Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
File:                     Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json)
Hash identifier:          vyotW0zC7Es83f3v1N4rz8xoQ4b0ir9u32p3+2HUp2w=
Subject key identifier:   8A:DC:28:8F:2D:61:C6:1C:19:AF:D0:3B:6A:74:E8:39:55:68:A4:E5
Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
Certificate issuer:       /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
Manifest number:          FC
Signing time:             Fri 17 Apr 2026 05:56:04 +0000
Manifest this update:     Fri 17 Apr 2026 05:56:03 +0000
Manifest next update:     Fri 24 Apr 2026 05:56:03 +0000
Files and hashes:         1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: OlBqaRnWziT4PuJwqClQSnKKGrHU4/963+trtWVY7QY=)
                          2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: fMdXJV+1ucniyu3k/11VAI6qy/FxoiJSc5x07sN7B60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
                          rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
        Validity
            Not Before: Apr 17 05:56:03 2026 GMT
            Not After : Apr 24 05:56:03 2026 GMT
        Subject: CN=69e1cb73-1190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:f3:88:36:73:b2:af:4b:a1:10:20:61:06:
                    5a:ed:b7:b9:06:52:63:f4:31:99:88:63:ea:ac:9a:
                    a7:65:bd:13:cd:6a:f4:82:84:99:3b:5f:30:09:49:
                    91:db:95:23:68:11:7d:16:80:5f:8c:78:d8:b0:7c:
                    05:bd:92:55:b1:41:15:60:08:d2:d1:ca:7c:59:2c:
                    19:26:cb:67:7b:bf:ef:5e:f0:57:94:06:54:ea:33:
                    fd:f2:63:7f:22:5b:f0:e2:c1:9b:fd:71:7a:73:36:
                    f7:9e:5d:87:6c:ce:15:86:82:5b:fb:88:3c:af:9a:
                    8a:43:91:c0:c9:7b:8b:4b:49:cb:b7:d4:31:fd:2c:
                    4e:6b:1b:92:2c:f4:56:1e:6c:bc:0e:b7:16:e1:28:
                    ef:72:be:e8:50:d5:56:60:52:ef:e8:5c:b1:56:b7:
                    34:db:fd:c6:b7:6d:19:d3:87:50:9a:db:e7:d7:2a:
                    f3:ac:87:48:32:ba:bc:8a:8c:96:e7:55:c1:09:6d:
                    0a:3f:92:42:f1:9a:63:22:1b:48:76:2e:fc:cb:d1:
                    2d:12:95:6a:24:f3:0b:4d:4a:93:7b:eb:8f:2f:0e:
                    f7:3a:f0:90:40:ce:ea:aa:d9:04:30:20:5a:e2:fa:
                    cc:43:86:ec:91:28:15:7b:17:43:b2:05:31:30:21:
                    9c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DC:28:8F:2D:61:C6:1C:19:AF:D0:3B:6A:74:E8:39:55:68:A4:E5
            X509v3 Authority Key Identifier:
                keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3e:1c:a0:4f:79:3e:25:ba:55:da:76:79:60:80:42:22:da:
         14:23:48:37:ae:99:4f:17:c5:f7:21:f6:4c:af:74:60:01:c9:
         9f:ec:45:b0:32:bd:80:f8:db:88:5d:a2:8b:7d:c3:32:42:5a:
         6c:e7:1a:5f:39:42:c2:84:07:c2:28:9c:bf:91:05:da:31:2a:
         08:21:ed:47:c8:61:e5:e3:aa:e2:5a:ef:f6:22:ff:70:2e:5d:
         fd:0c:64:9b:fe:5b:98:c3:be:a6:be:45:b0:67:65:59:1e:32:
         8b:3b:6f:a4:0d:c1:d1:64:e3:28:e7:df:56:a7:c5:21:39:ae:
         f0:18:f4:32:88:30:5b:04:80:30:68:aa:e4:da:fc:b3:6f:69:
         37:99:45:55:70:8f:65:14:75:48:46:75:91:88:86:33:0f:04:
         cd:6b:7c:14:9e:51:dd:a1:18:cc:21:96:1c:c4:7b:7a:ed:a7:
         fe:b6:bb:5b:d9:93:83:d0:73:ad:62:06:b2:e9:d0:be:4f:9a:
         c9:76:16:b4:02:28:53:16:7c:27:2a:66:6e:a2:97:64:8b:3f:
         ca:11:db:65:83:64:03:9d:75:6a:fd:ed:49:67:99:98:29:94:
         b4:c3:a0:90:75:dc:ef:d2:87:83:18:b6:a7:14:1c:6a:45:3c:
         49:77:14:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:45 2026 by rpki-client