Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
File:                     klwudR4T9Usqn5-j2mUO2423zy0.mft (raw, json)
Hash identifier:          jOvtoM+lgBbwQWM9nCyggoRHr8lE3dOHRPgWfy4gwcw=
Subject key identifier:   9E:DC:AC:E0:90:07:0D:D9:09:8A:31:CB:0A:44:67:84:D3:66:9E:F9
Authority key identifier: 92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D
Certificate issuer:       /CN=A918B9B8/serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
Certificate serial:       0A7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
Manifest number:          0A76
Signing time:             Sat 04 Apr 2026 19:23:46 +0000
Manifest this update:     Sat 04 Apr 2026 19:23:45 +0000
Manifest next update:     Sat 11 Apr 2026 19:23:45 +0000
Files and hashes:         1: klwudR4T9Usqn5-j2mUO2423zy0.crl (hash: 8SHQ5K3/HIXYZJm+rXm3vQazEAUxJLY8BcTzVmb2aFo=)
                          2: 275694947E2111EABA287C6DC4F9AE02.roa (hash: pLFtJM8YCayRSQjnW3sFmWo+oKdAsNVRNoN1xNfin+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl
                          rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2686 (0xa7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B9B8, serialNumber=925C2E751E13F54B2A9F9FA3DA650EDB8DB7CF2D
        Validity
            Not Before: Apr  4 19:23:45 2026 GMT
            Not After : Apr 11 19:23:45 2026 GMT
        Subject: CN=69d16542-6023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b0:0f:f4:e5:7f:c3:02:96:18:b5:26:57:30:
                    de:52:2d:00:89:a8:a9:79:53:f1:10:ca:20:6f:82:
                    16:96:ae:1d:7a:e3:e9:2e:35:ff:79:1b:23:40:4b:
                    b5:4e:8d:e0:e5:ff:8a:f1:d7:d1:32:80:34:21:f7:
                    89:81:52:64:af:5a:af:6b:02:69:5c:1a:0b:cf:11:
                    09:54:93:d3:97:ed:1d:5b:74:7f:d3:97:c5:05:eb:
                    3c:99:97:33:bf:b8:77:9d:f1:dc:6c:6c:04:30:b3:
                    6d:a6:0b:66:a0:55:e7:77:8e:fa:13:98:12:b9:1a:
                    ca:bc:5e:67:75:21:4f:b7:90:19:31:80:45:23:c9:
                    1a:e2:44:4d:0c:10:a7:2c:78:90:0f:4b:d7:7a:bf:
                    29:97:07:c5:87:3a:e2:13:c8:ab:a2:f0:bf:cb:19:
                    03:80:0b:ad:89:40:9f:cd:e9:0c:4b:a7:c8:dd:49:
                    8f:70:ce:c9:d2:0d:e3:b8:93:07:0c:ab:f8:c8:76:
                    ff:cd:0e:29:3b:a5:da:6b:1a:4b:3c:48:91:2d:f3:
                    19:5e:3f:f6:d7:2f:95:86:0a:0d:dc:07:68:05:7b:
                    ef:fc:f9:82:0c:57:9c:c2:b3:2e:e6:0d:63:3b:56:
                    68:c8:7b:75:d1:77:42:a8:c0:4d:80:43:ff:45:fa:
                    41:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DC:AC:E0:90:07:0D:D9:09:8A:31:CB:0A:44:67:84:D3:66:9E:F9
            X509v3 Authority Key Identifier:
                keyid:92:5C:2E:75:1E:13:F5:4B:2A:9F:9F:A3:DA:65:0E:DB:8D:B7:CF:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klwudR4T9Usqn5-j2mUO2423zy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B9B8/3DE906027E2011EA846F236DC4F9AE02/klwudR4T9Usqn5-j2mUO2423zy0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d9:e2:d8:9d:02:47:05:74:03:82:1b:d9:d0:c8:c8:ab:e4:
         73:14:5e:2d:b3:31:df:7a:64:c5:1b:b7:51:e4:db:a5:25:90:
         6d:e7:f7:c4:b8:e5:81:77:f9:94:97:d7:49:77:ca:23:02:a3:
         1d:5d:97:fd:c7:9a:25:6a:47:0b:6c:ed:78:a8:ed:3b:db:64:
         8f:b8:ef:42:bb:5a:bb:73:60:e6:cf:d1:ba:fb:93:83:8d:0a:
         45:51:55:ab:51:62:ad:a3:b1:4d:fb:7d:21:7d:a8:8a:18:93:
         02:73:2d:ae:8b:26:32:7c:f8:75:cf:81:0d:4d:81:e2:6f:ae:
         a7:f7:36:09:ae:4f:de:f3:fe:5b:a3:66:0f:db:3b:f1:89:e6:
         e5:32:dc:9c:b3:dd:c1:70:09:ea:f6:ce:68:b7:5d:11:d2:2e:
         58:af:b3:c8:87:2b:c7:17:2b:0e:e2:8c:b2:90:ca:07:54:b3:
         d1:7a:9f:ae:7e:15:59:e0:bc:33:8d:8b:a3:b9:04:1e:70:1e:
         69:f8:4a:dd:fa:4f:1f:c3:65:20:2b:1a:e4:3c:a5:3a:c5:12:
         dc:6f:a4:1d:18:71:3b:a3:9c:c5:df:d5:63:7f:94:79:a8:c1:
         b1:5d:61:22:b7:13:49:79:ea:62:7b:a0:3f:00:bc:a0:c1:65:
         b4:af:d1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:16 2026 by rpki-client