Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
File:                     kbx5rhXMrqROT-eEX7_KY-f6654.mft (raw, json)
Hash identifier:          Mih31SNkkgMluN5RvK3n3LxOoJqY+fhF4xA6KVwk1Xo=
Subject key identifier:   47:0A:B4:6D:3F:55:7E:E4:D9:34:15:5C:CB:0D:C0:EA:A5:4A:BB:3B
Authority key identifier: 91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E
Certificate issuer:       /CN=A9194335/serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
Certificate serial:       10A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
Manifest number:          107D
Signing time:             Sat 04 Apr 2026 17:16:06 +0000
Manifest this update:     Sat 04 Apr 2026 17:16:06 +0000
Manifest next update:     Sat 11 Apr 2026 17:16:06 +0000
Files and hashes:         1: kbx5rhXMrqROT-eEX7_KY-f6654.crl (hash: DSMnC1JYDKTSJ4zYdQscsMJJfbPdZH2IeRD6Yz/Feew=)
                          2: 122F83AAC4AD11EA9E35F20AC4F9AE02.roa (hash: TLISGWppoBnnfbHZFjULlfKEwbQDopU4rmYPr0nU0OE=)
                          3: 13C01CC0C4AD11EA9E35F20AC4F9AE02.roa (hash: qwQKPoIUFxOPN3MeCcCPfp5jviDrGHMY5L0x8rUXkG0=)
                          4: 30BF32F2C28C11EAB764BF4CC4F9AE02.roa (hash: 9oD7ePq9FUpAKk3w/IsQePKTLx2iOd3tFZxiCRUR3No=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl
                          rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4258 (0x10a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194335, serialNumber=91BC79AE15CCAEA44E4FE7845FBFCA63E7FAEB9E
        Validity
            Not Before: Apr  4 17:16:06 2026 GMT
            Not After : Apr 11 17:16:06 2026 GMT
        Subject: CN=69d14756-2189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:38:8d:99:a1:26:48:91:0f:cc:82:17:1f:
                    6c:27:fd:66:bb:8f:6d:f0:bc:19:76:f7:64:ec:3f:
                    fb:08:61:79:7c:61:c6:d5:fa:4d:eb:7e:55:5d:0f:
                    50:94:53:7e:ce:38:5f:5f:bc:fa:02:fe:6b:75:cc:
                    02:70:f5:b8:63:18:56:6e:60:79:b3:ff:8d:f3:d5:
                    32:a8:69:f8:2b:9d:e5:9d:96:7a:bd:04:07:28:2d:
                    2e:b1:e4:db:0a:2d:1d:f2:87:5d:e9:40:1e:77:0d:
                    57:2d:b6:09:6d:aa:27:29:a4:59:d3:21:73:8b:16:
                    92:81:6d:99:ac:2f:7e:00:f1:48:52:18:b5:7b:63:
                    a2:5d:d8:57:2e:55:ce:82:d1:03:ce:38:fa:bb:be:
                    22:20:9f:78:3e:f6:4c:7e:56:4e:2e:21:98:4e:d7:
                    7d:67:b5:b6:7a:6b:59:58:ad:46:9b:29:95:db:3c:
                    fb:60:30:25:94:cb:cd:af:11:a3:15:7b:9b:c7:7b:
                    9b:4c:36:a3:a7:10:9f:a0:64:0e:dd:05:77:41:9b:
                    b3:f1:27:98:97:51:5c:b3:7e:b4:08:ba:3e:bd:4b:
                    f6:98:11:5e:87:ae:f4:bb:8a:69:c8:79:0e:d1:3a:
                    47:08:20:ab:1a:b6:86:12:9d:50:d6:66:59:81:cc:
                    36:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0A:B4:6D:3F:55:7E:E4:D9:34:15:5C:CB:0D:C0:EA:A5:4A:BB:3B
            X509v3 Authority Key Identifier:
                keyid:91:BC:79:AE:15:CC:AE:A4:4E:4F:E7:84:5F:BF:CA:63:E7:FA:EB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kbx5rhXMrqROT-eEX7_KY-f6654.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194335/342D222851D111E9AF1FF73CC4F9AE02/kbx5rhXMrqROT-eEX7_KY-f6654.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f2:3e:9f:26:06:fa:c8:8b:ea:16:f7:4c:cc:2f:cc:9e:fe:
         2c:21:29:28:e0:5d:7a:b9:0d:3a:0f:17:c5:78:06:8f:28:e8:
         19:cc:66:87:fe:c8:e0:fd:04:d5:5d:d7:a1:d5:8d:a4:dc:78:
         41:e5:bf:a5:5a:5b:8b:f4:a7:c2:c8:c2:7b:eb:76:cd:54:d3:
         d8:92:81:a8:f0:ef:94:3d:c4:23:18:76:88:0d:7b:c1:be:40:
         b9:f4:bd:18:39:1e:16:f9:0c:6b:c8:8a:35:b5:15:62:e5:c7:
         1f:bf:02:5a:e2:f2:92:d9:46:70:e1:68:08:c2:0e:c8:dc:60:
         5b:f3:ca:b7:fc:b8:04:4b:ca:0b:93:2d:bd:ee:15:e2:ac:2d:
         60:5f:69:16:37:b2:72:ed:ff:a1:d0:e6:fd:be:ea:bb:99:b6:
         d6:ca:89:cc:4b:9b:32:a3:f9:cd:4e:10:f2:9e:4a:a7:8f:08:
         ff:8b:9b:56:97:61:89:ed:4a:fd:b3:4e:91:9e:08:58:1c:43:
         0c:69:a3:67:08:a8:e3:b9:da:85:1d:65:40:75:7b:e4:ba:d8:
         42:09:7a:12:48:85:32:26:4f:f4:ea:8e:bf:87:75:72:44:fe:
         72:51:20:3b:6e:ec:bf:1a:89:e2:28:4f:a2:e0:40:de:72:ed:
         ad:1f:41:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQzMzUxMTAvBgNVBAUTKDkxQkM3OUFFMTVDQ0FFQTQ0RTRGRTc4NDVGQkZDQTYz
RTdGQUVCOUUwHhcNMjYwNDA0MTcxNjA2WhcNMjYwNDExMTcxNjA2WjAYMRYwFAYD
VQQDEw02OWQxNDc1Ni0yMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtI04jZmhJkiRD8yCFx9sJ/1mu49t8LwZdvdk7D/7CGF5fGHG1fpN635VXQ9Q
lFN+zjhfX7z6Av5rdcwCcPW4YxhWbmB5s/+N89UyqGn4K53lnZZ6vQQHKC0useTb
Ci0d8odd6UAedw1XLbYJbaonKaRZ0yFzixaSgW2ZrC9+APFIUhi1e2OiXdhXLlXO
gtEDzjj6u74iIJ94PvZMflZOLiGYTtd9Z7W2emtZWK1GmymV2zz7YDAllMvNrxGj
FXubx3ubTDajpxCfoGQO3QV3QZuz8SeYl1Fcs360CLo+vUv2mBFeh670u4ppyHkO
0TpHCCCrGraGEp1Q1mZZgcw2vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcKtG0/
VX7k2TQVXMsNwOqlSrs7MB8GA1UdIwQYMBaAFJG8ea4VzK6kTk/nhF+/ymPn+uue
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDMzNS8zNDJEMjIyODUx
RDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJxUk9ULWVFWDdfS1ktZjY2
NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tieDVyaFhNcnFST1QtZUVYN19LWS1mNjY1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDMzNS8zNDJEMjIyODUxRDExMUU5QUYxRkY3M0NDNEY5QUUwMi9rYng1cmhYTXJx
Uk9ULWVFWDdfS1ktZjY2NTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARfI+nyYG+siL6hb3TMwvzJ7+LCEpKOBderkNOg8XxXgGjyjoGcxmh/7I4P0E
1V3XodWNpNx4QeW/pVpbi/SnwsjCe+t2zVTT2JKBqPDvlD3EIxh2iA17wb5AufS9
GDkeFvkMa8iKNbUVYuXHH78CWuLyktlGcOFoCMIOyNxgW/PKt/y4BEvKC5Mtve4V
4qwtYF9pFjeycu3/odDm/b7qu5m21sqJzEubMqP5zU4Q8p5Kp48I/4ubVpdhie1K
/bNOkZ4IWBxDDGmjZwio47nahR1lQHV75LrYQgl6EkiFMiZP9OqOv4d1ckT+clEg
O27svxqJ4ihPouBA3nLtrR9Bsw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:15 2026 by rpki-client