Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
File:                     KMVnce5JZD_fxE-OMImmvXlf_IQ.mft (raw, json)
Hash identifier:          Zd7YFOVUgA1FmxmjQVg5CPeIp3f28JNKDrTfzmhpKxI=
Subject key identifier:   D7:60:EC:0C:05:08:C3:4A:C7:BD:4D:AF:37:3D:79:B3:3A:29:06:64
Authority key identifier: 28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84
Certificate issuer:       /CN=A9113C02/serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
Manifest number:          27AE
Signing time:             Sat 04 Apr 2026 16:12:22 +0000
Manifest this update:     Sat 04 Apr 2026 16:12:22 +0000
Manifest next update:     Sat 11 Apr 2026 16:12:22 +0000
Files and hashes:         1: KMVnce5JZD_fxE-OMImmvXlf_IQ.crl (hash: yj5xb60haaoMPBBZ8KETNUsU+F1tqAf6hvLxO2GaZM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl
                          rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113C02, serialNumber=28C56771EE49643FDFC44F8E3089A6BD795FFC84
        Validity
            Not Before: Apr  4 16:12:22 2026 GMT
            Not After : Apr 11 16:12:22 2026 GMT
        Subject: CN=69d13866-8fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:58:0d:80:a6:4e:f7:e2:1d:ff:ee:61:97:08:
                    c2:73:50:a3:01:8a:99:ef:8e:80:c6:cd:af:ab:98:
                    41:19:48:62:0c:d4:b8:40:ad:46:97:96:c0:a0:1e:
                    b7:03:d1:f9:70:11:cc:b3:27:5a:5d:47:63:6b:67:
                    5a:cc:d9:8e:cf:e2:07:ca:bb:52:46:a5:65:0b:c5:
                    b2:11:dc:60:ec:9d:3b:a6:f8:e9:73:89:ea:25:07:
                    f5:c2:94:84:79:d1:f6:94:e9:b5:ec:b9:bc:03:ab:
                    e2:4c:1c:16:65:03:f1:33:1b:0a:13:d8:47:74:1b:
                    24:51:ad:84:e6:c1:51:35:1f:4a:a6:a1:84:1f:8a:
                    da:9f:38:16:e2:47:a0:77:46:e6:71:b0:ac:0e:2d:
                    16:30:65:90:7c:de:c4:91:5f:66:91:34:b3:85:53:
                    a2:24:dd:c2:10:9e:1b:32:c1:1d:ad:ce:07:72:8a:
                    df:9c:c2:75:50:ec:a3:f9:bd:a0:47:ab:26:67:55:
                    c4:26:46:9b:e3:4f:1d:6c:fe:a1:7e:4c:93:2d:5e:
                    28:be:93:e4:71:7c:b7:04:11:b0:c1:1d:f9:27:8b:
                    2e:be:72:ad:ea:78:b7:47:87:1c:9c:c1:4c:bd:a6:
                    35:94:4e:64:e3:64:f2:4f:c8:03:c4:66:73:bb:bd:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:60:EC:0C:05:08:C3:4A:C7:BD:4D:AF:37:3D:79:B3:3A:29:06:64
            X509v3 Authority Key Identifier:
                keyid:28:C5:67:71:EE:49:64:3F:DF:C4:4F:8E:30:89:A6:BD:79:5F:FC:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMVnce5JZD_fxE-OMImmvXlf_IQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/KMVnce5JZD_fxE-OMImmvXlf_IQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:38:21:6e:2f:23:54:c9:c0:6f:d1:cb:78:05:47:40:2a:d6:
         0d:e2:fb:53:09:e6:a1:72:3e:1e:92:ee:52:d8:c6:d5:fb:1c:
         1d:9a:56:cc:ba:1d:14:83:87:8f:14:56:2c:fe:f5:89:a4:27:
         62:a5:24:1b:45:ad:43:f4:c3:c9:01:34:fc:e9:64:43:90:4c:
         bb:b7:6c:54:2f:4a:c9:c3:be:39:ce:92:eb:d4:94:98:52:94:
         5a:f2:c8:50:24:9b:f3:dc:4c:0b:10:f0:b6:14:12:67:0c:ab:
         59:40:39:74:16:6c:bd:14:c9:eb:3d:29:8b:8b:9e:08:af:7f:
         b3:dc:fa:5e:b6:3f:78:c4:2b:d5:56:60:ac:62:52:67:37:57:
         77:16:a0:7f:3a:2a:1c:7b:16:1e:d5:4b:df:f9:92:3b:a9:09:
         42:bd:06:5d:b6:5f:02:6b:92:4d:86:11:f9:fb:b5:0e:34:d5:
         2a:f9:e6:fa:4f:d7:76:52:7b:32:16:5a:2a:0e:9a:d6:99:0e:
         fd:48:7c:45:78:d1:3b:33:3e:7e:61:2f:8d:fd:f0:ee:0c:7e:
         b1:0f:04:db:f0:42:a8:0c:c7:04:c2:d3:1c:ec:78:31:f5:b4:
         0a:ac:14:49:7e:ce:bf:db:66:1b:9d:63:f8:be:26:65:1b:ef:
         18:50:fd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:56 2026 by rpki-client