Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
File:                     kHuyYrVxYj40suIMYKcYwXOcw70.mft (raw, json)
Hash identifier:          sSAhis95R8a692PSAd5e/gcvIi8fNebO73cEqsYviLw=
Subject key identifier:   6D:BC:4F:51:74:DB:26:FB:73:2A:23:64:9F:F5:78:ED:02:28:8A:DB
Authority key identifier: 90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD
Certificate issuer:       /CN=A91A3A64/serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
Certificate serial:       0439
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
Manifest number:          0430
Signing time:             Mon 02 Mar 2026 00:25:05 +0000
Manifest this update:     Mon 02 Mar 2026 00:25:04 +0000
Manifest next update:     Mon 09 Mar 2026 00:25:04 +0000
Files and hashes:         1: kHuyYrVxYj40suIMYKcYwXOcw70.crl (hash: 4BCmSJqG7MX4YTcgYAV6NF1VKZ+zNnUvsmzVS77Fc+Q=)
                          2: 5B92665E9ADD11ECA5401423C4F9AE02.roa (hash: Nb29Wu1CDYoesjc8FMHKjysC8EpiLHTgbPxZYxl0RNM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl
                          rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1081 (0x439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3A64, serialNumber=907BB262B571623E34B2E20C60A718C1739CC3BD
        Validity
            Not Before: Mar  2 00:25:04 2026 GMT
            Not After : Mar  9 00:25:04 2026 GMT
        Subject: CN=69a4d8e1-d56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:47:c6:b3:0a:61:8f:c4:4f:58:17:85:68:
                    31:c1:19:b3:ff:5e:03:90:7c:2d:37:de:3b:81:17:
                    7f:7a:5f:3f:e9:1e:44:12:e8:36:bb:9b:3d:ea:0d:
                    9e:47:2b:83:08:5c:65:01:11:e9:7b:44:d1:37:3c:
                    e0:b0:fa:8e:99:57:33:d6:89:10:aa:48:c5:fa:d5:
                    7a:df:8c:d3:29:34:99:67:a1:80:73:84:9c:93:cf:
                    3b:e1:31:fe:b7:dd:14:60:8f:5e:60:9d:d7:a7:24:
                    85:4f:fe:5f:68:9d:99:a9:65:30:a8:8a:01:c6:1a:
                    2d:ad:0d:7d:24:b3:ff:54:c3:5d:c8:7e:d8:a5:a0:
                    00:a6:2a:63:6b:8c:f8:36:be:e4:1b:17:27:08:d1:
                    4b:53:b6:6d:b2:80:ec:11:94:2a:89:73:ec:cb:0b:
                    12:92:39:eb:6f:22:05:85:85:3e:3f:23:2f:5b:59:
                    4f:65:56:05:38:b1:de:56:11:66:be:24:e8:f3:11:
                    6b:bb:c1:ab:77:ca:5e:48:e0:e4:59:1c:1b:85:1f:
                    99:2d:fa:c9:b0:b0:3d:7e:25:13:e2:17:21:15:38:
                    eb:19:72:4b:17:ec:5d:d5:34:6f:02:14:d4:60:5e:
                    7a:03:10:0f:a1:ab:0c:1c:e2:59:ed:44:45:fc:2d:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BC:4F:51:74:DB:26:FB:73:2A:23:64:9F:F5:78:ED:02:28:8A:DB
            X509v3 Authority Key Identifier:
                keyid:90:7B:B2:62:B5:71:62:3E:34:B2:E2:0C:60:A7:18:C1:73:9C:C3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHuyYrVxYj40suIMYKcYwXOcw70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3A64/358C67BE9ADA11EC85713378C4F9AE02/kHuyYrVxYj40suIMYKcYwXOcw70.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:87:44:32:7c:14:c4:64:3f:3d:84:19:f4:4d:f6:8f:ad:28:
         70:78:95:94:6c:ff:cc:a2:4b:d6:9e:e1:3c:bc:4f:38:9e:20:
         1a:16:ec:df:cf:c9:63:9d:17:67:08:16:5c:e4:2b:5e:d0:30:
         fb:ab:75:15:ad:d9:06:61:c0:47:2e:8f:48:81:13:07:cf:c5:
         bc:fe:5e:b9:75:1d:03:ef:45:18:aa:b3:4a:d6:c6:33:93:70:
         51:66:77:0d:73:c4:10:17:a1:ef:ca:78:44:43:a5:a9:68:9d:
         d8:6c:29:fd:3b:28:01:fd:4e:20:dc:5f:f9:4d:98:68:01:44:
         e3:6e:47:ad:06:59:43:49:2d:49:1b:9d:32:12:44:0a:af:db:
         e6:d9:39:4a:c5:92:36:78:89:c1:34:cc:ad:1c:e0:4c:02:56:
         a3:34:be:a9:02:a1:3d:28:91:70:b5:13:2d:89:70:d2:36:0a:
         60:d6:e2:de:c0:b4:0e:48:20:c1:dc:3b:43:62:da:c7:b5:40:
         a9:71:4d:d9:4c:62:30:28:19:e5:20:8b:83:59:c0:e0:4d:f5:
         4e:b7:81:56:bc:45:9c:22:c4:63:93:7b:d5:82:9b:24:20:23:
         91:41:14:dc:25:5f:25:74:a5:2f:b4:3c:e0:dc:63:33:e6:b4:
         10:bb:1d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:03:21 2026 by rpki-client