Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
File:                     _knPM_vkJHsroe6aVISnQK07bg4.mft (raw, json)
Hash identifier:          /tbYuY94bp2Xvjy7m8V9WNhKF5bnTdT86V6GBkfJBc8=
Subject key identifier:   9D:58:83:47:90:2B:11:3F:39:2B:25:A3:FC:C4:19:32:D1:29:1A:11
Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
Certificate issuer:       /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
Manifest number:          75
Signing time:             Sun 05 Apr 2026 07:08:34 +0000
Manifest this update:     Sun 05 Apr 2026 07:08:33 +0000
Manifest next update:     Sun 12 Apr 2026 07:08:33 +0000
Files and hashes:         1: _knPM_vkJHsroe6aVISnQK07bg4.crl (hash: dLA/Y4mw/7CIFJpb9a4vniohd1saQvzL56yA8a7V0KQ=)
                          2: 0E06126A7E4011F084643A20C4F9AE02.roa (hash: BOcoiAspHCwkr5azVOhAvR+BAnY8G++2Bq7+nnR+vDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
                          rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
        Validity
            Not Before: Apr  5 07:08:33 2026 GMT
            Not After : Apr 12 07:08:33 2026 GMT
        Subject: CN=69d20a72-33d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:eb:71:69:29:d2:28:b2:d3:83:aa:bf:29:
                    46:ab:31:3a:51:3a:44:93:ec:da:49:c3:30:b2:78:
                    7a:d5:3a:89:31:b4:7d:db:07:74:2a:37:7f:84:ce:
                    40:1f:18:a6:de:9d:40:67:cc:bb:b8:96:c8:cd:a0:
                    53:cc:78:67:2d:3f:42:dd:28:e1:6e:c8:49:86:a8:
                    97:68:46:5a:ee:87:a0:da:e7:ef:43:07:85:10:46:
                    5f:8f:3f:75:9f:20:01:77:d6:cb:68:bf:67:b7:7b:
                    6a:8c:32:fb:e4:89:49:0a:df:24:c2:37:53:ec:8c:
                    07:6d:c1:98:88:bb:04:42:e7:de:bf:7f:e5:3f:3c:
                    a3:26:42:82:53:3f:90:c3:87:e6:3c:a3:b5:e1:1a:
                    48:be:b5:1d:16:33:b1:73:1c:a7:67:3e:48:ca:e0:
                    36:fb:cb:66:39:8c:85:c8:77:6b:60:41:07:e6:7d:
                    f7:4c:1f:fd:33:71:9b:a7:6b:95:86:7e:b7:bb:88:
                    0f:a3:2a:32:53:ba:8d:b4:d3:44:68:95:a7:dc:a0:
                    c2:72:40:7f:e4:00:d9:8e:ef:cc:73:77:ba:b6:3b:
                    28:ec:65:15:b3:a4:2c:e9:9a:24:3a:9d:7e:63:75:
                    4f:bf:33:27:9b:06:51:3d:1c:27:00:45:da:25:2e:
                    9a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:58:83:47:90:2B:11:3F:39:2B:25:A3:FC:C4:19:32:D1:29:1A:11
            X509v3 Authority Key Identifier:
                keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:86:60:89:68:48:ee:8f:9f:ef:2f:af:ec:95:fd:13:62:e1:
         13:44:3b:dc:4b:0b:39:6f:f5:bc:ba:8c:ea:84:a7:52:79:ef:
         24:a7:bb:f0:4c:4b:08:1f:ca:a2:91:77:57:ea:63:8d:6d:28:
         0e:e5:4c:e0:da:e1:1c:56:b7:68:6d:6b:8b:d2:48:7c:ae:17:
         f1:1c:c3:b5:c9:3e:a6:25:ed:ee:51:3d:b0:c3:ae:26:f9:ab:
         68:2c:b2:41:5c:ac:93:cf:1e:4c:11:a8:55:21:1a:9e:23:e7:
         1d:72:84:24:dd:5a:a3:35:94:61:fe:17:47:cc:ca:df:a3:0a:
         fd:13:4a:fb:a7:e9:74:1c:ce:6d:01:4e:96:39:47:08:ed:ec:
         af:49:89:ba:0d:e4:f6:97:8a:2b:5c:21:8f:1d:57:75:8c:78:
         70:3f:0b:fb:f0:52:e1:b0:cd:df:42:5b:f6:6e:ad:52:1b:82:
         ef:54:15:e4:b0:45:65:27:97:70:ee:c1:38:03:d4:60:09:f4:
         ca:87:f1:b6:c8:78:68:30:90:71:0a:6f:ad:b9:f5:8e:74:eb:
         a9:f6:97:9f:61:4b:66:eb:3f:cb:02:10:3f:05:c3:db:4a:f8:
         4b:85:db:a9:f7:9f:55:d1:e3:e6:e6:df:83:37:4d:14:f6:d7:
         d6:99:cf:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:59:04 2026 by rpki-client