Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
File:                     2KPIZydtR_ptDvLogh8Ps9MZcb8.mft (raw, json)
Hash identifier:          vrBzcRbb7YJOVQcvRnZQipdT6eCWoiRW4OoIazq5jHI=
Subject key identifier:   03:5A:06:07:AE:DB:62:E9:B4:33:17:F9:49:40:7F:0B:C6:0D:5F:CC
Authority key identifier: D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF
Certificate issuer:       /CN=A91278E5/serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
Manifest number:          0C
Signing time:             Sun 05 Apr 2026 08:25:56 +0000
Manifest this update:     Sun 05 Apr 2026 08:25:56 +0000
Manifest next update:     Sun 12 Apr 2026 08:25:56 +0000
Files and hashes:         1: 2KPIZydtR_ptDvLogh8Ps9MZcb8.crl (hash: L1izKcM9kpciGq+zNWLlaiBJW0W+Ewbmanb6Rp3ScmQ=)
                          2: 1C7AB64E21BE11F191732FC01B3D8C67.roa (hash: VkCR5thgem73gdzuOjRPxScIE5IryV7vWPHF+kNveak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl
                          rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278E5, serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF
        Validity
            Not Before: Apr  5 08:25:56 2026 GMT
            Not After : Apr 12 08:25:56 2026 GMT
        Subject: CN=69d21c94-248b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:85:ed:47:2b:eb:e7:37:6f:b0:e6:d6:23:88:
                    f7:c7:ab:3e:0f:e0:a0:9c:d4:b2:38:c6:d3:a6:82:
                    1b:71:cb:2d:36:98:a7:e4:42:94:88:62:9b:af:99:
                    98:90:b1:ff:f3:91:62:50:d7:6e:f1:d0:ff:c6:ef:
                    96:44:88:d2:e7:64:06:9d:08:43:aa:07:b7:b8:64:
                    c6:47:54:50:99:09:76:3f:ef:52:a5:06:44:79:e8:
                    e3:ab:85:32:a9:ba:e9:e3:6e:c6:a6:85:9f:c7:86:
                    d5:6d:be:a5:07:18:53:23:c0:4f:0c:4a:ec:44:92:
                    0b:8f:1d:c8:dd:b0:2b:01:d5:dd:c5:bc:99:78:ac:
                    fe:da:10:e2:04:57:69:5b:b7:bc:46:9f:d3:24:07:
                    f4:20:90:e4:60:3f:59:74:3d:65:29:91:76:77:07:
                    39:ce:fa:d0:74:5b:b1:d0:f5:dc:7a:7e:8f:76:53:
                    cf:8e:48:03:27:ba:60:34:cb:15:ed:a0:dc:d5:38:
                    d4:6b:7e:ce:0a:4f:1e:03:fa:82:71:e1:bb:1c:27:
                    03:da:42:c2:af:60:4f:f3:68:8b:b1:26:0b:93:59:
                    6c:c2:c7:72:e8:94:6b:cf:e7:b3:e1:1b:cd:a0:2a:
                    5b:5c:44:5e:1f:ee:cf:da:75:c6:f5:b5:4f:ae:2a:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5A:06:07:AE:DB:62:E9:B4:33:17:F9:49:40:7F:0B:C6:0D:5F:CC
            X509v3 Authority Key Identifier:
                keyid:D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a1:90:5f:c1:71:dd:5d:d5:c4:2a:c6:2f:c1:fa:02:c9:0b:
         06:74:62:93:d2:3d:de:da:73:01:1a:ec:71:a3:8d:67:9e:8d:
         f6:fd:7d:34:46:99:b4:7d:e9:3d:ec:33:bb:83:6d:70:65:46:
         ce:7b:2f:fb:33:f8:69:9a:86:11:1b:bb:f2:71:79:18:0d:96:
         b0:23:9d:f4:e9:36:5f:ef:a0:43:d9:46:52:82:93:1d:2a:42:
         f9:05:90:eb:54:36:ee:f0:d2:40:9d:d3:04:44:44:9b:ed:30:
         e6:9f:3e:b2:76:d0:cd:2c:cc:ce:06:88:5f:b1:c3:4f:51:8d:
         d8:66:5e:1e:0d:c8:8a:38:79:73:44:fe:90:2e:f9:37:55:d2:
         30:40:e2:14:15:7e:f9:99:63:5a:0e:71:03:11:1e:9f:fc:b9:
         a6:f0:33:78:a8:73:9a:13:17:b7:2e:e1:f2:ca:c6:5e:34:19:
         17:2f:be:d8:9d:4e:75:8a:62:a7:c7:0d:e6:c8:ca:72:b7:79:
         47:12:7e:64:d2:70:ce:4e:a4:66:be:8d:58:94:3a:fc:77:39:
         9d:5b:2c:36:8d:7a:6a:35:87:5f:ff:ed:41:8e:7b:ad:db:f2:
         a6:4b:01:7c:1d:8a:ad:a2:86:1c:24:06:e4:f7:c3:5a:22:62:
         fc:a4:62:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:38 2026 by rpki-client