Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
File:                     2kcnine73_Ktn5igEaKnoufNYNg.mft (raw, json)
Hash identifier:          ps+dfxVJtAUIK8EP9mCSExa8/j9V1JAoLQxKw/MJF7g=
Subject key identifier:   FB:57:18:3D:DB:28:B4:23:2B:F8:54:DF:57:09:BA:58:D4:53:2D:13
Authority key identifier: DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8
Certificate issuer:       /CN=A91393BE/serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
Manifest number:          013A
Signing time:             Sun 05 Apr 2026 04:46:47 +0000
Manifest this update:     Sun 05 Apr 2026 04:46:47 +0000
Manifest next update:     Sun 12 Apr 2026 04:46:47 +0000
Files and hashes:         1: 2kcnine73_Ktn5igEaKnoufNYNg.crl (hash: tZDv2LE86NGKyVA6ti282mDmz2SKTnQHn3dS1/IaT/0=)
                          2: 05A966C652DB11EF990CB840C4F9AE02.roa (hash: /ju6tAC2YvQK9Mt9Ug1vYucEJYF6/PAoDqUqSoXsrZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl
                          rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91393BE, serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8
        Validity
            Not Before: Apr  5 04:46:47 2026 GMT
            Not After : Apr 12 04:46:47 2026 GMT
        Subject: CN=69d1e937-6151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:11:a1:57:79:4c:a8:4d:e8:98:5c:5a:a1:
                    b8:47:4d:7f:79:dc:eb:62:a4:6e:68:f6:9b:9d:c4:
                    ca:bf:63:5a:99:8d:e3:52:52:48:f0:8b:40:61:1b:
                    9d:2b:ce:71:11:24:c5:5f:20:88:93:b5:c5:f8:f1:
                    9f:97:ed:f0:cc:ed:be:26:bb:82:7f:26:17:b1:42:
                    45:ef:84:07:46:1b:6c:27:6c:24:2c:22:a4:ec:90:
                    48:c6:fb:40:1c:35:e7:d4:7b:3f:d2:2d:07:f6:89:
                    03:e0:c8:fa:ac:7d:d6:d4:86:f4:b1:2c:d7:d6:7e:
                    73:e6:5b:c2:06:f1:79:e8:7d:66:19:7e:d9:28:ba:
                    4d:23:d4:a0:26:45:9f:b9:b5:3d:d3:73:cf:6f:97:
                    5d:0c:b0:6f:a2:e7:7c:9c:e4:17:59:a5:d6:17:93:
                    fb:21:86:0a:0a:b1:e9:e8:2b:f7:ff:04:82:6c:4a:
                    54:62:9c:5a:b2:d4:e7:c0:bb:4e:64:ed:de:3d:18:
                    b9:0c:fc:6c:71:7d:bd:b7:f2:46:ab:d0:07:04:c3:
                    95:7f:63:3a:12:7f:43:02:71:01:00:17:05:7a:34:
                    2c:71:6f:b4:c4:cf:21:34:a7:9d:d0:a5:e3:f7:72:
                    2c:f6:63:5f:49:46:d1:e2:57:a7:e2:bf:09:66:c7:
                    31:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:57:18:3D:DB:28:B4:23:2B:F8:54:DF:57:09:BA:58:D4:53:2D:13
            X509v3 Authority Key Identifier:
                keyid:DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:da:90:13:bc:0b:1a:70:78:24:b9:a0:7d:04:64:8b:e0:e8:
         1a:4a:8a:ac:dc:d8:66:dd:14:b2:7d:58:72:bf:62:2e:af:07:
         5f:c3:b1:77:fe:64:94:05:46:9c:fc:1a:0c:c7:ee:9e:8b:43:
         04:ed:ae:0d:d1:2d:72:aa:59:34:b8:83:a4:40:c1:00:72:ce:
         6d:5e:c3:58:84:1b:67:34:b6:c3:63:36:b3:66:8c:c5:3a:af:
         3f:3b:2a:07:d2:fa:1b:9c:04:72:ac:9d:46:9e:a7:ac:d3:2a:
         01:6f:db:6d:20:9d:2f:11:e0:38:29:9f:1e:00:13:10:87:6f:
         e0:a4:6f:97:95:fe:13:45:52:59:c2:5a:c5:13:07:0c:27:7f:
         c7:d7:bb:9e:6b:32:61:7c:43:a8:2c:9f:6a:09:7f:b7:5f:d8:
         98:3a:7e:89:29:5f:17:3e:d9:c9:a3:18:fd:32:93:10:8e:98:
         27:17:bb:1e:56:41:d2:b9:c9:42:0d:84:ff:10:b9:fd:20:6b:
         47:5f:d8:ba:36:62:eb:a5:71:a1:2e:d0:f9:0a:dc:9d:6d:58:
         4f:b6:19:2f:84:0d:04:f1:c5:72:e2:93:be:ab:ee:eb:04:c2:
         d8:9f:aa:cc:5e:f6:cc:74:7b:92:6c:71:5e:14:85:c0:f7:49:
         26:2c:66:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkzQkUxMTAvBgNVBAUTKERBNDcyNzhBNzdCQkRGRjJBRDlGOThBMDExQTJBN0Ey
RTdDRDYwRDgwHhcNMjYwNDA1MDQ0NjQ3WhcNMjYwNDEyMDQ0NjQ3WjAYMRYwFAYD
VQQDEw02OWQxZTkzNy02MTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApM4RoVd5TKhN6JhcWqG4R01/edzrYqRuaPabncTKv2NamY3jUlJI8ItAYRud
K85xESTFXyCIk7XF+PGfl+3wzO2+JruCfyYXsUJF74QHRhtsJ2wkLCKk7JBIxvtA
HDXn1Hs/0i0H9okD4Mj6rH3W1Ib0sSzX1n5z5lvCBvF56H1mGX7ZKLpNI9SgJkWf
ubU903PPb5ddDLBvoud8nOQXWaXWF5P7IYYKCrHp6Cv3/wSCbEpUYpxastTnwLtO
ZO3ePRi5DPxscX29t/JGq9AHBMOVf2M6En9DAnEBABcFejQscW+0xM8hNKed0KXj
93Is9mNfSUbR4len4r8JZscx1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPtXGD3b
KLQjK/hU31cJuljUUy0TMB8GA1UdIwQYMBaAFNpHJ4p3u9/yrZ+YoBGip6LnzWDY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTNCRS83NzQxNjE0QzUy
RDMxMUVGQkFFRERDMUVDNEY5QUUwMi8ya2NuaW5lNzNfS3RuNWlnRWFLbm91Zk5Z
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJrY25pbmU3M19LdG41aWdFYUtub3VmTllOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTNCRS83NzQxNjE0QzUyRDMxMUVGQkFFRERDMUVDNEY5QUUwMi8ya2NuaW5lNzNf
S3RuNWlnRWFLbm91Zk5ZTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY9qQE7wLGnB4JLmgfQRki+DoGkqKrNzYZt0Usn1Ycr9iLq8HX8Oxd/5klAVG
nPwaDMfunotDBO2uDdEtcqpZNLiDpEDBAHLObV7DWIQbZzS2w2M2s2aMxTqvPzsq
B9L6G5wEcqydRp6nrNMqAW/bbSCdLxHgOCmfHgATEIdv4KRvl5X+E0VSWcJaxRMH
DCd/x9e7nmsyYXxDqCyfagl/t1/YmDp+iSlfFz7ZyaMY/TKTEI6YJxe7HlZB0rnJ
Qg2E/xC5/SBrR1/YujZi66VxoS7Q+QrcnW1YT7YZL4QNBPHFcuKTvqvu6wTC2J+q
zF72zHR7kmxxXhSFwPdJJixmTw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:51 2026 by rpki-client