Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
File:                     kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json)
Hash identifier:          rUJqJmJZ1ooZP2JMoD6snAiYa6TJbDdvXmPFjblI/Ng=
Subject key identifier:   03:4C:B9:C3:7D:8B:CC:C3:62:96:C2:B6:C0:AF:AF:7F:9D:DE:2C:A9
Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Certificate issuer:       /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Certificate serial:       0430
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
Manifest number:          0429
Signing time:             Sun 01 Mar 2026 23:39:10 +0000
Manifest this update:     Sun 01 Mar 2026 23:39:09 +0000
Manifest next update:     Sun 08 Mar 2026 23:39:09 +0000
Files and hashes:         1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: tFuaX0eD6j/MjRWzzgZQvjkUHBv9a25pBDZ4/uB/P7k=)
                          2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: dHCif+Ldj0bWw7XW3VRYigHVgHSS9PTU4XO4u0HGdK8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1072 (0x430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
        Validity
            Not Before: Mar  1 23:39:09 2026 GMT
            Not After : Mar  8 23:39:09 2026 GMT
        Subject: CN=69a4ce1e-9ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:86:84:6b:1d:53:4c:f9:d7:83:3f:21:c1:ac:
                    8f:ef:bd:6a:ce:a4:e6:4a:8f:56:0e:47:a1:fe:19:
                    f4:ed:ec:ba:a4:44:87:55:ce:cb:39:8e:94:fb:36:
                    e7:99:9f:c5:2a:fd:b7:d4:3a:17:23:96:c3:44:2c:
                    32:88:b6:13:90:2c:c1:5c:a6:9a:1a:25:7c:1f:15:
                    7e:6e:f4:5a:61:f4:62:1c:0c:89:88:b1:f9:79:5c:
                    b3:ff:d3:74:73:83:05:ad:12:f4:7a:0c:ae:09:85:
                    c4:3e:31:36:95:f4:ee:63:89:3e:54:5e:e4:85:80:
                    4a:52:e3:a7:3e:df:20:fb:6f:e5:28:7d:3c:65:07:
                    5f:15:2f:9e:59:4e:98:9b:38:26:a1:8f:51:ef:0a:
                    7a:85:ff:6d:89:75:e9:ef:f2:85:49:c5:ee:f1:30:
                    a0:85:f9:16:69:64:8d:12:48:6e:44:04:9d:76:fe:
                    3b:d0:f3:58:a0:66:75:da:3e:2c:9c:22:a9:3d:e4:
                    fd:ca:78:5c:2c:a3:fb:1e:4b:9e:44:4a:de:76:55:
                    ce:71:bd:de:d9:e2:81:22:39:df:d7:17:a4:d5:01:
                    4b:f8:01:c7:d9:42:00:04:fe:f5:ab:a6:e4:64:33:
                    c9:fc:c3:d0:2d:5c:d2:4d:b9:d9:a8:0b:87:a4:22:
                    01:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4C:B9:C3:7D:8B:CC:C3:62:96:C2:B6:C0:AF:AF:7F:9D:DE:2C:A9
            X509v3 Authority Key Identifier:
                keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d2:8c:8c:fe:04:e5:f2:7f:79:87:ca:60:14:32:c5:0b:78:
         a7:50:02:84:e2:c3:ef:b9:9e:d0:3b:67:71:35:60:b0:38:f1:
         c9:2f:a0:30:54:e7:a1:70:4f:e0:d8:0b:2d:8b:53:23:74:cf:
         99:3a:f8:f9:0f:bf:08:53:bc:c7:cc:ca:ef:58:b7:f3:0f:e1:
         8f:55:85:b5:22:ac:83:bd:28:39:8c:03:83:93:7f:21:40:4e:
         03:4d:ae:ce:a7:3f:f7:82:8d:98:c5:de:a4:a8:12:c6:ef:7b:
         f7:1c:e0:68:46:c8:de:23:67:30:16:0d:64:34:51:63:f6:e6:
         79:3e:8e:7c:77:46:78:cf:90:d1:7d:21:c4:1d:94:0b:84:13:
         e5:a5:4c:80:01:a1:08:e8:44:65:fe:98:88:1b:c4:5b:df:50:
         fb:01:42:46:ea:ab:11:e8:82:94:d2:54:6d:d9:f6:1d:77:2c:
         0f:00:f0:44:bc:cb:6a:f0:23:39:f8:29:21:ea:70:99:d2:69:
         49:c5:8d:d4:d0:ac:52:60:80:f2:6b:95:28:fe:1a:6c:96:11:
         e7:a6:f6:20:cb:be:8d:62:85:9b:14:a3:85:4a:57:a5:a9:43:
         fa:ce:04:14:ee:6f:a6:19:7e:25:c6:40:77:d9:2e:af:58:eb:
         d9:5d:11:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc5MzUxMTAvBgNVBAUTKDkwQzZCNjhEMTZBRTQzOTJFREYwRTkwRkUxMzczODBF
M0M0NDM3RTcwHhcNMjYwMzAxMjMzOTA5WhcNMjYwMzA4MjMzOTA5WjAYMRYwFAYD
VQQDEw02OWE0Y2UxZS05YWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxYaEax1TTPnXgz8hwayP771qzqTmSo9WDkeh/hn07ey6pESHVc7LOY6U+zbn
mZ/FKv231DoXI5bDRCwyiLYTkCzBXKaaGiV8HxV+bvRaYfRiHAyJiLH5eVyz/9N0
c4MFrRL0egyuCYXEPjE2lfTuY4k+VF7khYBKUuOnPt8g+2/lKH08ZQdfFS+eWU6Y
mzgmoY9R7wp6hf9tiXXp7/KFScXu8TCghfkWaWSNEkhuRASddv470PNYoGZ12j4s
nCKpPeT9ynhcLKP7HkueREredlXOcb3e2eKBIjnf1xek1QFL+AHH2UIABP71q6bk
ZDPJ/MPQLVzSTbnZqAuHpCIBCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFANMucN9
i8zDYpbCtsCvr3+d3iypMB8GA1UdIwQYMBaAFJDGto0WrkOS7fDpD+E3OA48RDfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzkzNS85MDVBM0E0ODlC
OTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1THQ4T2tQNFRjNERqeEVO
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tNYTJqUmF1UTVMdDhPa1A0VGM0RGp4RU4tYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzkzNS85MDVBM0E0ODlCOTUxMUVDQUUzRjBDNEZDNEY5QUUwMi9rTWEyalJhdVE1
THQ4T2tQNFRjNERqeEVOLWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAatKMjP4E5fJ/eYfKYBQyxQt4p1AChOLD77me0DtncTVgsDjxyS+gMFTnoXBP
4NgLLYtTI3TPmTr4+Q+/CFO8x8zK71i38w/hj1WFtSKsg70oOYwDg5N/IUBOA02u
zqc/94KNmMXepKgSxu979xzgaEbI3iNnMBYNZDRRY/bmeT6OfHdGeM+Q0X0hxB2U
C4QT5aVMgAGhCOhEZf6YiBvEW99Q+wFCRuqrEeiClNJUbdn2HXcsDwDwRLzLavAj
OfgpIepwmdJpScWN1NCsUmCA8muVKP4abJYR56b2IMu+jWKFmxSjhUpXpalD+s4E
FO5vphl+JcZAd9kur1jr2V0RFw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:41 2026 by rpki-client