
                    9b:bf:48:d6:16:e4:31:f0:75:ba:c7:e6:e7:2a:56:
                    c2:e8:b3:6f:fa:4e:0c:ed:1d:f3:45:ec:a3:fe:fa:
                    0c:05:30:1a:50:d0:22:73:4c:54:57:2c:be:1e:9b:
                    db:43:81:b2:e5:8b:93:78:55:c7:71:23:f9:9f:e4:
                    30:94:6b:e7:b3:e1:2c:e2:09:fe:73:bc:da:e8:b8:
                    dc:e6:37:c9:78:f0:b4:d0:11:b8:cd:c2:e6:7b:dc:
                    39:95:18:21:20:48:18:d9:45:ba:f6:16:9b:5e:e9:
                    e1:98:48:e8:d5:e8:85:3d:50:cc:39:54:be:eb:1b:
                    83:cc:24:9c:98:59:3f:ab:fe:b7:12:d5:67:dc:0c:
                    0d:b2:ae:ab:06:75:b6:75:ee:74:61:72:6f:21:4c:
                    98:68:3f:c7:6e:4f:f8:91:93:75:e9:ce:c7:3e:a8:
                    55:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:53:CA:E3:0A:BC:E5:FF:FC:36:9B:58:04:F4:0C:B7:D0:C3:47:68
            X509v3 Authority Key Identifier:
                keyid:91:79:15:19:5C:97:1A:B4:41:FD:DE:DE:6F:F3:CD:37:2E:75:4C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kXkVGVyXGrRB_d7eb_PNNy51TLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/63473756980611EBA87E2765C4F9AE02/kXkVGVyXGrRB_d7eb_PNNy51TLU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:06:c1:3a:8c:2d:72:72:3b:ad:40:d3:9f:6e:26:f4:71:13:
         01:c0:4c:53:20:ee:68:0c:cf:ff:03:4f:92:6e:31:4a:0d:57:
         57:85:29:39:6f:76:a8:fe:fd:bb:fc:ed:db:01:68:d5:56:bb:
         98:7d:77:7c:d7:da:18:87:20:14:1a:0d:cd:0b:16:93:c0:4d:
         e1:4e:5f:5b:44:b2:b1:4c:e6:30:88:d6:53:3f:29:d9:47:e7:
         c7:b8:38:88:65:9b:c1:16:42:06:9c:d0:71:82:7c:46:f1:2f:
         b6:af:ab:61:88:96:d9:09:e6:a4:95:6a:c5:de:8a:2a:03:d4:
         6a:11:e2:7b:4e:0e:fb:0f:7b:69:66:07:7c:81:20:09:34:02:
         9a:40:44:2d:32:28:38:0c:d8:57:f4:62:ba:ac:ee:6b:fe:a7:
         cf:07:64:e4:74:d7:2e:31:a7:ca:11:6a:cd:89:ae:59:08:79:
         be:c0:7d:72:07:dc:29:73:ad:9e:e8:82:be:76:4c:8f:12:78:
         c6:69:35:60:6a:9e:93:9a:77:95:e6:b0:b3:a3:45:20:8c:f1:
         2a:e8:68:ba:1e:ae:6b:b5:92:f1:4d:b8:c0:b2:e9:5f:3c:a9:
         1b:6b:69:19:8f:32:98:e6:bd:0b:62:f6:8f:60:c6:da:11:a4:
         78:c7:0c:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk1Q0ExMTAvBgNVBAUTKDkxNzkxNTE5NUM5NzFBQjQ0MUZEREVERTZGRjNDRDM3
MkU3NTRDQjUwHhcNMjYwMjI4MjIzMzQ2WhcNMjYwMzA3MjIzMzQ2WjAYMRYwFAYD
VQQDDA02OWEzNmQ0Yi0wOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyd2tkpFjZbywulbxouzzrY2G5ySRoFkA/S1ej1rZjEnfJ7y7JbLpAYK5p8DQ
Kg0pqpugsr6kZb0n1sGRu9wTQePIAi61wc+bND+Qf9gued+OnZGemuuhrjmbv0jW
FuQx8HW6x+bnKlbC6LNv+k4M7R3zReyj/voMBTAaUNAic0xUVyy+HpvbQ4Gy5YuT
eFXHcSP5n+QwlGvns+Es4gn+c7za6Ljc5jfJePC00BG4zcLme9w5lRghIEgY2UW6
9habXunhmEjo1eiFPVDMOVS+6xuDzCScmFk/q/63EtVn3AwNsq6rBnW2de50YXJv
IUyYaD/Hbk/4kZN16c7HPqhVpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFZTyuMK
vOX//DabWAT0DLfQw0doMB8GA1UdIwQYMBaAFJF5FRlclxq0Qf3e3m/zzTcudUy1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS82MzQ3Mzc1Njk4
MDYxMUVCQTg3RTI3NjVDNEY5QUUwMi9rWGtWR1Z5WEdyUkJfZDdlYl9QTk55NTFU
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2tYa1ZHVnlYR3JSQl9kN2ViX1BOTnk1MVRMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OTVDQS82MzQ3Mzc1Njk4MDYxMUVCQTg3RTI3NjVDNEY5QUUwMi9rWGtWR1Z5WEdy
UkJfZDdlYl9QTk55NTFUTFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIgbBOowtcnI7rUDTn24m9HETAcBMUyDuaAzP/wNPkm4xSg1XV4UpOW92qP79
u/zt2wFo1Va7mH13fNfaGIcgFBoNzQsWk8BN4U5fW0SysUzmMIjWUz8p2Ufnx7g4
iGWbwRZCBpzQcYJ8RvEvtq+rYYiW2QnmpJVqxd6KKgPUahHie04O+w97aWYHfIEg
CTQCmkBELTIoOAzYV/Riuqzua/6nzwdk5HTXLjGnyhFqzYmuWQh5vsB9cgfcKXOt
nuiCvnZMjxJ4xmk1YGqek5p3leaws6NFIIzxKuhouh6ua7WS8U24wLLpXzypG2tp
GY8ymOa9C2L2j2DG2hGkeMcMCg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:11 2026 by rpki-client