Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
File:                     KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json)
Hash identifier:          K3+lMhj6vZ5w1Ab+kGdj1fG5AFfi3qbnIGCqsjD2M5c=
Subject key identifier:   7E:E9:70:4D:12:1E:D1:08:39:62:D6:43:F3:27:18:47:75:FC:5D:C3
Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30
Certificate issuer:       /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30
Certificate serial:       0797
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
Manifest number:          1295
Signing time:             Thu 16 Apr 2026 19:13:58 +0000
Manifest this update:     Thu 16 Apr 2026 19:13:57 +0000
Manifest next update:     Thu 23 Apr 2026 19:13:57 +0000
Files and hashes:         1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: YHV/AJV3YTjp8yFV3IOsS2qZ2KwNpoDHLsV+opcu3kg=)
                          2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: 7lVvPvKm0jDrCtO8FOe2rLzoGXgVOgfwoKgNAbdQ/CA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl
                          rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1943 (0x797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30
        Validity
            Not Before: Apr 16 19:13:57 2026 GMT
            Not After : Apr 23 19:13:57 2026 GMT
        Subject: CN=69e134f6-9fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:b7:64:31:25:4e:75:20:67:c7:be:20:fc:
                    25:4c:c0:8f:91:96:38:68:87:7e:af:6a:98:3a:91:
                    86:54:18:f5:78:27:16:1e:81:8e:6c:1c:59:a8:40:
                    a1:90:75:79:59:61:0c:dd:62:35:68:ec:fa:3e:98:
                    d9:46:61:45:53:bf:14:93:7d:e7:7c:ae:d7:33:a3:
                    fb:5f:a1:b4:e4:14:68:45:24:7b:99:22:02:ac:14:
                    27:20:5c:22:c8:a6:5a:8c:fb:f2:6c:72:7e:74:51:
                    73:34:b1:0e:5f:4e:4a:f6:36:2b:61:ee:0d:b9:89:
                    40:d9:f4:2e:ea:ee:28:7a:cb:81:47:03:ca:f2:19:
                    b9:a3:c2:1a:44:35:c2:49:b9:6e:1a:fa:f9:d8:8f:
                    d9:fe:e2:b9:46:2b:df:a6:ef:a8:63:16:dd:31:5d:
                    29:7a:32:39:12:ab:fb:fa:fd:7a:a2:a4:59:d4:4d:
                    d3:ee:28:0b:8d:82:bd:9f:86:ae:42:f0:0b:88:6b:
                    ac:b4:fe:20:cd:bd:bc:df:33:64:10:4c:bc:e4:e1:
                    2e:a3:5f:03:ed:6e:c7:ed:b2:88:53:50:6f:08:c7:
                    e3:d0:90:94:02:33:d1:df:44:2d:23:a7:d7:95:e2:
                    34:c4:61:e0:45:c4:92:17:09:31:93:c3:49:2f:47:
                    95:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E9:70:4D:12:1E:D1:08:39:62:D6:43:F3:27:18:47:75:FC:5D:C3
            X509v3 Authority Key Identifier:
                keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:18:10:cf:66:36:0c:3a:89:45:56:15:fc:8f:e5:8c:f6:90:
         97:a4:e9:0d:b9:36:c9:56:84:47:31:d2:10:f5:43:8d:ed:65:
         3f:5b:a5:5d:7c:83:9a:cf:7f:5f:68:25:a2:56:ae:96:00:de:
         9b:c3:56:89:90:3c:2f:db:a9:21:78:78:72:ba:20:73:32:23:
         78:64:cb:a2:43:cd:8b:dd:88:cd:d2:60:4f:09:25:49:e6:55:
         5f:83:a0:ed:15:d9:b0:26:b7:73:ed:11:5f:90:c2:d7:1d:d3:
         bb:24:df:4b:99:39:52:a9:99:f6:e4:ee:0c:f0:59:c5:a2:79:
         b0:2a:6d:fa:c2:dd:84:a9:a0:d4:43:c5:af:f0:94:c0:e2:ea:
         5e:c6:2f:9c:71:53:d0:0d:31:fe:c6:3a:da:f5:ef:e5:50:3f:
         94:bb:d0:8f:90:8c:6a:de:d6:dd:be:cb:0e:73:70:5a:e4:33:
         93:bd:b6:ba:1e:9e:50:fc:85:1f:0d:d6:54:fb:46:0e:02:2b:
         6c:32:81:f5:c6:8f:68:4f:a4:c0:a3:a9:24:2d:90:d6:dd:f6:
         c9:4c:3c:52:72:60:1b:9b:4c:8a:0c:d7:0e:33:b4:89:3f:c8:
         70:62:ed:c4:f7:ce:62:31:c5:6a:c4:27:96:b7:78:ae:c8:24:
         7f:db:b8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:46:03 2026 by rpki-client