Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
File:                     KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json)
Hash identifier:          +T1o/97kkthywNMpXfbMpi1xydTVixZOc5fNIdyMIxw=
Subject key identifier:   55:45:96:06:D3:CE:A9:1B:D8:4F:7A:86:A0:71:6D:CB:43:62:C0:9C
Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8
Certificate issuer:       /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8
Certificate serial:       01A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
Manifest number:          019E
Signing time:             Sun 01 Mar 2026 05:02:43 +0000
Manifest this update:     Sun 01 Mar 2026 05:02:42 +0000
Manifest next update:     Sun 08 Mar 2026 05:02:42 +0000
Files and hashes:         1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: 8AIdEvop78vHR+XTCd5n2LvC8S1LWjE8YVAG8r+EZgI=)
                          2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: H8jOBdWZy3BflOdKi2IUHX/jDGy3Qp76HCrr86p/kow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl
                          rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED469, serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8
        Validity
            Not Before: Mar  1 05:02:42 2026 GMT
            Not After : Mar  8 05:02:42 2026 GMT
        Subject: CN=69a3c873-fce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e8:ee:7c:e3:d7:57:b9:4c:20:f4:27:f0:c8:
                    5d:17:3a:47:c5:cd:ec:7c:18:af:f7:50:65:7c:82:
                    a6:dd:40:ac:91:dd:4b:ba:42:44:99:68:0e:ab:2d:
                    be:49:e1:42:bd:af:a3:da:8b:8b:80:89:31:5d:ec:
                    62:c9:03:f5:52:2d:69:e2:ac:29:01:e9:32:42:89:
                    87:eb:bf:0d:95:72:2d:09:d6:b8:ab:d4:f3:8a:7e:
                    30:3c:c2:5e:24:fb:6d:e7:f6:57:30:d4:72:39:e7:
                    bf:22:99:5f:cf:ed:26:92:fe:d5:70:c1:7a:8d:98:
                    e8:32:31:ca:25:b4:c4:fc:7b:92:8d:d2:b3:b8:a9:
                    8a:20:d7:83:a7:04:27:19:26:99:bd:54:a7:a7:79:
                    0b:69:d6:40:5f:87:0c:c2:69:91:58:ad:22:da:96:
                    1b:55:db:39:b4:03:74:c4:29:6a:23:95:2e:8d:de:
                    34:46:b2:e0:a2:14:c2:4e:fe:0a:8d:0f:16:5c:7c:
                    f5:16:ac:d9:9c:0a:8f:fc:ab:a7:47:54:3a:af:80:
                    5c:1e:fb:df:ea:91:58:24:a6:47:a0:e1:61:9d:e5:
                    2e:f5:aa:86:5a:de:ee:0a:a8:00:02:90:1d:63:40:
                    0c:4b:19:b4:d0:c8:a6:e0:21:b1:15:f9:72:ac:46:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:45:96:06:D3:CE:A9:1B:D8:4F:7A:86:A0:71:6D:CB:43:62:C0:9C
            X509v3 Authority Key Identifier:
                keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2e:cc:6a:16:4c:64:d3:7c:de:32:e8:fc:64:bd:49:a9:c6:
         9d:61:17:aa:18:ab:86:53:ff:b7:a6:9b:aa:18:e0:96:fa:e4:
         18:0c:32:17:5e:02:1b:56:2a:7a:50:3d:a4:d6:d0:2a:5e:d8:
         36:c6:48:49:62:be:c8:3b:ab:6d:23:21:75:97:80:35:19:b2:
         fe:58:8c:7b:a0:14:d6:a6:c6:8a:4e:e8:b3:b5:13:e6:82:67:
         eb:88:11:02:37:ce:fc:f7:73:e1:08:1b:67:46:40:33:4b:b8:
         84:9d:e3:78:5e:c0:ce:f6:65:59:d8:21:0f:e4:23:13:bd:17:
         af:da:d8:6e:a4:9c:8f:73:78:0d:88:24:8c:3f:9e:86:83:71:
         9f:3b:92:d1:c4:8f:64:6d:98:d6:b5:c9:e3:b5:dc:ec:46:91:
         b8:84:6a:19:35:35:8e:2e:be:f2:02:de:c4:c4:17:17:0f:8e:
         a0:3e:9b:9c:0d:8a:c9:89:72:74:4d:4d:4d:b9:25:7a:b1:88:
         97:c7:69:5d:79:b5:a2:e5:9b:37:bd:72:96:89:d1:24:d2:28:
         64:a4:57:93:2d:4c:70:1a:47:be:00:d5:56:a2:db:73:be:6e:
         04:9d:28:0c:dd:87:5c:0e:e3:5a:80:1c:ac:76:f2:99:2d:17:
         25:2b:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:13 2026 by rpki-client