Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
File:                     KmvwVK0j6tLbOVMbZGcmypRaxJI.mft (raw, json)
Hash identifier:          WOiOykYruS4eWEqqBfAu9O4qwxcgNG+lW426uhwwYnM=
Subject key identifier:   9C:C8:51:E7:0F:C9:B7:26:4E:19:C7:63:09:23:E0:2C:A3:5F:4E:DA
Authority key identifier: 2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92
Certificate issuer:       /CN=A918AB7E/serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
Manifest number:          C3
Signing time:             Tue 07 Apr 2026 06:21:08 +0000
Manifest this update:     Tue 07 Apr 2026 06:21:07 +0000
Manifest next update:     Tue 14 Apr 2026 06:21:07 +0000
Files and hashes:         1: KmvwVK0j6tLbOVMbZGcmypRaxJI.crl (hash: Jt7gmQ0Ok5ZWFUDY8lLqqikIS0mJJtJReEOqnz3S4Lk=)
                          2: 3CF5A86C088211F0BB90C23EC4F9AE02.roa (hash: MswLuuXELfgYCKXqS/8YmwIxT/Vpx6aTamI6VsJX25Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl
                          rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:21:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AB7E, serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492
        Validity
            Not Before: Apr  7 06:21:07 2026 GMT
            Not After : Apr 14 06:21:07 2026 GMT
        Subject: CN=69d4a253-d0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:e1:84:b8:18:2b:ef:dd:e9:cb:13:6a:6d:
                    da:16:8e:4f:7f:53:81:bc:e9:c3:af:a0:d5:ff:76:
                    09:e5:57:fa:47:8a:51:97:84:3b:f7:4d:b3:a8:d9:
                    e2:9e:57:a5:e7:fb:63:3c:8a:35:a9:bd:65:d9:85:
                    9c:74:9c:6c:fd:a0:79:cd:ce:d9:48:90:6f:d7:13:
                    e6:ea:4c:d9:56:34:65:49:46:04:a4:21:45:06:52:
                    5d:2a:43:38:eb:8b:67:67:c0:3b:0f:87:6e:bb:4f:
                    5c:91:08:a9:6c:00:e8:39:d7:05:25:87:b8:d7:04:
                    8a:da:8d:9c:a5:d6:24:3c:ff:f3:c1:e7:ae:1e:60:
                    20:c6:71:80:da:1e:2c:e8:94:14:79:f4:c9:06:67:
                    05:c2:ba:66:0a:be:1e:b6:6f:b9:49:23:d9:11:0e:
                    11:86:26:94:8b:f7:d6:44:ef:d4:e1:b5:1a:1c:41:
                    c4:bc:2a:76:8a:47:16:88:43:0e:2c:97:fb:a1:a5:
                    65:f4:85:bc:7f:13:e1:a3:07:41:e4:b0:65:77:a7:
                    1a:7f:d7:11:59:a4:0f:bd:d8:cb:a7:ba:10:0a:57:
                    2c:56:c3:c5:3f:1e:c9:06:ab:e7:d1:02:23:2f:38:
                    02:c9:e3:0b:7e:c0:e6:80:6a:3a:b3:85:f5:e1:39:
                    37:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C8:51:E7:0F:C9:B7:26:4E:19:C7:63:09:23:E0:2C:A3:5F:4E:DA
            X509v3 Authority Key Identifier:
                keyid:2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a7:fa:39:e1:ca:6a:ab:d5:5a:1a:9e:ee:88:76:92:01:34:
         b0:c9:ef:c7:79:68:fb:d4:9b:56:8d:3e:ec:4a:8c:ea:61:29:
         56:c1:92:da:3a:d7:8c:87:55:2b:c9:26:1f:65:99:f1:7f:17:
         52:b9:43:bc:4b:fe:27:52:bc:84:ff:6c:14:6f:52:dc:d7:f8:
         87:59:b5:76:ea:63:77:31:08:99:ca:0b:ef:99:fa:ac:cc:9f:
         93:aa:f3:25:f9:45:d8:58:5a:72:d6:d4:e8:90:30:42:7e:c7:
         08:83:66:8a:a1:c1:94:6c:6f:32:3d:46:d0:b4:b2:c5:fe:e0:
         70:6c:67:29:8e:1c:53:0f:00:35:a5:6f:92:a2:b8:54:5c:97:
         23:44:00:b7:a9:3a:8d:f7:40:1f:f5:4d:2c:20:d9:24:ae:29:
         e1:5b:01:27:28:68:eb:9a:b2:25:31:d5:23:1b:5c:58:b1:62:
         d4:d1:95:84:ca:93:f9:6f:ec:bf:be:d2:19:29:1d:35:97:2c:
         6b:ad:55:d8:82:b3:b5:ca:22:37:24:f0:f0:91:c6:8f:b5:59:
         ba:51:63:cd:65:6c:0c:c5:67:84:39:05:fa:d3:46:4f:55:cf:
         03:12:05:69:c7:70:b2:f0:77:2f:fb:db:4a:bd:fa:98:50:e1:
         3e:14:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 03:41:14 2026 by rpki-client