Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
File:                     kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json)
Hash identifier:          pBpBZw843uwgQdot5yMCLrVhM32SFOd/Pg9MrvbVKmM=
Subject key identifier:   5B:54:75:01:90:87:F0:B0:15:52:CC:D3:E8:A8:BF:50:9E:E6:87:18
Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
Certificate issuer:       /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Certificate serial:       04C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
Manifest number:          04C2
Signing time:             Sun 01 Mar 2026 00:33:47 +0000
Manifest this update:     Sun 01 Mar 2026 00:33:47 +0000
Manifest next update:     Sun 08 Mar 2026 00:33:47 +0000
Files and hashes:         1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: um2sRCK+dLL1kKYjWQnf6EBTykyAHd0PZdLFbEhEQ04=)
                          2: 02D13C94D4B211F093413921C4F9AE02.roa (hash: En51wQVhPTzRoGx7r1Oh3OXcO/1NON/tJNYvVfLMz3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1224 (0x4c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
        Validity
            Not Before: Mar  1 00:33:47 2026 GMT
            Not After : Mar  8 00:33:47 2026 GMT
        Subject: CN=69a3896b-7fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ff:00:36:38:ef:e8:f5:e9:b8:d5:13:e9:1a:
                    55:29:f5:54:8d:ea:bd:73:ea:c7:57:36:18:95:e9:
                    c9:97:fc:fa:36:91:bf:56:a8:f2:02:04:88:e9:75:
                    8d:ea:f3:65:32:b1:2f:cb:ff:dc:98:6f:df:0d:23:
                    18:cd:ac:de:41:45:8a:f9:32:d2:ad:a6:6a:b2:53:
                    1f:14:e2:cb:bc:d3:f6:6f:64:c2:2e:91:e8:b3:7f:
                    ce:1a:57:10:7a:eb:c0:e9:2b:86:4c:54:26:87:5d:
                    4a:ae:5e:d7:6f:63:c6:55:4c:05:f1:e7:95:47:ac:
                    92:85:19:00:95:5d:21:3b:0b:f3:be:8e:9b:d7:69:
                    55:a2:59:9c:1f:c0:ec:05:2f:c7:9c:ca:73:7a:f6:
                    42:28:10:53:00:fc:ee:4a:ac:e5:78:e2:8c:5c:af:
                    85:a8:eb:12:68:f3:c5:9e:f4:17:8b:7e:68:bd:0d:
                    ee:6c:7f:5d:bc:86:91:b8:86:75:6d:dd:35:38:ce:
                    43:f1:f8:c2:09:d4:23:94:9b:ae:ba:2b:36:2c:5c:
                    94:ba:b5:cb:16:fd:82:71:e6:02:28:3f:f5:ed:e6:
                    5e:c0:90:5b:61:ba:b5:24:75:24:05:71:b4:6a:71:
                    73:eb:c3:14:06:7e:1f:93:e2:1a:b9:dc:22:d5:57:
                    6e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:54:75:01:90:87:F0:B0:15:52:CC:D3:E8:A8:BF:50:9E:E6:87:18
            X509v3 Authority Key Identifier:
                keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a6:80:fa:3a:85:28:50:3a:81:ee:d4:28:5a:3b:40:35:ec:
         67:92:e8:83:f7:5f:33:49:cb:7e:80:da:55:c9:b8:bd:bf:9f:
         21:64:07:ef:23:ef:c6:43:a0:84:fc:48:35:e1:c6:79:59:f4:
         57:62:27:1a:bd:68:2d:16:9e:a8:b5:7b:5e:69:f4:04:36:4b:
         ea:9a:5f:64:f4:f3:27:b2:fb:e1:42:fe:27:49:95:f3:e7:73:
         d2:39:ae:0c:e2:5e:8d:38:47:3d:70:f9:23:38:03:9a:91:0a:
         ad:a4:7b:6f:cd:6a:fa:2d:0c:9a:79:9e:56:c5:b0:98:fb:3b:
         3e:59:4c:a5:8e:c0:e4:6e:0c:8b:46:a1:b1:9e:1d:bc:b6:b9:
         2d:8f:5c:b6:08:57:be:ba:b8:10:39:c6:d0:c2:7c:24:50:72:
         6c:0b:0f:9c:cb:83:3a:c6:ff:83:9b:be:3e:b1:06:0e:b6:21:
         e2:e1:56:3d:8e:ba:c6:b0:b3:dc:8c:e1:67:77:eb:a1:3a:a8:
         a4:c7:6a:c4:66:55:91:6c:1f:14:44:09:91:9d:b3:bd:6a:e5:
         dc:a8:ad:47:98:f7:b2:af:9c:fe:ad:d1:87:91:d4:a8:00:fb:
         5e:78:4a:5e:82:c1:bc:c1:48:bb:b7:c8:c5:0b:2c:b0:c5:a6:
         ed:95:82:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:20 2026 by rpki-client