Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
File:                     kMt_oTeWnENWpMpS9wXcoasiX9A.mft (raw, json)
Hash identifier:          uMiQrzM6PJOfxsmMy4DaayI0qD3bJHS06d+oLnZHVOw=
Subject key identifier:   98:6A:5B:06:6F:77:FD:B3:2C:0F:5C:F2:D3:DA:60:09:08:59:88:D7
Authority key identifier: 90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0
Certificate issuer:       /CN=A91907D3/serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
Manifest number:          70
Signing time:             Sun 01 Mar 2026 09:14:27 +0000
Manifest this update:     Sun 01 Mar 2026 09:14:26 +0000
Manifest next update:     Sun 08 Mar 2026 09:14:26 +0000
Files and hashes:         1: kMt_oTeWnENWpMpS9wXcoasiX9A.crl (hash: 9/T0gRubPMtshfJWmo9Ag6WzY9J/fP9IZ1XMclY77tA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl
                          rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91907D3, serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0
        Validity
            Not Before: Mar  1 09:14:26 2026 GMT
            Not After : Mar  8 09:14:26 2026 GMT
        Subject: CN=69a40373-3a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:43:55:05:21:9a:a2:cf:16:be:1d:41:1b:
                    2c:bf:16:ad:5f:f9:20:fa:0f:cb:8a:94:d3:16:53:
                    c2:27:e2:64:f5:ec:8a:bb:06:e4:4d:57:56:58:d8:
                    e2:cc:a9:c8:d5:25:d8:9c:41:91:83:76:79:8b:75:
                    a0:98:35:5d:a9:5d:b1:24:b7:57:b6:38:66:f8:7d:
                    21:50:ee:67:91:32:ce:0f:dd:92:d0:28:14:83:fe:
                    b0:44:99:3a:48:b0:b5:0b:73:71:b7:79:4f:e8:46:
                    69:7a:c7:94:c5:5c:eb:76:32:98:fd:f0:42:5f:71:
                    31:f9:f4:12:c3:e3:cb:5c:d4:b9:90:7f:68:13:7b:
                    8f:b4:66:42:12:fe:a6:ed:77:90:af:fd:51:2a:f0:
                    aa:4f:ae:36:3c:13:12:92:0b:a4:ff:be:2f:af:50:
                    4b:1e:34:67:97:49:b2:bb:98:14:ae:56:95:d2:c5:
                    1c:fa:9a:2a:f7:7b:d5:1f:4c:bc:38:1f:67:be:75:
                    1e:3b:98:dd:e3:3f:bd:96:f8:40:e4:20:7a:54:91:
                    17:67:a0:25:9c:f7:cf:ee:a0:84:55:1a:3e:35:75:
                    03:7e:e7:0c:24:2c:bf:17:86:b0:f8:c4:3f:72:9e:
                    48:16:0d:a7:90:29:3f:c2:11:84:7f:8d:23:7e:67:
                    dd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6A:5B:06:6F:77:FD:B3:2C:0F:5C:F2:D3:DA:60:09:08:59:88:D7
            X509v3 Authority Key Identifier:
                keyid:90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:42:23:fd:b7:7c:22:eb:6e:f9:db:b0:fe:7a:a0:45:2c:99:
         86:54:16:ea:8a:b4:07:48:58:57:3c:df:d2:7d:04:28:65:bf:
         a6:9a:96:58:e5:35:4d:98:a5:29:74:35:ca:32:98:e1:c6:b6:
         8c:99:f3:31:05:b9:9f:6e:a7:07:f8:32:87:47:5b:22:a6:dd:
         9d:28:51:61:bd:14:88:f7:10:d6:3b:5e:4c:d8:f9:36:79:8e:
         47:36:e4:9d:19:07:61:b2:ea:dc:f2:12:df:a0:c6:f3:eb:d2:
         22:a9:ae:06:ce:93:19:22:a2:ab:40:6f:1a:1b:82:a1:ad:ef:
         7f:99:95:ee:24:46:a7:ec:95:2f:6f:dc:25:49:e6:8b:8e:be:
         94:5a:08:eb:ac:f6:25:7d:81:5c:a5:a1:6e:da:7e:fb:b2:42:
         ba:35:ff:b0:38:f3:9f:f7:80:0f:8c:c9:b6:8c:c6:c9:e7:49:
         16:97:bf:d5:68:2f:22:80:aa:ba:f3:51:b8:99:43:cd:55:8a:
         4d:4f:84:30:34:11:e3:ca:50:8a:7f:ea:5c:ee:1e:0c:b7:63:
         dc:64:67:c9:27:57:db:bd:c7:a7:7f:40:e4:95:05:f4:7a:10:
         8a:fe:b0:fa:01:b0:06:d1:d6:37:0c:74:1a:2b:29:10:6f:f2:
         8f:35:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:52 2026 by rpki-client