Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
File:                     K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json)
Hash identifier:          9TXJiclFHuavQTOpN/7YxrzNFZytd4XRiGR/aZ/yGqk=
Subject key identifier:   E5:C7:7E:1D:CC:F5:F9:16:47:13:A4:A4:FB:02:D9:3C:10:44:66:99
Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B
Certificate issuer:       /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
Certificate serial:       1751
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
Manifest number:          1738
Signing time:             Sat 28 Feb 2026 16:39:51 +0000
Manifest this update:     Sat 28 Feb 2026 16:39:50 +0000
Manifest next update:     Sat 07 Mar 2026 16:39:50 +0000
Files and hashes:         1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: mcqjkXkybbXyMP6tIyxoWIetCVwfwXWnPloQFnivR+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl
                          rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:39:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5969 (0x1751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B
        Validity
            Not Before: Feb 28 16:39:50 2026 GMT
            Not After : Mar  7 16:39:50 2026 GMT
        Subject: CN=69a31a57-a951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:e3:b9:de:b2:57:a0:a8:25:f0:00:66:aa:
                    84:f5:40:c7:51:2e:b8:f3:b6:d9:05:54:d6:00:eb:
                    ef:85:b4:ef:c0:3e:dc:d4:79:ac:c0:1b:40:a4:d4:
                    bc:8b:ca:45:a6:ab:e2:69:d4:d0:16:12:18:83:b8:
                    d8:fd:64:6b:fc:8e:26:a0:50:0b:21:b4:c0:08:44:
                    ce:c7:19:82:d4:49:f9:d1:54:8f:21:80:65:2f:8d:
                    b2:6a:1c:15:8e:eb:80:c1:ee:25:7e:75:8c:9b:25:
                    83:d9:cb:39:04:14:b9:3a:6c:0e:b8:0b:dc:e6:c8:
                    a3:ef:99:9c:a0:a4:ea:1a:e6:77:fa:1a:3c:c7:54:
                    49:bf:8d:c6:93:d5:0e:8b:eb:cc:fc:50:c5:b7:5c:
                    3f:4b:02:4f:8b:d4:8b:b6:db:26:79:08:c7:86:59:
                    b1:6a:aa:ff:80:5f:e5:70:72:00:c7:b7:a8:8d:3a:
                    0a:59:5e:eb:ff:1a:60:20:e2:ab:04:89:2b:88:e7:
                    34:2d:ad:85:2c:13:2d:77:cd:77:c9:ea:0d:8b:26:
                    cc:87:a0:13:1a:15:55:9a:62:0c:ff:22:82:63:a2:
                    da:e5:7e:16:c1:45:4a:29:cd:01:67:27:ce:e3:35:
                    94:0a:5c:46:f3:f7:1f:ff:2c:c2:b3:48:c5:c4:5f:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C7:7E:1D:CC:F5:F9:16:47:13:A4:A4:FB:02:D9:3C:10:44:66:99
            X509v3 Authority Key Identifier:
                keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:09:d6:f2:3a:81:07:b9:71:a6:9a:14:eb:6e:45:29:ec:91:
         b9:4c:d2:8a:dc:16:9f:99:20:9b:81:24:f1:05:a7:50:4f:20:
         11:3e:4d:95:0f:c2:5f:2e:d1:07:22:b9:38:c4:25:cc:25:5f:
         38:d1:f2:76:bb:45:bc:14:79:53:db:2d:dc:e4:06:81:01:c0:
         96:80:3c:71:4a:a6:18:11:6f:b5:98:ae:f3:57:aa:0d:83:61:
         fb:dd:44:26:21:78:ff:4c:e8:b0:9d:29:f2:5d:d6:f3:5b:89:
         9e:0a:fe:82:fa:40:8b:f6:a8:a2:8f:b6:8e:2f:fb:f0:f5:45:
         23:74:18:41:65:22:44:c5:61:92:58:68:0f:81:e5:0d:cd:f0:
         48:bc:6e:e4:ce:a4:7d:21:2a:6c:8a:6b:df:1f:fb:e3:98:7c:
         d5:9b:65:9e:a3:d1:43:63:05:36:bc:d8:98:43:0a:49:8c:f6:
         b9:f0:81:a3:62:5a:89:29:7a:f2:06:30:a7:bd:90:16:b4:e3:
         3e:ea:d0:47:85:b0:d1:4b:96:b6:42:e1:5e:8e:ba:f7:bf:90:
         36:b4:42:ee:e0:9a:37:2f:61:bb:d5:fd:da:1c:93:bc:67:db:
         1d:ee:be:e5:9d:4e:88:cb:88:6b:6b:bf:bb:32:74:bd:8c:29:
         b6:c0:7b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:34 2026 by rpki-client