Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft
File:                     KHuwzWb71-W3qIumZ4kSTAsExXg.mft (raw, json)
Hash identifier:          SrTWHuL9kbmbqKegSqJTU1fTF7fTPEEvolibAfio9gg=
Subject key identifier:   7E:C2:F5:C4:F3:FA:93:86:4C:60:BA:9A:3F:1F:E5:41:83:F4:32:33
Authority key identifier: 28:7B:B0:CD:66:FB:D7:E5:B7:A8:8B:A6:67:89:12:4C:0B:04:C5:78
Certificate issuer:       /CN=A91EAE25/serialNumber=287BB0CD66FBD7E5B7A88BA66789124C0B04C578
Certificate serial:       0C27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft
Manifest number:          0C19
Signing time:             Thu 16 Apr 2026 18:43:40 +0000
Manifest this update:     Thu 16 Apr 2026 18:43:39 +0000
Manifest next update:     Thu 23 Apr 2026 18:43:39 +0000
Files and hashes:         1: KHuwzWb71-W3qIumZ4kSTAsExXg.crl (hash: 2DRui2OZHGckZmJzkWbG9eA7TESSYmiQ5a1Ut/ZcL0M=)
                          2: 2BA212DC306D11EA81D19B38C4F9AE02.roa (hash: FbKjiGyoYXtJ+Sip8tCWTgSCfHXUOeTdm95y0Shz3Pc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3111 (0xc27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE25, serialNumber=287BB0CD66FBD7E5B7A88BA66789124C0B04C578
        Validity
            Not Before: Apr 16 18:43:39 2026 GMT
            Not After : Apr 23 18:43:39 2026 GMT
        Subject: CN=69e12ddb-a25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:d1:f8:c5:30:5d:60:86:51:69:97:bd:4e:
                    bd:a4:33:ea:90:58:30:ea:5f:f6:bc:1d:07:55:8f:
                    df:e4:2e:eb:24:bd:e7:c6:d2:7f:ab:bd:ec:34:cf:
                    6d:e3:64:eb:99:7e:38:69:32:00:0b:f6:85:a3:a1:
                    af:bc:ee:fc:c8:2c:b4:39:17:e2:3c:cc:99:41:eb:
                    e3:09:3a:31:01:31:f2:14:35:35:ee:c9:7e:de:b8:
                    72:22:b2:c0:4b:18:d8:ff:b8:04:0d:a3:cd:3f:27:
                    59:11:6a:f0:07:ca:b8:37:12:2e:8c:f8:05:ac:aa:
                    f3:f8:55:8c:08:bc:da:79:f0:1b:ca:ed:25:5d:34:
                    cc:e5:df:37:72:f0:38:62:71:0d:e8:fd:1e:e7:64:
                    36:12:c1:d2:a6:c4:86:f7:44:49:d3:9a:dd:41:b4:
                    a4:d2:99:b3:66:0b:6c:71:8a:ea:bf:e3:f2:7f:76:
                    0b:ab:26:40:43:e0:e1:91:78:74:ae:0c:94:c2:42:
                    c8:6d:b3:ec:38:e9:4d:a1:6e:e3:2d:f5:91:76:8c:
                    31:93:99:29:22:ba:1a:7c:7a:37:87:d3:9e:ee:84:
                    ac:ee:90:86:26:42:5d:b2:d1:4b:1f:df:85:d4:e3:
                    98:16:98:5b:ee:9b:6b:64:46:43:ba:9b:3d:29:c7:
                    2f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C2:F5:C4:F3:FA:93:86:4C:60:BA:9A:3F:1F:E5:41:83:F4:32:33
            X509v3 Authority Key Identifier:
                keyid:28:7B:B0:CD:66:FB:D7:E5:B7:A8:8B:A6:67:89:12:4C:0B:04:C5:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:4b:09:e4:7a:a6:63:1c:01:c2:9e:b4:a4:a3:ee:e6:da:
         61:26:07:30:b8:76:7b:3b:d2:a0:0e:0e:61:5f:52:5b:93:02:
         43:76:73:20:3c:ce:01:34:3e:37:50:ed:37:83:86:f0:e5:c3:
         bc:6b:05:ec:3f:8d:49:8f:9f:4e:07:7d:5e:70:03:e3:3a:30:
         13:63:35:dc:ea:8d:c3:97:14:15:1a:48:60:c4:5c:88:87:fc:
         ea:d9:6a:29:86:ce:8e:8f:b5:d7:17:31:e8:44:0f:b0:5d:c5:
         07:38:4d:e6:45:de:b5:af:c5:59:c5:87:2d:e6:b0:17:2a:3e:
         73:da:11:27:ea:25:48:c6:61:c4:f8:5c:be:66:6b:4e:67:7c:
         61:51:92:88:ac:5d:d3:9d:aa:4d:c0:2c:82:91:75:62:76:c6:
         ec:ae:08:47:f2:5b:15:17:6e:fb:ea:96:8b:7f:ba:b2:34:4a:
         24:dc:68:46:15:61:b4:d8:5c:29:0d:b5:17:28:fa:10:c9:75:
         c1:62:ab:85:f5:d6:f2:a3:a5:62:1e:18:62:f1:0e:2a:b4:19:
         a5:70:a8:c2:31:aa:4b:ba:f3:05:29:a7:77:e4:35:21:3f:24:
         05:11:d9:c0:e5:b9:04:60:27:0a:c8:64:93:e7:82:4f:51:84:
         11:56:0e:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFMjUxMTAvBgNVBAUTKDI4N0JCMENENjZGQkQ3RTVCN0E4OEJBNjY3ODkxMjRD
MEIwNEM1NzgwHhcNMjYwNDE2MTg0MzM5WhcNMjYwNDIzMTg0MzM5WjAYMRYwFAYD
VQQDEw02OWUxMmRkYi1hMjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuUzR+MUwXWCGUWmXvU69pDPqkFgw6l/2vB0HVY/f5C7rJL3nxtJ/q73sNM9t
42TrmX44aTIAC/aFo6GvvO78yCy0ORfiPMyZQevjCToxATHyFDU17sl+3rhyIrLA
SxjY/7gEDaPNPydZEWrwB8q4NxIujPgFrKrz+FWMCLzaefAbyu0lXTTM5d83cvA4
YnEN6P0e52Q2EsHSpsSG90RJ05rdQbSk0pmzZgtscYrqv+Pyf3YLqyZAQ+DhkXh0
rgyUwkLIbbPsOOlNoW7jLfWRdowxk5kpIroafHo3h9Oe7oSs7pCGJkJdstFLH9+F
1OOYFphb7ptrZEZDups9Kccv5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7C9cTz
+pOGTGC6mj8f5UGD9DIzMB8GA1UdIwQYMBaAFCh7sM1m+9flt6iLpmeJEkwLBMV4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUyNS82OEU1N0FFRTMw
NjgxMUVBQTcwNkUzMkFDNEY5QUUwMi9LSHV3eldiNzEtVzNxSXVtWjRrU1RBc0V4
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tIdXd6V2I3MS1XM3FJdW1aNGtTVEFzRXhYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUUyNS82OEU1N0FFRTMwNjgxMUVBQTcwNkUzMkFDNEY5QUUwMi9LSHV3eldiNzEt
VzNxSXVtWjRrU1RBc0V4WGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnv1LCeR6pmMcAcKetKSj7ubaYSYHMLh2ezvSoA4OYV9SW5MCQ3ZzIDzOATQ+
N1DtN4OG8OXDvGsF7D+NSY+fTgd9XnAD4zowE2M13OqNw5cUFRpIYMRciIf86tlq
KYbOjo+11xcx6EQPsF3FBzhN5kXeta/FWcWHLeawFyo+c9oRJ+olSMZhxPhcvmZr
Tmd8YVGSiKxd052qTcAsgpF1YnbG7K4IR/JbFRdu++qWi3+6sjRKJNxoRhVhtNhc
KQ21Fyj6EMl1wWKrhfXW8qOlYh4YYvEOKrQZpXCowjGqS7rzBSmnd+Q1IT8kBRHZ
wOW5BGAnCshkk+eCT1GEEVYOsA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:03:07 2026 by rpki-client