Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
File:                     KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft (raw, json)
Hash identifier:          jpHsohRyzwoXmUN8TUomYLer5QnOmzeRJNBJbyBHIcI=
Subject key identifier:   1F:48:A5:E8:80:57:F4:9A:DC:EA:B8:EE:3A:7B:93:18:86:60:4E:2A
Authority key identifier: 28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02
Certificate issuer:       /CN=A91C5021/serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902
Certificate serial:       07CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
Manifest number:          07B5
Signing time:             Mon 02 Mar 2026 03:05:24 +0000
Manifest this update:     Mon 02 Mar 2026 03:05:22 +0000
Manifest next update:     Mon 09 Mar 2026 03:05:22 +0000
Files and hashes:         1: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl (hash: /6KG7L3wIwBuDxXwExh1GUfxVC4OmtLa4SUO7vGVOcY=)
                          2: C42CEC7ECC3611EF9C79665CC4F9AE02.roa (hash: 2CcUX8OCn1/fmWn37MNKtyhofnamXBuWgD+4aT2Pu3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl
                          rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1999 (0x7cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5021, serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902
        Validity
            Not Before: Mar  2 03:05:22 2026 GMT
            Not After : Mar  9 03:05:22 2026 GMT
        Subject: CN=69a4fe74-12e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:10:b9:91:4b:2f:d6:7e:80:2f:12:f8:eb:d6:
                    01:c2:e7:19:b5:d3:12:3b:8a:fa:4f:68:8a:ef:c8:
                    28:ec:29:00:fc:d0:77:c8:51:ce:33:17:54:c3:af:
                    55:02:2b:ab:c7:ce:52:5c:aa:94:a3:07:56:bb:ca:
                    5e:3f:20:ec:d7:5c:a2:4d:9c:da:fe:34:5e:40:c9:
                    d3:d4:82:79:63:90:76:3b:91:13:bd:9c:cd:75:5e:
                    d3:8f:83:88:e3:7c:5f:70:d1:27:48:c3:29:ce:ab:
                    91:88:c2:a3:2c:bf:b2:b9:32:f1:ac:78:09:ae:1f:
                    18:3b:bc:58:5c:ce:71:c9:bb:fa:04:03:a4:6b:34:
                    28:e4:12:c9:70:11:aa:3e:b7:17:8b:a0:77:5e:ef:
                    c4:1b:48:27:bb:10:2e:93:a3:a0:26:5c:a0:68:f5:
                    ec:46:d9:55:06:c0:12:cd:f8:44:f9:f9:37:83:a8:
                    04:51:26:26:bd:19:72:dd:53:53:19:4f:c4:fc:75:
                    9e:2d:77:3b:05:00:17:fd:69:e6:3b:d2:cd:77:37:
                    5c:0b:91:65:4f:bb:cf:7c:89:ae:ff:31:10:10:6c:
                    b6:4b:14:0b:d9:79:8a:ca:2c:b0:60:ef:cb:d5:36:
                    d9:f6:25:1a:3a:0a:60:b3:cf:a4:51:77:03:86:ec:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:48:A5:E8:80:57:F4:9A:DC:EA:B8:EE:3A:7B:93:18:86:60:4E:2A
            X509v3 Authority Key Identifier:
                keyid:28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5f:f0:0a:36:5b:e3:54:a4:68:c2:53:9d:b1:32:3b:e7:67:
         b0:0b:f4:9e:bf:41:1f:83:f4:37:c7:1d:8c:5d:d0:a6:44:af:
         62:33:e3:6d:a5:dd:70:10:fc:03:e2:18:59:22:18:5a:d9:cb:
         20:eb:3b:e9:29:ef:72:36:cd:e9:29:fb:c5:21:bc:3a:c6:d8:
         60:4f:b5:e7:08:8a:3d:2e:e6:10:af:c7:f6:fb:20:94:33:1e:
         10:82:a0:a2:a3:5b:43:16:ff:fe:95:6f:e5:2d:5b:44:8e:a1:
         ea:79:9e:39:de:66:7a:20:79:65:86:1b:51:84:9c:bb:2e:d1:
         16:b9:2e:e8:0f:77:13:f2:a3:c0:9e:61:14:b9:d2:94:07:b6:
         0e:a8:3a:fa:da:63:e0:3a:72:be:ee:03:66:3d:a1:34:9c:94:
         7c:a1:57:c4:72:f1:f3:4f:53:f5:df:d4:b5:37:61:bd:51:0b:
         d4:ce:96:ae:28:8f:54:64:a5:97:cb:0d:39:16:ac:2f:88:93:
         2f:77:18:c9:df:11:79:54:3e:eb:57:3f:e4:b3:a3:81:3b:a2:
         17:a2:80:ce:52:4b:0e:25:5a:cd:14:94:36:d8:cf:34:87:44:
         ae:13:d5:fe:48:fd:47:d7:34:27:82:f8:9f:c2:36:2e:82:16:
         04:e4:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:16 2026 by rpki-client