Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
File:                     Klm5bDClX71h0iMDc864nR2wGos.mft (raw, json)
Hash identifier:          iEvbP8KUmRjIhGnFaGjty/3LbRe1sqCprjMcAx+bmdU=
Subject key identifier:   13:46:6C:B8:22:59:F1:A2:DF:3B:68:2A:46:37:AD:14:A7:EA:DC:61
Authority key identifier: 2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
Certificate issuer:       /CN=A91F523F/serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
Manifest number:          0104
Signing time:             Fri 17 Apr 2026 05:49:59 +0000
Manifest this update:     Fri 17 Apr 2026 05:49:58 +0000
Manifest next update:     Fri 24 Apr 2026 05:49:58 +0000
Files and hashes:         1: Klm5bDClX71h0iMDc864nR2wGos.crl (hash: BwlkRLP1vS4rOgUbgesH3UqEHgk2Y0LCbPpuHnek0xE=)
                          2: 607B5F6AB05411EF84C8DC74C4F9AE02.roa (hash: FK/DlPDSG9WEqzNFstF7HVEnaAW4fzuMAjNc2Kwb/bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
                          rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F523F, serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
        Validity
            Not Before: Apr 17 05:49:58 2026 GMT
            Not After : Apr 24 05:49:58 2026 GMT
        Subject: CN=69e1ca07-8185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cb:88:12:3a:f5:06:f7:2f:11:8a:f8:a9:bc:
                    41:bb:84:83:b7:10:d6:5c:2e:c5:ba:79:b3:1f:e4:
                    36:cd:19:66:d7:73:dc:78:71:38:13:46:56:d5:61:
                    f4:59:64:f0:7d:08:5f:60:65:1b:eb:aa:9c:0e:81:
                    6a:70:d0:5d:06:eb:5d:0b:b3:d8:6a:2c:25:a2:0f:
                    f2:e1:7d:fa:6e:06:70:08:dc:01:82:b6:d7:ad:b6:
                    c0:d9:9b:5b:30:a8:2d:21:c1:b2:c5:e8:25:1d:fd:
                    d8:7f:11:3d:5e:9f:7f:72:0e:e0:97:5a:42:10:83:
                    0a:52:6a:28:1b:33:c4:27:c4:5d:05:ab:ac:81:58:
                    07:fd:8b:af:bf:bc:1b:17:a4:19:c5:99:49:d8:dc:
                    a9:69:bf:3d:5f:90:8e:75:16:84:c2:b1:6b:60:9f:
                    e7:d5:5b:a3:67:76:ad:e9:f6:ec:5d:50:8f:24:65:
                    4f:d1:c4:13:a1:2c:03:ed:57:54:10:29:42:b4:14:
                    1c:4a:bd:95:b8:82:1b:c7:e7:d9:da:d0:db:20:a6:
                    08:f3:59:e8:13:e2:54:a3:8b:d2:b8:8f:bd:aa:59:
                    01:93:dd:50:e0:93:41:0a:ca:cb:66:92:de:2b:b5:
                    93:cb:bb:04:da:86:16:b9:ee:3d:a4:1a:42:5b:d7:
                    0e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:46:6C:B8:22:59:F1:A2:DF:3B:68:2A:46:37:AD:14:A7:EA:DC:61
            X509v3 Authority Key Identifier:
                keyid:2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:30:e8:6b:d9:fc:4d:11:0a:2f:36:57:58:bc:de:c6:5a:
         7a:50:d9:e8:6c:21:cf:be:96:22:5c:30:a9:00:0a:d7:96:6c:
         cf:e8:53:9f:a6:1c:89:76:d3:f8:0b:51:4a:f9:cb:63:4a:a0:
         da:99:a8:b0:03:94:80:10:9e:e9:4c:42:2d:61:45:cf:6f:02:
         33:f1:38:17:1d:22:c4:a3:c6:2e:0d:d0:a7:d1:f9:5f:20:13:
         2b:02:9a:3b:12:a4:d3:1a:4c:61:57:5e:14:17:bd:0d:0e:98:
         2c:9b:69:ed:65:07:30:83:b3:7f:b0:39:ba:54:7b:38:9d:0d:
         b1:44:1d:35:57:14:99:8e:b2:99:64:be:c1:61:69:78:e7:3a:
         bb:d3:a8:cd:9d:0a:2f:42:ea:50:8b:8b:85:00:08:96:13:75:
         42:15:be:52:0e:18:67:09:a7:13:ea:72:77:a2:38:ee:18:67:
         be:7f:27:d6:df:5a:b2:2f:b6:33:7d:01:92:7a:3f:72:36:eb:
         06:2d:11:dd:77:39:61:34:07:ba:a2:6a:58:12:7a:d0:ab:e0:
         cf:96:13:18:ba:ee:1b:13:22:6a:94:44:67:d7:f7:7c:d8:b9:
         ea:f1:39:90:76:37:26:3e:c6:89:8e:a5:aa:c5:f4:65:17:09:
         7a:4d:a5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:18 2026 by rpki-client