Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
File:                     kyJx_Edfot2dkzESKwelKNOPjv0.mft (raw, json)
Hash identifier:          /yYAg64MJUlBykHtRbphEsCgqL2xbNFqiSf6oMb+wvg=
Subject key identifier:   43:AA:3F:8A:F9:82:EB:B4:44:82:19:0A:B2:AD:93:03:DE:31:D8:F6
Authority key identifier: 93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD
Certificate issuer:       /CN=A91983BD/serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
Certificate serial:       04C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
Manifest number:          39DA
Signing time:             Sat 28 Feb 2026 14:38:46 +0000
Manifest this update:     Sat 28 Feb 2026 14:38:46 +0000
Manifest next update:     Sat 07 Mar 2026 14:38:46 +0000
Files and hashes:         1: kyJx_Edfot2dkzESKwelKNOPjv0.crl (hash: Ty1PJ8y9wJ78+PJsXZWItYynA1A9htvai224qJYiOLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl
                          rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1222 (0x4c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91983BD, serialNumber=932271FC475FA2DD9D9331122B07A528D38F8EFD
        Validity
            Not Before: Feb 28 14:38:46 2026 GMT
            Not After : Mar  7 14:38:46 2026 GMT
        Subject: CN=69a2fdf6-44cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:b7:06:87:7d:02:0c:87:d1:b7:61:c2:60:
                    a7:fd:33:a5:fb:74:cd:14:88:7f:96:09:d9:61:9f:
                    5e:01:44:16:de:07:83:fc:46:2d:0e:97:94:00:25:
                    63:4c:b6:49:c6:d9:f8:82:d9:75:e5:fd:48:47:5d:
                    09:1f:c2:99:82:fd:58:10:90:9b:81:14:ad:42:72:
                    4d:61:ef:3d:d4:ed:a6:0e:70:ee:a5:1c:26:8b:61:
                    f4:70:bd:57:dc:af:33:04:9e:e5:e4:f3:d8:bc:96:
                    fd:3c:00:27:a8:08:b6:2e:75:07:45:f1:47:be:44:
                    5b:e8:17:45:2d:0b:fc:a1:c8:0d:11:2b:bc:3b:c4:
                    ee:8b:66:73:7e:6f:d8:ef:54:29:d3:1b:15:fd:45:
                    f0:93:52:ab:05:5b:3a:b0:cb:f9:00:f6:e6:8a:81:
                    61:92:be:64:bb:03:90:31:fc:39:5c:6a:38:05:ad:
                    45:e1:81:62:0c:e1:e4:5e:51:c8:56:3e:5c:5b:90:
                    f4:78:79:8e:bb:d1:9e:89:c9:61:c4:ba:ca:04:ad:
                    54:c7:08:ea:f8:eb:d7:af:5d:60:33:ea:91:a0:35:
                    dc:2b:6d:8a:dd:e1:21:41:f2:e0:56:8b:c2:d1:a1:
                    1b:a5:59:d8:95:8e:32:ed:5f:7e:53:df:95:e9:02:
                    37:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AA:3F:8A:F9:82:EB:B4:44:82:19:0A:B2:AD:93:03:DE:31:D8:F6
            X509v3 Authority Key Identifier:
                keyid:93:22:71:FC:47:5F:A2:DD:9D:93:31:12:2B:07:A5:28:D3:8F:8E:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyJx_Edfot2dkzESKwelKNOPjv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/kyJx_Edfot2dkzESKwelKNOPjv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:c5:35:cb:6a:c7:03:da:a3:ea:1f:48:d3:4d:22:b4:ba:28:
         2b:3a:21:bc:e2:6a:9d:08:81:8e:e3:f3:f4:27:80:8c:ba:69:
         d1:e8:1c:45:21:8b:ae:94:d1:f5:a2:13:75:b6:47:d0:5d:72:
         1b:1e:2e:9a:dd:ef:07:40:d6:2d:ec:22:cc:1f:a9:88:07:f9:
         e3:c0:36:14:8f:b2:3e:c7:a1:93:cd:f8:5e:0a:b3:86:88:a5:
         92:5e:6d:7d:ba:b9:20:d4:01:1b:fa:fd:b8:1e:f3:f7:f7:c1:
         af:72:e3:7f:a5:fd:c5:1d:27:3d:73:c4:59:d2:4c:63:3f:ac:
         21:42:b0:80:3c:bf:5a:4d:a3:9b:4c:93:61:d6:a1:cd:29:7a:
         df:5c:2f:56:d0:03:d6:b6:6e:46:2b:7c:45:37:67:20:2c:ab:
         75:03:5f:73:03:c3:82:5e:41:82:41:ba:7a:8f:bc:a2:d9:0c:
         7f:48:c8:4d:9f:03:23:6b:fd:cc:7b:a0:8c:b7:a0:f8:17:2e:
         31:d5:5b:ed:ee:4d:2a:5a:bd:5c:07:c1:5a:c2:da:4b:cf:57:
         e7:1d:41:3b:40:98:71:f2:ad:86:73:63:26:98:fe:53:87:cf:
         1d:eb:01:96:b2:da:de:d2:76:ea:72:66:ae:f6:6d:10:82:a9:
         04:c4:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:22 2026 by rpki-client