Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
File:                     KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json)
Hash identifier:          nzZW03Q89bfeSLuFT1h7RUHTlRc+78NJqcp2F9FFoi4=
Subject key identifier:   FB:32:CF:66:64:E3:6C:91:6A:55:0E:30:7D:03:81:77:50:F5:49:1D
Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8
Certificate issuer:       /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8
Certificate serial:       01C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
Manifest number:          01BA
Signing time:             Fri 17 Apr 2026 03:40:56 +0000
Manifest this update:     Fri 17 Apr 2026 03:40:55 +0000
Manifest next update:     Fri 24 Apr 2026 03:40:55 +0000
Files and hashes:         1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: QpmKRgi0CcWv/aV14S1/ckY63rG6dlAA1uyzCglhKno=)
                          2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: 1aZS6GVDT8XLp2PVm8+KUbofZBNmULZCxlUKWTFCqkA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl
                          rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED469, serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8
        Validity
            Not Before: Apr 17 03:40:55 2026 GMT
            Not After : Apr 24 03:40:55 2026 GMT
        Subject: CN=69e1abc7-f647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:bc:7c:33:55:62:ea:4e:83:a4:e4:9b:68:
                    9e:74:e9:72:05:2a:d1:7e:d0:1e:57:50:12:20:34:
                    82:25:2d:54:c1:c2:0f:97:50:4c:97:d3:64:a6:20:
                    9d:11:dd:d8:27:0e:54:7d:84:9a:5a:da:50:ee:06:
                    ef:56:21:50:93:4b:bd:0b:af:76:f9:38:98:81:e3:
                    14:6f:77:64:b5:b4:42:a7:64:83:e0:a9:7e:82:89:
                    4c:2c:51:51:d1:4e:5f:bc:af:8c:ad:b9:f3:58:72:
                    0c:07:c6:08:d2:04:cd:48:18:bd:c4:ad:60:9f:64:
                    34:be:5c:d6:21:90:ab:e5:35:23:ca:4a:35:7a:9b:
                    3c:5c:a2:26:66:91:26:60:0e:ca:9f:87:60:4e:05:
                    18:a4:37:dd:c1:8f:56:a1:fd:d5:58:9b:45:d9:81:
                    92:86:c5:d8:3c:28:8f:68:2f:c1:18:b9:c5:7a:19:
                    b7:f4:94:46:34:9c:90:7a:30:81:48:45:3e:bd:aa:
                    65:d6:bf:78:93:d5:76:ab:83:00:ca:ea:c5:94:74:
                    14:00:ad:24:ce:1b:00:e9:d4:05:c9:71:97:8b:4e:
                    f7:b7:68:6d:19:90:0a:50:a4:a6:fd:3e:a7:22:cf:
                    c4:81:d3:df:df:2f:99:3d:8e:d4:37:51:33:ec:85:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:32:CF:66:64:E3:6C:91:6A:55:0E:30:7D:03:81:77:50:F5:49:1D
            X509v3 Authority Key Identifier:
                keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:04:c0:f5:06:01:78:45:e3:4a:b1:68:e7:63:bf:d0:94:6a:
         33:e9:75:9c:85:ae:d1:41:83:98:3a:1e:69:ab:44:46:91:6d:
         29:bb:d5:4c:c7:12:11:82:29:7f:88:fe:b6:26:95:cc:5b:4b:
         48:cf:6d:47:73:9a:b0:55:9f:3a:83:d8:5a:41:dd:80:78:53:
         31:3a:dd:92:5d:5e:32:18:19:4e:5f:51:70:bf:18:dc:ca:e3:
         48:fb:3b:23:a2:70:8a:9d:b4:9e:ef:95:22:88:ed:d3:80:36:
         5b:19:cd:d0:82:e5:75:db:58:c7:3b:a8:41:8b:4b:9f:3c:73:
         7d:98:cd:96:49:fc:3f:83:69:1a:17:f6:a6:04:5f:f7:8b:d6:
         3d:f6:84:79:64:b3:9d:93:6e:4a:8f:f6:f4:4a:ce:aa:99:d5:
         23:62:2b:a3:da:50:e9:cb:ef:ad:08:fa:6e:0f:91:94:0a:4f:
         a2:e0:f6:96:fc:a6:a2:20:f8:88:9e:83:c1:d2:fa:e3:9a:29:
         ad:27:65:d2:07:92:5e:f1:91:f6:84:f5:fd:cf:76:a8:fd:67:
         47:8c:b8:5b:06:b0:80:8e:d6:6c:2e:63:bc:23:25:c9:c5:a1:
         2d:1b:db:f2:00:a2:6a:2e:27:1c:9a:f6:d0:88:ae:89:24:58:
         ca:47:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:05:52 2026 by rpki-client