Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
File:                     Klm5bDClX71h0iMDc864nR2wGos.mft (raw, json)
Hash identifier:          vQwkh31/Yvrn8YHwSmHnO91mEX8IH8Rxp/PdstRE844=
Subject key identifier:   56:6C:73:EE:41:74:74:6B:45:F4:8A:67:A6:70:42:0F:10:0B:41:ED
Authority key identifier: 2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
Certificate issuer:       /CN=A91F523F/serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
Manifest number:          EA
Signing time:             Sun 01 Mar 2026 07:32:06 +0000
Manifest this update:     Sun 01 Mar 2026 07:32:06 +0000
Manifest next update:     Sun 08 Mar 2026 07:32:06 +0000
Files and hashes:         1: Klm5bDClX71h0iMDc864nR2wGos.crl (hash: C2JfYVlsQBtITYDzovAC5H3sJDCMaN1XAE45WDu2BC0=)
                          2: 607B5F6AB05411EF84C8DC74C4F9AE02.roa (hash: CDlWFm2LtxVmYaaBC5EKvKez8sI4jo8CXca3FR8eDpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
                          rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F523F, serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
        Validity
            Not Before: Mar  1 07:32:06 2026 GMT
            Not After : Mar  8 07:32:06 2026 GMT
        Subject: CN=69a3eb76-c7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:44:14:93:6b:f7:85:2c:b5:a5:e5:f8:29:
                    c8:9b:6d:7b:fb:e2:56:74:22:0d:67:19:59:62:17:
                    cf:c0:c1:9c:f9:b9:af:33:cd:51:85:02:0d:98:3a:
                    59:62:77:ee:7d:75:c6:1b:11:08:1a:be:08:76:da:
                    60:84:a2:32:ad:0f:68:46:22:63:fe:87:fd:45:e8:
                    64:b5:46:12:5f:98:e6:03:de:89:cc:e2:32:13:07:
                    7c:25:ac:ef:1f:e1:46:d4:c6:a5:85:2c:69:d5:5b:
                    83:f6:37:c2:e8:6d:e3:e6:bb:15:a7:0f:f8:ca:3b:
                    28:0c:19:09:5f:91:33:e9:02:95:da:27:88:eb:29:
                    ba:63:9b:9c:12:6c:8e:cd:aa:dd:f6:30:2e:9c:22:
                    40:b1:06:b6:5c:06:2d:55:ff:7b:47:16:99:e8:ae:
                    fc:9c:8a:c8:f1:80:ec:69:b1:0e:6a:44:9a:c8:41:
                    75:31:26:53:cc:de:63:d0:86:e2:4c:58:cf:94:e3:
                    34:27:d6:ea:94:f8:14:30:2f:ed:03:96:f9:51:f8:
                    62:b6:c6:fb:fa:cb:40:78:05:3e:7c:e0:36:f9:ca:
                    dc:19:46:99:64:dc:b7:4c:f4:54:c8:6b:e7:22:5d:
                    97:39:15:7a:d0:01:6c:49:e2:72:d4:16:cf:43:2c:
                    bb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6C:73:EE:41:74:74:6B:45:F4:8A:67:A6:70:42:0F:10:0B:41:ED
            X509v3 Authority Key Identifier:
                keyid:2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:34:74:2d:15:9f:02:31:91:f4:4a:59:d0:1b:a0:ed:39:ce:
         37:1d:2a:8a:10:25:52:ad:7e:68:59:a6:71:42:4d:e4:6d:17:
         30:50:68:01:0d:3a:16:8d:7f:30:67:9f:9c:33:a0:09:90:9b:
         ca:d9:c3:35:3b:2d:18:4a:10:e5:ce:34:a4:cc:00:c0:b0:6f:
         3a:8c:87:8f:97:12:b4:f2:bd:4b:9f:76:c9:8a:fa:88:a1:61:
         60:bd:2c:d2:51:c2:f8:7e:2b:e4:95:ca:f8:23:8f:d0:5b:28:
         13:1b:f9:30:e7:ae:9f:f5:2a:3e:7a:c9:8b:97:c8:a8:90:f8:
         c4:82:87:e8:81:51:a0:c9:16:26:80:85:25:d8:cf:f9:e3:81:
         2e:fe:cc:13:3f:14:6a:39:36:29:88:f5:b6:82:3e:16:4f:91:
         fa:47:25:76:b4:66:7a:11:ea:6b:7d:df:7d:88:f5:17:e9:e0:
         7a:24:5a:c2:23:f5:cb:65:7b:e5:6c:b8:fd:5e:65:db:fd:bb:
         8e:95:d4:ba:a9:0e:a8:58:cb:ac:7b:29:28:8e:8c:38:09:ad:
         bd:98:dc:98:4f:ef:be:e8:f1:b6:51:d5:1d:cc:08:24:67:30:
         e8:3d:64:b0:3d:39:d9:24:c8:7b:45:4b:3f:41:de:57:35:3d:
         c1:df:a0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:30 2026 by rpki-client