Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
File:                     kyv2OTHDR-dryQidQb4k9jcPJYI.mft (raw, json)
Hash identifier:          4VIX0PiUfJBrbCN06Kjl0FfwSP/hgpKNfX8xYeiI1JU=
Subject key identifier:   8A:FE:19:70:F9:C0:A8:3F:A7:3A:47:E6:62:02:62:E9:EC:4D:85:E2
Authority key identifier: 93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82
Certificate issuer:       /CN=A919879C/serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582
Certificate serial:       033B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
Manifest number:          0330
Signing time:             Fri 17 Apr 2026 00:57:54 +0000
Manifest this update:     Fri 17 Apr 2026 00:57:53 +0000
Manifest next update:     Fri 24 Apr 2026 00:57:53 +0000
Files and hashes:         1: kyv2OTHDR-dryQidQb4k9jcPJYI.crl (hash: bxx8o3hNYngpnwSXaXjTPXnmZXnfqKopmUJatvusbgc=)
                          2: E7C34456073711ED8BA93630C4F9AE02.roa (hash: 5pvog1WaQXSx08gAbCNPBFn3bbF20IQKZ1DUM6ITIJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl
                          rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827 (0x33b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919879C, serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582
        Validity
            Not Before: Apr 17 00:57:53 2026 GMT
            Not After : Apr 24 00:57:53 2026 GMT
        Subject: CN=69e18592-f666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:60:bf:dc:c4:f4:4d:e2:4c:6a:8a:6d:4d:8b:
                    b3:e5:83:f1:4b:ca:a5:60:58:d0:93:96:bf:55:a0:
                    67:80:ab:26:33:15:58:05:f0:bd:0e:86:ee:64:fb:
                    97:3e:4b:2a:e0:7b:24:e9:e0:73:15:d9:5c:3a:d9:
                    75:11:08:ff:20:d5:7c:22:0f:2a:19:86:98:d2:87:
                    c9:5a:61:10:3e:1b:27:3b:99:aa:b8:53:0e:d5:fe:
                    39:57:df:43:92:90:20:57:90:62:0e:ab:51:69:a0:
                    2f:4c:c8:b1:40:65:b8:ab:ac:9e:86:67:9d:e0:16:
                    40:50:38:5f:eb:5b:f0:32:9f:83:f5:3e:90:a4:f8:
                    72:4c:b6:ea:34:0c:ec:d5:d4:dd:15:c6:eb:de:23:
                    34:8f:65:49:17:1b:81:b6:7d:34:e9:6a:11:0a:70:
                    09:ff:e8:17:de:3d:a0:a1:47:da:ae:23:81:3f:3e:
                    c1:f9:0e:32:f6:fd:6f:e3:ed:1d:8d:4e:e9:bb:16:
                    88:9b:b8:f8:00:e2:44:c1:6e:44:9b:4b:f8:e7:1a:
                    95:dd:a7:61:98:d7:e3:8b:ad:3e:7d:74:f7:57:71:
                    c0:91:cf:5d:08:b4:ac:c9:a1:92:3b:9b:d6:46:8a:
                    a9:16:5a:43:91:1f:78:08:bb:27:1f:a2:2a:1f:e3:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FE:19:70:F9:C0:A8:3F:A7:3A:47:E6:62:02:62:E9:EC:4D:85:E2
            X509v3 Authority Key Identifier:
                keyid:93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ab:2d:4a:2f:29:e2:36:1a:c1:61:15:0a:7a:70:99:e1:6f:
         66:24:c4:9c:ca:74:28:93:cf:b6:3c:f9:09:5d:62:19:56:3d:
         c4:a7:94:77:c3:65:71:96:5c:4b:13:b2:8a:c0:85:29:10:1d:
         8f:65:61:ea:26:e5:01:e9:ee:77:0f:03:7f:ef:3f:39:b6:a7:
         a2:73:c4:4f:29:44:0a:bb:f0:48:ba:a7:87:58:5a:9c:bc:2c:
         fb:f5:0d:9b:06:b7:f5:2b:f6:e6:22:e6:b3:59:5f:5a:e6:6d:
         fe:5e:e6:0a:ae:db:57:8e:3b:d0:2c:62:83:15:d9:94:55:36:
         27:f9:06:d5:9c:86:ca:79:08:ca:a6:57:71:ad:73:07:49:6d:
         d9:15:b2:e1:19:44:95:ef:29:d8:fd:de:30:d1:a3:ea:27:42:
         17:61:0d:54:e2:b5:26:63:88:56:a8:17:64:8f:15:a4:3a:3d:
         05:12:88:1a:78:ff:d9:10:45:a9:e8:06:f2:08:84:67:1f:75:
         24:38:02:b4:94:cc:59:2d:6b:cf:6b:d2:2c:f3:60:28:cf:e7:
         17:ad:9a:14:1d:ef:78:07:b4:75:4e:3a:b0:d3:2c:a7:86:c0:
         70:50:a7:25:d6:0b:3c:9d:b4:be:14:58:77:24:58:67:a1:0e:
         58:02:44:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:56 2026 by rpki-client