Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
File:                     kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json)
Hash identifier:          6T36pYmR2+Jb1cOip0kKAPSfV3F/KT6hUuZDtpedH0o=
Subject key identifier:   E2:19:26:49:14:9A:D4:F6:F5:DB:62:5A:3B:7C:D8:99:70:56:F0:9E
Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5
Certificate issuer:       /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
Certificate serial:       0502
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
Manifest number:          04FA
Signing time:             Sat 04 Apr 2026 23:28:48 +0000
Manifest this update:     Sat 04 Apr 2026 23:28:47 +0000
Manifest next update:     Sat 11 Apr 2026 23:28:47 +0000
Files and hashes:         1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: V4jJ4YtHF3eQVn7nuLW9YztL8Z1y6k0UtTyBLyRSYJg=)
                          2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: wtcSk6Y7w0YC/tgX92PUFuNkS6TBVa+Kp56LZMlD0kQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl
                          rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:28:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1282 (0x502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
        Validity
            Not Before: Apr  4 23:28:47 2026 GMT
            Not After : Apr 11 23:28:47 2026 GMT
        Subject: CN=69d19eaf-b8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d9:61:33:23:d0:e1:17:96:af:04:40:a4:e4:
                    26:9b:19:09:bb:c3:99:19:b6:b8:7a:47:bd:f8:2e:
                    f4:65:f0:05:cf:33:df:a9:eb:8e:89:02:9d:03:13:
                    b5:aa:d6:80:25:39:97:2e:7e:6c:aa:3c:8d:27:f0:
                    37:3b:7a:7f:f2:46:fd:b6:38:ba:7c:be:08:b6:59:
                    16:49:d5:af:df:c7:2e:da:07:6f:ef:da:a3:7d:97:
                    d4:29:c0:3e:6b:ef:e6:08:50:d4:0d:7e:39:e0:5d:
                    b0:35:5b:79:48:ae:2e:34:29:90:fc:4d:55:10:70:
                    2a:62:bf:f1:b1:c5:86:8f:1e:5e:7e:f5:3f:ac:c4:
                    4c:7f:fe:62:57:d4:c8:06:95:1e:9c:c6:d5:be:b8:
                    12:0f:63:de:af:2d:ef:6f:1b:52:cb:dc:8f:13:f9:
                    d6:63:ed:8f:ef:1c:3a:4e:dc:f4:88:ea:fb:97:61:
                    82:e1:1c:28:7c:6d:2e:b4:ce:0e:42:f9:90:da:a4:
                    ac:43:01:f6:b6:d5:68:14:ea:c3:03:f6:a3:03:7e:
                    08:55:ae:c0:d3:27:f3:7c:b7:e4:4d:a1:2e:ea:b9:
                    91:b4:47:75:31:3b:af:e1:bb:dc:a8:26:20:16:87:
                    3d:a8:42:b5:3c:fd:d4:01:32:31:60:79:63:ac:78:
                    4c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:19:26:49:14:9A:D4:F6:F5:DB:62:5A:3B:7C:D8:99:70:56:F0:9E
            X509v3 Authority Key Identifier:
                keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:80:0e:fb:bf:27:2b:4f:86:74:14:ba:c6:04:e5:d7:c6:28:
         15:21:fc:cf:70:65:f3:95:7a:fa:c8:84:dd:32:a8:d6:7c:be:
         52:1a:35:09:b9:0a:2b:94:a0:f1:b0:83:cc:91:45:1f:a8:e8:
         b5:7c:f7:55:26:50:eb:03:45:7d:75:7c:c4:ab:dd:11:7b:58:
         2e:32:17:27:f9:21:96:c7:19:6c:73:4d:57:21:94:2a:0d:e0:
         6a:67:97:ec:ab:a7:fd:87:3a:87:61:28:84:7c:e4:d0:74:2b:
         a1:1f:3b:21:91:ca:9a:e2:b7:ef:1b:db:b4:91:f1:8a:42:6c:
         e8:0e:ae:8e:6e:f5:65:be:f9:35:48:77:be:89:3a:4c:4b:73:
         d3:f0:79:a3:88:51:53:37:df:fe:7c:03:34:15:94:45:41:38:
         c6:1e:f1:33:a8:fc:53:d9:4b:27:5f:05:bb:21:e8:05:fd:6c:
         cd:5a:ad:4f:26:2b:18:ea:8d:9a:dd:6a:fb:f8:f5:24:27:62:
         af:17:32:e6:41:f6:67:0c:8b:e6:4a:f6:16:0d:1c:88:c5:97:
         a5:4e:41:d2:83:dc:f5:6a:93:4e:c0:bd:99:f0:80:11:1e:97:
         eb:9f:66:3e:44:27:81:8e:cd:a5:e6:cb:93:29:c9:c6:60:6a:
         a8:60:aa:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0
MTdCMzU5RjUwHhcNMjYwNDA0MjMyODQ3WhcNMjYwNDExMjMyODQ3WjAYMRYwFAYD
VQQDEw02OWQxOWVhZi1iOGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAodlhMyPQ4ReWrwRApOQmmxkJu8OZGba4eke9+C70ZfAFzzPfqeuOiQKdAxO1
qtaAJTmXLn5sqjyNJ/A3O3p/8kb9tji6fL4ItlkWSdWv38cu2gdv79qjfZfUKcA+
a+/mCFDUDX454F2wNVt5SK4uNCmQ/E1VEHAqYr/xscWGjx5efvU/rMRMf/5iV9TI
BpUenMbVvrgSD2Pery3vbxtSy9yPE/nWY+2P7xw6Ttz0iOr7l2GC4RwofG0utM4O
QvmQ2qSsQwH2ttVoFOrDA/ajA34IVa7A0yfzfLfkTaEu6rmRtEd1MTuv4bvcqCYg
Foc9qEK1PP3UATIxYHljrHhMXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOIZJkkU
mtT29dtiWjt82JlwVvCeMB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy
MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX
ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTI2NS8wNTcwOUFFQTUyMUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2
UFp5SkRqbDRBZzFCZXpXZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR4AO+78nK0+GdBS6xgTl18YoFSH8z3Bl85V6+siE3TKo1ny+Uho1CbkKK5Sg
8bCDzJFFH6jotXz3VSZQ6wNFfXV8xKvdEXtYLjIXJ/khlscZbHNNVyGUKg3gameX
7Kun/Yc6h2EohHzk0HQroR87IZHKmuK37xvbtJHxikJs6A6ujm71Zb75NUh3vok6
TEtz0/B5o4hRUzff/nwDNBWURUE4xh7xM6j8U9lLJ18FuyHoBf1szVqtTyYrGOqN
mt1q+/j1JCdirxcy5kH2ZwyL5kr2Fg0ciMWXpU5B0oPc9WqTTsC9mfCAER6X659m
PkQngY7NpebLkynJxmBqqGCqGw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:02 2026 by rpki-client