Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft
File:                     KtUm39nH6QyjDDH8pOGCUBtwB1M.mft (raw, json)
Hash identifier:          Ta2sLtHrrysdUR46DZT6obBxo09Hh72oEgt4EQttma4=
Subject key identifier:   F4:62:FD:3A:B4:6E:D5:3B:17:84:56:90:D0:AD:CA:00:A5:E6:DB:80
Authority key identifier: 2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53
Certificate issuer:       /CN=A919AAA0/serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753
Certificate serial:       06FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft
Manifest number:          06D6
Signing time:             Mon 02 Mar 2026 03:06:52 +0000
Manifest this update:     Mon 02 Mar 2026 03:06:51 +0000
Manifest next update:     Mon 09 Mar 2026 03:06:51 +0000
Files and hashes:         1: KtUm39nH6QyjDDH8pOGCUBtwB1M.crl (hash: AlMDtjWztcHbdSede7ufxbvr/AQDxHmDTt+FhAddS+Y=)
                          2: C51F34AAC46711F09831793EC4F9AE02.roa (hash: 5Dfo+86REWSOOvSHSQa6ahUnKj3THgLtEtsMrC5m7/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl
                          rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1789 (0x6fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AAA0, serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753
        Validity
            Not Before: Mar  2 03:06:51 2026 GMT
            Not After : Mar  9 03:06:51 2026 GMT
        Subject: CN=69a4fecb-4a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:88:5b:d9:95:ae:9a:f3:21:50:4f:5e:74:
                    9b:fc:57:f2:97:23:73:b2:30:66:35:8c:79:22:01:
                    d5:a5:d1:44:ec:de:60:1f:c4:d6:61:2a:07:d6:94:
                    88:d9:6a:2c:33:40:af:0e:07:1d:d3:8f:57:74:5e:
                    19:2f:08:21:f4:27:17:a7:72:70:84:1f:bf:d1:a1:
                    93:7b:59:5b:7c:57:e7:21:ad:19:cf:42:0a:92:30:
                    97:88:0d:15:33:70:65:6c:50:92:12:36:d2:bc:a8:
                    29:b8:1c:2f:9b:23:80:d8:5b:27:ab:39:25:46:a3:
                    0c:a4:1a:8f:79:64:8d:d5:33:97:61:be:40:1d:de:
                    11:b3:69:f5:f6:3d:f3:83:23:71:55:d9:ef:d6:ae:
                    51:a5:50:1f:30:14:6d:06:38:6c:93:4e:f3:57:5d:
                    ba:fc:c7:5d:bb:e3:d3:e0:bd:6b:b1:29:16:34:cf:
                    22:b8:ff:45:30:71:ab:65:86:f1:e4:d2:cb:ac:57:
                    e7:67:29:33:29:4a:f3:34:64:19:2c:44:cf:c3:f9:
                    51:76:5d:e0:46:73:ee:f7:42:72:f7:1b:1a:17:e1:
                    41:04:88:37:48:23:10:28:69:b1:f0:6f:ee:c7:00:
                    6c:21:ba:8e:d3:c5:69:19:25:ea:32:f1:8f:92:be:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:62:FD:3A:B4:6E:D5:3B:17:84:56:90:D0:AD:CA:00:A5:E6:DB:80
            X509v3 Authority Key Identifier:
                keyid:2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:af:25:84:47:63:c5:fb:25:f2:b0:f1:53:44:7a:e5:fe:26:
         11:92:3e:08:12:79:f3:1f:7e:95:03:b4:9a:d9:75:18:9c:81:
         51:c6:5c:5d:7f:ce:f6:23:dd:4d:b7:f2:20:ed:4b:34:77:8c:
         5c:9f:aa:58:67:89:97:fd:bf:e8:c1:ec:f3:97:88:bf:a9:bf:
         8d:03:f3:b9:38:0f:d7:7e:53:70:6c:eb:66:4e:f0:0b:16:b3:
         89:d4:ad:ba:d3:04:6f:b6:8f:94:09:e6:f2:66:1c:7f:6d:c0:
         15:e6:6e:89:7c:18:91:ca:e3:21:6d:df:b4:93:40:9f:95:27:
         e3:53:78:4c:cf:c3:98:29:89:f1:62:76:79:8a:11:26:fa:16:
         8c:a2:da:91:49:16:4f:24:43:a6:86:fd:3d:4a:2c:fd:76:dd:
         33:07:ee:16:09:6f:04:c6:66:5d:ea:9b:52:53:5c:8f:89:6a:
         16:04:9d:d4:39:7f:25:9b:cc:99:0e:0f:35:a9:7b:a2:3b:c2:
         c6:05:8d:9a:27:12:fb:06:ea:b7:2a:99:66:14:30:87:45:83:
         bd:a4:2b:2b:df:72:28:7e:7f:bd:f2:94:19:c7:6f:d7:d5:15:
         8c:27:85:79:53:61:de:32:ee:21:32:d3:28:06:ba:0e:27:6f:
         3b:f3:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:45 2026 by rpki-client