Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
File:                     kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json)
Hash identifier:          7wQaq4PrfNDEtxpxkCBRdLzZns3k1C47mNhOJsS+NJY=
Subject key identifier:   7C:20:FB:B3:28:70:FF:2A:86:B1:55:82:D2:BB:5F:C2:5A:2D:1B:DA
Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
Certificate issuer:       /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Certificate serial:       01B0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
Manifest number:          01A4
Signing time:             Tue 03 Mar 2026 03:54:38 +0000
Manifest this update:     Tue 03 Mar 2026 03:54:37 +0000
Manifest next update:     Tue 10 Mar 2026 03:54:37 +0000
Files and hashes:         1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: M++lwJr61PGFY9Cez05ClEAVZXAgaJgQnDSl/nT90P0=)
                          2: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: rSVG57dS9icctqN3//vfn2ezLCSeHMuQO9kLf2c0Ess=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
                          rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 03:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
        Validity
            Not Before: Mar  3 03:54:37 2026 GMT
            Not After : Mar 10 03:54:37 2026 GMT
        Subject: CN=69a65b7e-73ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:8c:97:7d:5e:4f:a2:fa:53:46:f2:af:3f:
                    91:b4:b0:44:7c:34:e6:41:e9:bb:9a:c7:2f:49:bd:
                    bc:75:87:84:39:0c:bf:85:67:33:6f:06:64:20:e8:
                    e0:4f:66:71:14:19:2d:fe:f6:64:01:7f:86:d7:eb:
                    e5:48:ba:e9:40:37:d2:1f:ac:39:ad:0d:48:96:cf:
                    15:0d:cc:81:2d:b6:16:2f:bf:74:c5:a2:d4:2d:b6:
                    59:c8:44:66:ec:98:7e:82:36:67:b9:b5:9a:b3:da:
                    95:9a:02:08:5e:c0:1b:47:f3:0d:3e:b9:0f:6a:3b:
                    17:62:ce:e6:6c:cd:2f:d3:71:d2:4b:ce:da:04:e6:
                    21:6f:2b:03:6a:9d:8f:d8:bc:db:12:74:12:05:49:
                    5e:0e:44:ab:ff:b8:55:03:d5:ea:56:38:c8:b4:ea:
                    0a:2e:e3:d7:5a:5e:43:38:43:d8:78:dc:48:f3:d2:
                    0c:23:28:94:d4:a4:0b:29:d1:66:6f:47:22:01:d0:
                    78:5f:76:ee:c5:46:63:0f:cb:15:8b:1c:28:19:e1:
                    69:cd:c9:88:9e:d9:10:c6:d1:8f:e9:b8:94:06:9e:
                    c8:ab:09:9b:74:29:3e:0d:56:ba:19:ae:52:27:c6:
                    7a:6c:81:2b:21:02:0e:cc:25:74:99:05:af:93:c8:
                    e0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:20:FB:B3:28:70:FF:2A:86:B1:55:82:D2:BB:5F:C2:5A:2D:1B:DA
            X509v3 Authority Key Identifier:
                keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:7d:96:ea:68:36:bf:48:f8:41:71:36:d4:1a:15:95:08:06:
         72:2f:51:43:7a:fb:ba:fb:98:1c:64:87:28:1f:07:e7:68:3b:
         b7:e8:7a:86:be:89:74:b2:00:5a:b4:d0:16:0c:a3:51:b2:49:
         3b:b0:bb:35:cc:1d:11:ed:c8:7d:f7:ff:60:28:19:54:fc:b3:
         5e:ec:5d:bb:26:1d:5c:4e:c4:6b:df:56:86:13:81:54:9d:e9:
         47:6a:db:7c:ac:21:89:99:a9:18:03:fd:b1:79:2a:30:ca:19:
         65:a5:fc:6f:26:1e:65:bb:68:f8:cc:8c:24:21:9c:76:fc:b8:
         93:3f:2b:2b:ac:c4:e2:fc:3f:97:5e:29:b3:3e:8b:82:26:7a:
         5f:b5:d7:71:e2:9f:ba:55:42:7a:3e:c6:61:f1:ab:16:91:f8:
         f1:19:ca:45:32:58:69:a8:34:a5:20:e9:d4:bc:11:ae:56:c7:
         38:43:c1:10:5d:9b:2d:81:34:95:ea:6d:be:23:52:3e:79:4c:
         23:8f:b8:09:a7:b6:e0:5c:38:c8:98:76:de:6c:af:76:e5:02:
         03:4a:64:c3:37:aa:24:88:c7:50:9d:8a:89:0a:cc:2f:79:1d:
         15:ba:da:e3:f4:ba:37:7e:d1:fe:25:1a:d3:2c:1e:3e:69:c4:
         fc:0f:f2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:07 2026 by rpki-client