Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
File:                     kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json)
Hash identifier:          pvRwGVUltGuT8/JmhggSKcrvzEDykA+a7cfA68nIQV4=
Subject key identifier:   82:53:73:AE:07:71:22:A4:23:0C:49:79:3B:BA:36:58:16:FB:3D:ED
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Certificate issuer:       /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial:       0675
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
Manifest number:          066B
Signing time:             Sat 28 Feb 2026 23:19:31 +0000
Manifest this update:     Sat 28 Feb 2026 23:19:31 +0000
Manifest next update:     Sat 07 Mar 2026 23:19:31 +0000
Files and hashes:         1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: jVUHzS3xkVQ8lKmhIdO/rHLGDdhYR7720Fw3dRD09FI=)
                          2: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: sGBsBvvjVOXcMSvoZxggTWP1eTxexWQrQGaZYHB+t3U=)
                          3: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: LhygQeRm6YFYDIJnZGRWnfS4FcTKob82snKec/R1Ja0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
                          rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1653 (0x675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
        Validity
            Not Before: Feb 28 23:19:31 2026 GMT
            Not After : Mar  7 23:19:31 2026 GMT
        Subject: CN=69a37803-0b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:79:6d:42:2f:c5:05:d4:93:c7:1b:12:fc:
                    76:ad:7b:81:50:fd:db:b4:a3:fc:c3:68:8f:2c:19:
                    c8:8c:bb:cf:19:73:b2:88:59:c0:36:d9:90:3a:f1:
                    67:ca:a3:d1:2f:c6:34:b5:81:b3:0e:3f:db:dd:2d:
                    90:05:85:06:92:09:84:bb:9e:6c:b6:60:62:a7:70:
                    fa:62:38:3b:90:7b:1b:fe:89:f3:3e:7a:01:4b:fb:
                    f9:99:3d:39:66:ec:3b:6b:1e:68:4c:5b:6b:08:fb:
                    67:4c:10:6d:f2:97:5b:aa:5b:06:41:15:7f:74:88:
                    ab:85:a4:12:7b:38:b0:31:f6:ed:4a:46:0e:98:7b:
                    33:6b:3f:c1:9e:91:c2:c0:58:10:cb:28:de:2d:8c:
                    01:92:7d:46:50:c8:4a:dd:e9:26:69:a5:11:31:9f:
                    4e:92:99:69:d4:4d:4a:8a:fe:3e:3b:b4:84:04:22:
                    ab:e1:80:68:14:22:b0:bd:ad:a2:e7:e9:1e:84:79:
                    a0:49:04:3c:24:5d:71:f7:47:d7:9f:bb:20:4e:11:
                    ad:3b:15:ae:45:53:ed:63:d9:89:92:39:53:77:ff:
                    eb:9f:fe:92:ad:4b:8d:bb:09:79:c5:68:47:80:05:
                    0f:33:1c:77:2f:56:12:ab:d3:62:02:85:d4:40:10:
                    de:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:53:73:AE:07:71:22:A4:23:0C:49:79:3B:BA:36:58:16:FB:3D:ED
            X509v3 Authority Key Identifier:
                keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:be:22:e2:94:48:dc:fb:b2:ef:c9:44:50:60:46:d3:0e:f2:
         2c:a8:94:f4:6b:3b:3c:f0:a7:cc:1c:e5:05:01:ae:a8:31:e2:
         01:6e:d4:18:c7:cb:6f:33:1c:a6:40:04:bd:18:ab:fa:ea:f0:
         48:18:45:20:0e:ec:08:83:84:30:74:11:ba:46:da:22:86:6a:
         64:ae:82:51:67:53:78:9c:bc:45:f8:ab:02:1a:8b:6c:1b:e1:
         ad:47:10:d1:c5:74:0b:7f:de:59:ea:cd:e2:a8:8d:fe:68:4a:
         21:4e:b0:55:71:7b:3a:e6:98:20:d3:90:15:45:12:c2:b9:d4:
         03:a0:f2:e2:50:94:f5:0f:17:a1:d6:c1:2c:04:65:23:dd:4f:
         95:a0:bb:4f:27:b7:64:e9:86:1f:49:65:73:95:68:3b:cf:9e:
         a8:b7:9a:b9:ba:fe:22:85:6a:9e:f3:6d:80:cc:dd:78:f5:f1:
         5e:f9:cd:52:f5:35:f4:36:9a:49:03:82:6b:81:48:1c:b4:fd:
         3f:1d:16:84:d7:6f:da:b8:c8:00:b9:85:ff:5c:e9:d2:8b:dc:
         de:a2:60:6e:a1:ad:8d:33:8e:1e:a9:ec:ff:06:36:41:7a:ca:
         ce:05:73:bd:7b:9a:ea:4a:33:c0:fc:44:df:a2:71:b6:59:72:
         09:35:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:57:17 2026 by rpki-client