Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
File:                     rKEv19uyg_Ms3XPPzs8F08uaiKE.mft (raw, json)
Hash identifier:          /tac0pYiUyzo+hBjolKeiokMy+bjOi5G3OODAdpaczQ=
Subject key identifier:   74:F6:99:7F:6E:A4:D5:C3:21:0A:F1:A0:60:DA:A3:3E:17:5B:C4:44
Authority key identifier: AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1
Certificate issuer:       /CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
Certificate serial:       0867
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
Manifest number:          085F
Signing time:             Sat 04 Apr 2026 20:31:17 +0000
Manifest this update:     Sat 04 Apr 2026 20:31:17 +0000
Manifest next update:     Sat 11 Apr 2026 20:31:17 +0000
Files and hashes:         1: rKEv19uyg_Ms3XPPzs8F08uaiKE.crl (hash: r6rAv3yn3yIRnOoIpLKek0jjtWIgtzhSp77fHL17kRc=)
                          2: CD8C0430F99011EAB54DF63CC4F9AE02.roa (hash: dCi6VvBG8Kieh+LiRI/8SoC0c+Kf0Pviv2GOgnuUocs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl
                          rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91994D1, serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
        Validity
            Not Before: Apr  4 20:31:17 2026 GMT
            Not After : Apr 11 20:31:17 2026 GMT
        Subject: CN=69d17515-666f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:22:66:96:88:a6:df:cc:0a:c2:bd:fc:1c:b8:
                    f4:27:aa:59:51:bb:a5:f9:fa:d7:92:80:9a:65:d2:
                    4d:59:03:19:2d:02:be:44:ec:b9:5a:bf:4c:0f:36:
                    d3:04:ca:3b:f4:7f:39:52:a2:09:a0:8a:eb:0f:62:
                    78:41:58:24:9a:ed:ba:42:bf:8c:15:ac:b1:9f:67:
                    7a:32:e8:87:72:73:fc:a2:1f:e5:ba:04:4a:f6:aa:
                    d7:9d:85:51:68:49:be:06:fd:36:36:8b:b2:cf:1a:
                    f6:2b:60:7e:9e:af:29:0b:96:a0:85:f0:35:fc:3a:
                    d5:05:ee:7b:35:e3:7d:52:5b:0c:6a:77:e6:6e:34:
                    1f:33:be:ba:a2:15:44:43:6d:16:b8:33:b1:c2:4d:
                    50:f7:ed:b5:75:0c:1f:92:fb:ec:8e:98:4e:e7:1e:
                    f7:fe:07:bf:cd:fe:d7:ea:72:1d:79:af:c6:c6:31:
                    d7:fb:6c:71:82:62:8c:b9:3c:71:72:ff:39:37:38:
                    fc:ff:6a:df:a4:62:8b:9b:de:d8:00:86:64:b0:20:
                    4c:24:21:bb:c5:43:f8:bf:d6:53:65:28:b0:73:19:
                    28:37:f8:64:ff:00:93:60:1c:f1:31:f0:db:ed:42:
                    94:f7:1d:84:7a:e0:59:4f:8a:05:d1:42:96:c9:b2:
                    cc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F6:99:7F:6E:A4:D5:C3:21:0A:F1:A0:60:DA:A3:3E:17:5B:C4:44
            X509v3 Authority Key Identifier:
                keyid:AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:83:b8:17:bf:d6:da:00:c4:28:8d:5f:0a:df:7d:23:05:b6:
         d1:11:d4:f6:54:27:57:f3:a1:ce:5b:3a:0d:60:d2:3e:fa:f3:
         76:7d:1b:e2:28:c8:16:28:4a:33:ff:c7:5b:7a:13:b4:16:04:
         9c:10:7e:b0:b8:20:05:f6:4d:c8:f5:65:b1:55:61:d2:35:14:
         74:21:f8:91:1b:ea:7b:6e:f1:d8:c6:6f:b5:21:ae:2e:74:53:
         ab:de:24:88:d7:92:74:96:ad:7f:5c:1b:6e:ac:f2:13:db:f7:
         53:8c:17:fd:1f:22:fe:04:50:b1:67:8f:d3:b9:a1:ee:c7:96:
         38:e5:df:68:f0:7a:cd:60:e4:b7:93:bc:5d:fa:52:10:76:5c:
         07:af:84:aa:af:d4:d3:00:97:c5:4a:36:38:30:29:78:24:25:
         8b:b1:f4:3a:eb:32:4d:71:b4:8a:e7:b4:f3:90:1a:88:25:6d:
         bd:39:de:42:57:0d:e6:d7:29:d9:c2:85:eb:2a:5f:92:85:01:
         f8:2c:57:ac:ae:07:97:6d:df:ec:8a:a6:d7:d8:85:14:54:a3:
         12:ac:d5:2f:ff:31:8a:c5:ae:31:86:ce:0b:49:ca:ca:34:1a:
         10:5e:4b:54:a9:4d:75:17:c0:d3:10:43:5f:dc:e6:6c:16:f8:
         d7:5c:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:09 2026 by rpki-client