Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
File:                     kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json)
Hash identifier:          vVCQ/gTvwV2ptENiQRLGmqTu7R1G+ComG6Ahio0Akzo=
Subject key identifier:   03:AC:F0:F5:06:3E:02:BD:15:94:EB:B5:B6:33:45:62:AB:D4:CF:22
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Certificate issuer:       /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial:       068B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
Manifest number:          067F
Signing time:             Sat 04 Apr 2026 22:19:27 +0000
Manifest this update:     Sat 04 Apr 2026 22:19:26 +0000
Manifest next update:     Sat 11 Apr 2026 22:19:26 +0000
Files and hashes:         1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: 8Uo0RVux9OvBl+Qsi9fvPX2zA6kz5Wjmc6WxSkiOT2k=)
                          2: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: rUB8K/gQFaS9QOQ5n+o0moQe0g7Bdol9yJ5xYGhKZ7A=)
                          3: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: VEOYpLopU2c9FdbzxqgEzKYlCo37XOpklpOWcyDo3bI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
                          rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
        Validity
            Not Before: Apr  4 22:19:26 2026 GMT
            Not After : Apr 11 22:19:26 2026 GMT
        Subject: CN=69d18e6f-c36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:28:3b:1e:3d:17:97:2d:e6:c0:7e:c8:8a:7f:
                    ed:48:7a:e7:86:e3:e4:3b:fd:c9:a3:90:af:f0:eb:
                    b5:37:56:f7:fd:de:e6:d9:7d:f4:c0:5a:fe:0b:79:
                    89:13:22:ff:aa:ca:b4:65:81:d6:9c:c0:da:6c:9a:
                    87:fc:02:d8:ab:c0:63:f5:55:28:7d:62:e7:48:7d:
                    59:d7:c0:09:63:b6:80:10:d8:ac:43:99:80:20:19:
                    46:73:ee:37:3e:b9:a7:ae:ca:77:67:9b:10:5f:66:
                    da:22:2a:18:ce:90:45:8b:e0:83:5b:9f:0a:0b:4f:
                    14:50:96:f7:c0:2c:28:06:f9:f5:d1:e2:de:f6:cb:
                    62:a2:3f:57:22:47:85:7f:f0:30:ba:8d:91:39:5b:
                    df:b5:e0:9c:2f:2a:07:13:fd:66:6d:fe:a6:08:08:
                    48:aa:e1:b1:2d:48:c9:e3:ef:66:2e:b2:17:86:06:
                    94:13:b1:69:ad:87:4a:94:a3:94:aa:5d:34:58:3e:
                    4d:7c:d2:c1:7a:fb:35:cf:d3:be:d0:11:20:65:25:
                    71:6d:c9:fa:8b:58:ca:d1:0c:d6:14:35:4e:6f:ae:
                    14:e9:46:42:31:5a:df:ca:25:8a:9f:f5:58:c9:53:
                    b3:e8:b9:60:3c:c1:81:06:c6:05:0d:b9:4f:ff:6f:
                    3c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AC:F0:F5:06:3E:02:BD:15:94:EB:B5:B6:33:45:62:AB:D4:CF:22
            X509v3 Authority Key Identifier:
                keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e5:16:60:f6:99:30:1f:41:9e:50:fa:be:ef:29:f7:a5:7e:
         9d:99:c9:a6:56:89:b7:59:1f:88:2b:13:22:18:08:d3:69:29:
         d3:fe:3f:f2:e4:bd:71:0a:23:c0:0d:4a:b3:9a:fa:8b:73:49:
         2c:08:d0:f0:32:20:19:a5:5a:d4:12:77:16:cf:e5:ef:45:94:
         a3:bb:5d:0d:3b:ef:a8:45:a1:a1:59:74:23:70:fd:9e:94:f0:
         2e:bc:f3:3f:39:84:60:ff:f8:17:08:b7:c4:03:e9:83:17:a0:
         53:66:3a:da:90:21:86:34:2a:3f:cb:93:45:7c:bc:53:80:d0:
         0f:d6:4e:71:0b:32:f2:a6:26:3d:3d:3b:e3:5b:86:0e:8b:db:
         77:fb:ab:56:ad:d4:54:b8:c2:78:c1:e9:39:d0:f3:04:8c:19:
         ed:d3:5e:d8:37:69:a1:9f:b9:90:5b:38:8d:b4:00:16:6e:a1:
         e0:0a:e6:5f:b5:58:fa:bc:89:a0:75:c8:8f:23:90:2f:0c:c8:
         d4:a6:47:5c:3a:42:04:60:4f:09:52:55:8b:bb:e5:54:e7:44:
         a3:fa:42:08:e6:8b:91:2d:dc:dd:5c:65:79:04:40:ea:7c:5e:
         43:bb:0b:07:46:79:6f:cb:0a:43:75:55:b7:92:e6:5c:f5:3a:
         34:94:01:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:57:00 2026 by rpki-client