Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
File:                     kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json)
Hash identifier:          2rphmOtVJY32YRsuae2vnfpdqBWgWzLSEU5gQ18C9N4=
Subject key identifier:   15:24:40:23:66:2E:81:D6:EF:53:38:DF:65:87:68:88:3B:8B:9C:2E
Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
Certificate issuer:       /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
Certificate serial:       04E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
Manifest number:          3A0D
Signing time:             Thu 16 Apr 2026 14:36:47 +0000
Manifest this update:     Thu 16 Apr 2026 14:36:47 +0000
Manifest next update:     Thu 23 Apr 2026 14:36:47 +0000
Files and hashes:         1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: W4r1Vm01CGoyCG9/2eTnSctrOPQNobF7UWiQYeUab5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl
                          rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1248 (0x4e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
        Validity
            Not Before: Apr 16 14:36:47 2026 GMT
            Not After : Apr 23 14:36:47 2026 GMT
        Subject: CN=69e0f3ff-8170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:8c:09:01:c9:8c:df:37:a3:9f:0c:db:56:
                    40:0e:bc:a5:73:ed:47:ca:b9:dd:4c:d9:e9:55:25:
                    33:50:27:99:96:53:57:f9:40:5e:23:da:4e:5d:b4:
                    ad:27:03:31:91:2c:9e:e4:42:09:59:c6:a3:59:36:
                    dd:2b:e6:b8:a5:ba:b2:bc:96:96:68:d5:a5:d3:b2:
                    01:a4:57:bb:b0:da:94:6f:ea:37:aa:73:22:fd:48:
                    2e:09:b1:f4:c8:80:22:3a:29:61:ad:f7:f0:52:76:
                    c2:fd:3e:b6:04:8f:48:d6:17:e6:7a:69:6f:b1:1f:
                    9c:ad:5f:bf:e8:c7:0e:54:bb:96:6f:61:93:dc:25:
                    24:2c:c1:b1:3e:6e:12:3f:0d:cf:c8:8c:6a:47:27:
                    c3:6d:70:cc:a6:50:b7:85:14:f5:e3:9b:56:e9:5c:
                    a4:fb:50:5a:d6:23:f8:82:d9:d1:a2:09:f3:81:38:
                    7d:f3:66:a4:23:de:0d:b7:92:ce:98:8f:ad:ec:aa:
                    b2:20:e3:35:91:45:3c:05:4a:b8:d7:78:94:d1:28:
                    3d:03:af:00:9f:1d:ac:d6:04:c9:c2:4a:2c:6b:41:
                    0b:cb:6c:8d:68:e7:2b:f3:59:b9:e3:38:ad:93:f7:
                    0b:38:4c:34:e1:0a:c7:66:0c:09:56:8e:eb:f1:be:
                    55:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:24:40:23:66:2E:81:D6:EF:53:38:DF:65:87:68:88:3B:8B:9C:2E
            X509v3 Authority Key Identifier:
                keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:15:ce:64:8d:84:62:05:7c:63:a0:b5:41:0f:da:f5:f1:74:
         7e:32:d3:a3:25:b6:ef:fb:d2:92:39:2e:02:b7:e2:fa:d1:c6:
         55:3b:e3:c4:4c:2b:12:a1:ec:e1:84:d7:4f:cf:7d:51:d2:90:
         07:37:67:69:12:be:48:cd:ab:fb:ea:ab:d2:10:7a:d7:32:4c:
         b5:c2:23:4e:19:68:31:ef:d9:3a:fd:4a:f9:e8:84:c0:e7:00:
         a9:ba:97:ca:d8:93:a4:85:77:1a:0f:4d:98:84:7f:e5:36:26:
         cd:71:03:13:25:43:a4:70:56:1d:ee:d5:c7:c5:96:fe:38:63:
         d8:94:fb:7f:6d:ae:c6:fb:b6:36:c4:e4:bb:d6:e7:e8:5b:e0:
         17:e4:24:9e:96:e0:83:b3:c4:cc:53:72:1a:70:3d:97:34:be:
         5d:2e:94:4b:74:37:02:10:20:3f:1f:5c:0d:78:af:33:d9:ce:
         ee:69:4c:7b:a6:0a:20:52:4c:a8:14:e0:92:f3:73:cb:c9:bf:
         89:df:5d:26:f4:7c:e9:64:dc:dc:7b:cd:bb:40:88:3a:16:c6:
         d3:37:b8:25:ef:3a:7d:8e:2a:27:23:c0:0e:06:16:c4:da:a6:
         fc:34:21:aa:60:0f:a0:a3:12:c8:a1:60:21:2e:22:eb:38:f6:
         51:77:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:21 2026 by rpki-client