Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
File:                     RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft (raw, json)
Hash identifier:          FFaVYACkW3FPDvDILxhICG3y8VtILO7DgBTlk5WkMZQ=
Subject key identifier:   65:B5:34:3A:01:4B:9A:2A:31:A4:99:C2:DA:9D:35:3E:BE:3E:54:9B
Authority key identifier: 44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A
Certificate issuer:       /CN=A91DB53B/serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
Manifest number:          2D
Signing time:             Sun 01 Mar 2026 10:15:37 +0000
Manifest this update:     Sun 01 Mar 2026 10:15:37 +0000
Manifest next update:     Sun 08 Mar 2026 10:15:37 +0000
Files and hashes:         1: RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl (hash: GnEk2hj6AjJ8AIqTLyXzdGicHm7EY60jhXhKXWAqYBA=)
                          2: 200677EEE20D11F0A1D1F931636F56BC.roa (hash: 3sjpkQoULi6jgs04VOFyO9NCT/+6DDWL9RPDhqQ2UbA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl
                          rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB53B, serialNumber=44A6A5E4D1C2B8EFE39E9D03AA3B3790BC0B832A
        Validity
            Not Before: Mar  1 10:15:37 2026 GMT
            Not After : Mar  8 10:15:37 2026 GMT
        Subject: CN=69a411c9-2aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5b:1f:20:36:6d:b2:c8:f0:16:41:a9:43:86:
                    fd:06:4f:dc:1c:45:9d:d4:95:c3:1b:56:f9:a6:82:
                    8a:b9:6f:f0:8e:05:2c:32:ce:70:ff:77:b7:8d:71:
                    b0:6f:bf:e4:90:9a:54:02:05:b7:b1:bc:be:3a:46:
                    bf:a6:e1:51:d9:ef:70:09:99:6b:a7:5d:0b:f8:3d:
                    72:07:22:65:8a:8e:86:8a:c1:53:f2:eb:42:50:89:
                    bf:17:f8:6a:1d:7c:18:51:9c:05:03:3f:28:50:f2:
                    4a:e5:01:1d:51:5f:9d:ef:07:0b:23:5a:12:4f:22:
                    63:11:e1:2c:85:8d:55:93:b9:79:5c:d3:e3:74:ff:
                    8e:34:21:59:a6:13:15:d4:26:0d:49:e2:72:b0:62:
                    ef:36:fc:21:62:93:0e:1f:d3:75:62:24:9c:88:46:
                    54:46:af:c1:cd:c0:44:e1:1e:3c:f0:b3:4f:dc:dc:
                    d6:d3:7b:f3:f2:5f:39:f8:d0:4f:3a:be:59:ef:e7:
                    4c:1a:d0:b2:ed:f0:03:e0:3a:bb:57:55:e1:ad:14:
                    3a:d7:8e:ae:27:76:54:5d:3d:90:a8:11:01:01:01:
                    64:a6:88:8b:b8:dc:d7:fc:e2:9a:97:22:d1:37:ec:
                    eb:2f:c8:bc:44:58:3c:bf:a4:69:0e:77:f3:64:3b:
                    dc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B5:34:3A:01:4B:9A:2A:31:A4:99:C2:DA:9D:35:3E:BE:3E:54:9B
            X509v3 Authority Key Identifier:
                keyid:44:A6:A5:E4:D1:C2:B8:EF:E3:9E:9D:03:AA:3B:37:90:BC:0B:83:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RKal5NHCuO_jnp0Dqjs3kLwLgyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/F7ED5BA0E01911F08AD3EB8D626F56BC/RKal5NHCuO_jnp0Dqjs3kLwLgyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6c:58:f0:dc:96:bc:fd:33:57:86:f9:cc:e3:73:dc:40:27:
         7a:99:29:05:dd:e6:f3:7f:e5:fc:98:5c:89:44:6f:36:e5:48:
         9c:e0:03:b9:00:e4:15:c2:a2:f2:2f:89:f9:b6:55:21:c9:cb:
         12:68:62:47:82:3b:49:81:d1:b8:88:cb:40:6f:43:5d:6d:c6:
         4a:78:47:6b:fb:b8:93:f3:78:a5:57:a2:21:b5:8e:8e:f9:51:
         b0:e0:94:b0:08:6c:5b:88:d8:99:de:a0:2d:63:52:e9:f8:17:
         48:29:20:45:ba:2a:fc:79:c8:bb:a8:3a:fd:a6:46:aa:66:7a:
         94:ac:a4:a7:01:9b:04:75:4b:b4:a0:d2:27:63:9e:1e:07:70:
         d6:b9:c4:bd:05:41:7f:ba:17:d0:66:6b:70:61:3b:22:8e:ac:
         41:39:fb:b6:a8:71:28:8d:68:8d:5c:45:f7:ee:0a:82:b3:b5:
         44:04:c9:de:28:38:d4:15:da:21:82:46:45:8c:7e:56:bc:b4:
         1c:04:65:7f:cd:e8:40:40:27:05:15:c0:81:a8:4e:e3:06:70:
         47:d6:94:97:aa:ea:82:b6:01:c8:e4:a6:2a:51:22:6a:a2:69:
         ce:57:d0:5e:9f:78:8b:b3:73:5e:97:1b:aa:fa:0b:9e:0a:d9:
         a5:1e:d0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:39 2026 by rpki-client