Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
File:                     KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json)
Hash identifier:          uh5xNSvS2SfRDMX7MYYeLU9AA6AvggLHqNRxTDtQvFY=
Subject key identifier:   1B:CE:88:FE:5E:87:00:C4:E5:BA:63:84:DE:0A:50:8F:36:8E:A5:F8
Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C
Certificate issuer:       /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
Manifest number:          0137
Signing time:             Sun 05 Apr 2026 04:58:00 +0000
Manifest this update:     Sun 05 Apr 2026 04:57:59 +0000
Manifest next update:     Sun 12 Apr 2026 04:57:59 +0000
Files and hashes:         1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: 7qd2F5p21B1PAmPZGqrY/dMGvXDYnU2UeC6DntIsrmw=)
                          2: B9574A322C1311F0B642882AC4F9AE02.roa (hash: vOf/o1JHkb8wuECkMMHoKSsb6jXZeHUN4IdzhUHE9fc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl
                          rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
        Validity
            Not Before: Apr  5 04:57:59 2026 GMT
            Not After : Apr 12 04:57:59 2026 GMT
        Subject: CN=69d1ebd7-c427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:0b:37:2d:2f:47:cf:9b:58:96:9b:4a:d3:
                    76:dd:a0:08:17:99:ad:22:6f:65:ee:ac:0d:21:28:
                    b0:e3:23:15:9b:c0:13:f4:d5:da:22:09:48:64:98:
                    22:ff:ac:72:88:54:c1:7e:6c:31:61:06:ab:de:7f:
                    6d:22:d0:c7:28:39:b2:d7:96:89:c8:3e:2c:6a:e4:
                    65:d6:c0:e9:bc:b0:10:43:ed:a9:91:2f:b4:7f:11:
                    db:13:70:12:63:45:a1:80:0e:7c:e1:f6:63:8a:1c:
                    ca:34:e4:2c:13:f3:e8:75:55:f7:b1:f6:74:b3:6c:
                    2e:0b:3d:f9:35:ba:10:77:ea:be:94:f5:98:10:cb:
                    01:1f:22:1c:65:78:91:35:c5:b2:ac:4b:69:2a:72:
                    0e:46:db:6c:1c:72:85:3e:8a:51:c2:1d:97:00:de:
                    60:e3:14:04:54:2f:01:a5:65:80:c6:a5:67:dd:a4:
                    1d:56:13:a3:1b:15:fe:8e:78:b9:0c:29:85:ff:d2:
                    46:15:5e:a2:e8:12:00:d4:08:5e:4f:14:42:b2:98:
                    9e:c1:1b:2d:e5:33:78:92:dd:8b:50:39:49:91:88:
                    d2:7b:57:23:7f:94:f5:42:0e:84:7c:6d:60:88:81:
                    65:b0:fb:59:61:6d:f0:c6:1d:14:2b:b2:4e:e8:c9:
                    ac:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CE:88:FE:5E:87:00:C4:E5:BA:63:84:DE:0A:50:8F:36:8E:A5:F8
            X509v3 Authority Key Identifier:
                keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ee:02:d0:6e:0e:d5:48:a5:7e:f0:71:19:a2:02:79:6c:2f:
         9d:7b:57:26:46:83:da:03:53:04:10:5c:7c:b8:de:53:30:6a:
         70:a3:57:ad:3e:f6:49:5c:b0:7d:7c:a6:c0:1e:f9:09:58:02:
         5f:82:d9:7c:db:cb:64:38:20:13:cf:f9:5c:41:71:fe:8e:ad:
         1e:cc:40:6f:94:0f:27:6f:c1:67:66:e3:cd:21:7b:ce:c5:fa:
         14:c7:45:77:32:c5:ce:2e:1c:6b:24:16:87:79:32:11:42:8a:
         4a:91:b3:6c:79:f5:f7:00:2f:73:f8:ff:32:27:95:2d:0f:2b:
         e9:c2:7c:97:3d:55:cb:1b:0a:b5:82:67:e4:3c:af:43:32:32:
         8f:da:bc:5a:65:89:cd:a9:35:b6:82:41:76:c3:94:27:15:01:
         3b:c2:2b:6f:17:c2:26:61:2e:eb:72:e7:9d:e0:15:8e:9b:bb:
         cf:c4:dc:2a:90:74:81:08:ec:f4:29:e6:31:33:23:d2:8a:2e:
         dd:96:4b:fa:9a:18:e9:7a:62:47:c4:da:e3:29:77:5c:1e:b9:
         67:0b:fa:86:f5:cf:63:44:c1:26:3c:9d:bb:73:7f:2f:7a:39:
         2a:c9:29:50:ac:85:cb:79:45:fb:a0:4b:c7:f7:34:9e:50:17:
         ba:35:9b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:02 2026 by rpki-client