Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
File:                     kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json)
Hash identifier:          kLW+1FdZHnt0rzSFBqNGAyTb3Vo98ANeb36e0hw+NPE=
Subject key identifier:   92:DA:8A:49:14:36:6C:05:78:FA:D3:9F:A0:9E:F3:C8:D3:E2:4E:7F
Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Certificate issuer:       /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Certificate serial:       0448
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
Manifest number:          0441
Signing time:             Fri 17 Apr 2026 00:09:33 +0000
Manifest this update:     Fri 17 Apr 2026 00:09:33 +0000
Manifest next update:     Fri 24 Apr 2026 00:09:33 +0000
Files and hashes:         1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: K5X1Nq8IQcuAnF2+yotA8LetiHgd/FGWwE7/XFSfTCo=)
                          2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: dHCif+Ldj0bWw7XW3VRYigHVgHSS9PTU4XO4u0HGdK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
        Validity
            Not Before: Apr 17 00:09:33 2026 GMT
            Not After : Apr 24 00:09:33 2026 GMT
        Subject: CN=69e17a3d-8f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:b9:24:fb:48:e9:f4:19:0e:a4:a2:dd:c7:
                    f9:2e:39:a4:01:44:41:e4:54:c5:92:22:f3:44:fb:
                    c7:c4:68:a3:8a:be:fc:92:1f:14:e8:ef:cc:ff:fe:
                    e9:96:67:4b:ef:7a:a8:7a:e6:f9:dd:0a:02:89:ca:
                    94:7d:81:5d:4e:30:07:8f:f5:95:c8:3c:86:c1:23:
                    df:2b:cf:ad:34:33:f3:6c:68:d4:3e:52:3e:1a:ba:
                    f8:ad:17:8f:fe:10:8c:c9:3e:a2:19:33:cd:62:0b:
                    73:68:78:04:bb:6d:73:b9:d4:e6:4b:17:f5:14:33:
                    2a:7a:4e:f8:8d:d1:15:1b:12:92:fa:2a:0e:30:d1:
                    a4:3e:88:cb:fb:e6:43:27:37:5a:7c:ee:56:a6:83:
                    28:a8:e0:d3:49:7d:93:59:b0:6c:d7:d4:28:1d:d0:
                    45:11:d8:ce:54:7d:63:22:7c:ad:eb:fb:52:8d:55:
                    5c:7e:e3:be:92:d5:6b:af:ba:72:6e:03:72:5d:25:
                    54:cb:51:49:fc:83:45:94:ed:08:36:dc:50:93:6c:
                    ff:72:8a:5d:e4:3f:44:a6:2a:c5:69:18:9a:09:5c:
                    94:8c:16:b0:fe:70:22:fb:f9:01:9d:e9:77:80:0b:
                    ee:38:ea:7c:18:c7:e3:5b:8c:17:de:86:63:04:4a:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DA:8A:49:14:36:6C:05:78:FA:D3:9F:A0:9E:F3:C8:D3:E2:4E:7F
            X509v3 Authority Key Identifier:
                keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:32:75:de:6f:38:f5:2f:a6:50:e1:c2:51:ef:1d:78:50:37:
         12:a2:82:b0:14:42:1c:4e:0f:34:8e:c6:d7:2d:f2:b9:2b:e4:
         a0:56:72:d1:52:1a:bc:97:17:56:69:90:63:c0:64:8f:09:29:
         6f:24:9f:bb:77:e7:74:08:76:43:44:b7:a8:50:51:1c:1a:a1:
         7b:ba:a5:9e:6b:a6:5d:78:42:84:8f:90:07:17:08:b7:41:7e:
         d6:80:1d:54:80:4a:eb:1b:2d:6a:34:24:56:e5:2d:1f:a3:1b:
         28:7b:e4:6d:c0:41:8b:f3:51:a6:d8:91:b6:1c:c3:7f:ee:c8:
         78:5f:93:ef:2b:ca:fd:ec:4f:7e:18:5c:e6:2f:c3:3d:c7:99:
         d4:92:43:ff:f9:07:38:eb:18:5a:ba:71:bc:f1:7b:42:d0:eb:
         9d:2b:e1:bc:07:d7:df:40:49:e4:31:9d:f5:a8:f7:1a:e9:1a:
         e8:dc:f6:60:81:d0:97:a3:03:1a:9f:2a:88:45:a4:3b:aa:30:
         45:40:7d:14:35:c8:c5:c4:2d:3f:4a:c1:2b:4e:c7:2b:17:2f:
         70:53:da:7a:ee:8b:2f:01:87:d0:00:4d:de:a4:10:77:ee:3f:
         8f:dd:a2:ba:7b:c4:60:8c:12:f2:f0:1e:3b:9a:12:fc:c5:f1:
         0c:bb:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:11 2026 by rpki-client