Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
File:                     KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json)
Hash identifier:          eP4WJu7zYHFnLpTE/cJ3oEHK/A8bUGIj8u87TPz8acU=
Subject key identifier:   86:05:6F:D1:54:B9:ED:37:D7:44:F6:4F:FC:CC:54:E4:18:D9:78:F6
Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1
Certificate issuer:       /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
Manifest number:          B6
Signing time:             Sun 05 Apr 2026 06:25:50 +0000
Manifest this update:     Sun 05 Apr 2026 06:25:49 +0000
Manifest next update:     Sun 12 Apr 2026 06:25:49 +0000
Files and hashes:         1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: y27aVC/X7yjCnYl8WruB1+5LUMwjZ7FsCzY+YLMjAa4=)
                          2: C028C06E18E211F081A75558C4F9AE02.roa (hash: mUs4fgM8VrVj+tu77XrkYII8tafnRQVMrP9/4PhdyvE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl
                          rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
        Validity
            Not Before: Apr  5 06:25:49 2026 GMT
            Not After : Apr 12 06:25:49 2026 GMT
        Subject: CN=69d2006e-ea7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:a1:38:1f:e4:9c:8c:87:79:16:6c:de:99:
                    6e:2d:87:d8:af:cd:80:7c:c8:19:78:b7:53:10:24:
                    a6:cd:22:65:7d:ba:91:0f:04:d7:21:28:c8:a6:54:
                    ca:36:db:1d:8b:c1:11:05:ce:56:dc:43:62:7f:78:
                    ff:a2:d6:aa:36:fd:40:6f:d5:74:e8:6b:ea:c7:e3:
                    4a:80:94:28:be:a6:78:fe:94:56:62:bd:e6:bc:f4:
                    5d:99:0d:cf:3f:3a:e8:89:a5:28:37:2f:2d:b1:5f:
                    41:2a:9a:90:97:14:35:5f:1d:30:50:5f:49:86:82:
                    c3:60:ab:e7:cc:e5:46:38:c9:b8:4a:d3:0f:c0:15:
                    7b:67:9f:cc:4f:42:dd:70:4f:95:c3:b4:10:97:9c:
                    0f:e5:c0:a5:d8:80:12:ae:8a:52:da:9a:56:a0:3e:
                    d5:15:38:b6:88:4a:ae:8f:93:ce:36:6c:20:2d:03:
                    69:52:bf:30:82:dd:8f:3a:2a:3b:d1:02:dc:e9:8a:
                    25:d0:5a:7a:49:44:cd:8e:42:a5:31:8a:7d:bf:0f:
                    99:fe:84:8d:f3:0e:51:94:39:f6:2c:f4:fe:52:2c:
                    09:5e:3a:8d:5f:c3:b3:1b:77:dd:1c:de:80:c5:17:
                    d8:81:16:31:17:c3:b2:88:26:86:0d:b5:19:27:b3:
                    28:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:05:6F:D1:54:B9:ED:37:D7:44:F6:4F:FC:CC:54:E4:18:D9:78:F6
            X509v3 Authority Key Identifier:
                keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:44:9a:01:e0:4a:91:ed:b3:67:66:f8:04:a8:76:a2:ba:32:
         54:47:2e:5e:85:de:94:ad:23:e5:48:9b:2a:08:c2:b5:4b:d2:
         79:cd:25:5a:97:e4:ce:84:b8:eb:2e:28:f3:10:dc:80:3b:e2:
         3b:d1:19:71:4f:41:b7:86:0f:a6:8c:40:a1:a7:d8:81:5f:8d:
         c4:bb:88:c2:05:b5:9e:e6:ae:4d:ee:93:1f:56:2a:f3:49:6c:
         9e:0f:25:2f:46:a3:63:3d:41:35:47:a9:dc:63:fb:72:76:d4:
         79:fc:1d:6e:91:8f:64:75:ae:fc:21:4a:82:f0:72:b4:60:d6:
         7f:75:fc:28:2a:c0:fc:a2:ce:95:cc:a0:4b:a8:d2:be:a0:62:
         53:3f:d5:bc:68:bf:0d:da:08:44:d9:83:d9:a8:26:41:0b:2a:
         5a:6b:d6:e3:03:7d:d3:0b:f0:1c:ca:ca:c9:16:5c:35:b3:65:
         02:1c:2b:97:b2:37:db:0b:1d:e4:db:26:af:72:83:16:0f:7b:
         ea:d6:de:6b:ef:07:07:98:f3:ce:04:b4:49:7f:7a:27:2c:90:
         d2:c9:d0:0f:3b:dc:49:42:33:90:a5:3a:55:eb:9f:81:3f:ae:
         f0:80:61:05:1f:86:c6:f6:bc:de:6b:9b:c4:ac:b3:a7:0e:60:
         fe:eb:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:12 2026 by rpki-client