Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
File:                     Kz24XvlSI40ZLc8XDua-scjbA6k.mft (raw, json)
Hash identifier:          2/Ef5+nynK0o5dohQGcflbt+sSLF/jTF0E0N6drxjhc=
Subject key identifier:   84:20:13:77:9D:9D:66:B1:05:B3:8C:C3:52:6A:1E:8D:30:2F:4F:AF
Authority key identifier: 2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9
Certificate issuer:       /CN=A919F525/serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
Manifest number:          010D
Signing time:             Mon 02 Mar 2026 13:48:06 +0000
Manifest this update:     Mon 02 Mar 2026 13:48:06 +0000
Manifest next update:     Mon 09 Mar 2026 13:48:06 +0000
Files and hashes:         1: Kz24XvlSI40ZLc8XDua-scjbA6k.crl (hash: EWRBAsmNXqh7vJPdwh/z11Uv5/TzOO6mmiumwCSdCpU=)
                          2: 4AFF817484EF11EFBDCD721DC4F9AE02.roa (hash: 5c1TL3vggB7b/Lb9+UAnKonPpLIhOsGZdJvjdfxywjE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl
                          rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F525, serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9
        Validity
            Not Before: Mar  2 13:48:06 2026 GMT
            Not After : Mar  9 13:48:06 2026 GMT
        Subject: CN=69a59516-2f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:31:0e:e3:83:51:ab:7c:95:4f:b4:3a:4f:b2:
                    21:e0:cc:b9:f7:0c:60:5f:8f:fd:8e:c8:90:41:7a:
                    f2:64:4e:4a:ff:01:14:b2:74:0e:42:63:d2:2f:66:
                    6a:90:73:81:e7:88:56:9b:98:6e:54:78:58:9f:0e:
                    48:b6:dc:f6:70:9c:ce:cd:fa:c8:87:53:89:31:5d:
                    b8:00:1b:64:30:8c:78:03:14:d7:26:6b:f9:3e:23:
                    54:b1:4f:ed:da:88:e4:47:ee:40:5f:ee:1b:fc:a7:
                    f2:0d:60:ae:f0:e3:0c:e0:6f:7f:32:6f:e5:dc:fc:
                    33:bb:ef:f0:04:02:95:84:34:20:0c:56:8f:76:80:
                    8b:47:50:ce:47:b9:0f:57:fe:1c:9b:16:e0:f1:87:
                    99:ba:b9:be:79:3d:10:2f:38:06:22:9b:bc:67:db:
                    62:f5:a4:5a:05:11:12:59:1b:e3:d2:ab:da:d5:a6:
                    d6:52:19:2c:4c:98:8a:f9:79:c8:3c:6d:0f:80:90:
                    e3:e7:57:08:9d:f8:31:c9:6b:5a:ec:d1:b8:7b:44:
                    34:92:ec:a5:0a:27:4d:f2:48:bd:0f:17:8f:52:b4:
                    8c:4e:c9:ec:d6:cf:95:9b:cd:d5:f5:d2:a5:d7:21:
                    75:e7:19:28:a2:aa:9d:ed:df:f5:62:24:4a:87:37:
                    67:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:20:13:77:9D:9D:66:B1:05:B3:8C:C3:52:6A:1E:8D:30:2F:4F:AF
            X509v3 Authority Key Identifier:
                keyid:2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:54:11:97:7a:1c:63:2c:bd:b2:19:15:2a:82:28:25:4a:0e:
         f3:4b:a8:ef:55:43:9f:b5:2d:46:fb:ae:f7:1e:c7:dd:ae:d0:
         34:47:71:5a:44:84:e6:25:7c:48:46:b1:41:fd:a6:0a:8d:2b:
         b9:97:cc:6c:36:2b:aa:3f:34:ad:96:78:96:f4:ed:db:97:32:
         6c:b5:27:62:d0:8c:2d:9f:23:22:a3:d2:a4:df:70:91:f0:2b:
         f0:28:0f:50:3b:7e:5d:f8:e1:fa:3e:21:03:ee:d2:c1:cd:96:
         a4:d1:f2:b3:59:ef:d9:62:e1:30:dd:ef:4c:ef:e6:d7:74:7c:
         5c:86:5a:f8:ef:e5:9a:81:58:96:c9:5b:91:7b:d2:1a:6f:a9:
         3c:28:a5:eb:8e:de:b3:78:77:af:ea:24:c7:28:76:9f:6e:55:
         36:47:cf:d2:2d:3b:ef:b1:b9:80:f2:0d:95:8d:0b:dd:de:ea:
         61:73:92:5a:3a:a0:40:76:13:c8:b4:39:0c:b0:3e:b4:c0:86:
         b2:57:61:53:41:9f:1a:fa:31:f5:dc:43:b3:23:0d:e3:f7:df:
         b1:cb:ff:02:4f:c2:97:30:72:c9:c1:42:21:bb:78:e4:7a:c9:
         15:47:bc:58:bb:80:fb:9c:24:ba:c9:84:28:b7:83:4c:33:ef:
         23:00:01:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:26:21 2026 by rpki-client