Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
File:                     kMt_oTeWnENWpMpS9wXcoasiX9A.mft (raw, json)
Hash identifier:          HlJLHYsiNUrPkk2TPS17KdB2m+Xl0Nzmzoisa5OjEqk=
Subject key identifier:   4F:D0:F0:18:67:16:AB:5A:95:F5:17:3B:20:F8:69:88:42:91:97:1F
Authority key identifier: 90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0
Certificate issuer:       /CN=A91907D3/serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
Manifest number:          9A
Signing time:             Thu 21 May 2026 07:30:54 +0000
Manifest this update:     Thu 21 May 2026 07:30:54 +0000
Manifest next update:     Thu 28 May 2026 07:30:54 +0000
Files and hashes:         1: kMt_oTeWnENWpMpS9wXcoasiX9A.crl (hash: rS6IHeX54iwy7ohTRREk1gjcg+8RDMp6HuCot+sLFN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl
                          rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91907D3, serialNumber=90CB7FA137969C4356A4CA52F705DCA1AB225FD0
        Validity
            Not Before: May 21 07:30:54 2026 GMT
            Not After : May 28 07:30:54 2026 GMT
        Subject: CN=6a0eb4ae-b9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dd:61:14:30:c6:87:7f:f7:4a:ec:1e:38:40:
                    e1:0e:53:fa:a7:f3:f0:b3:43:70:f1:2a:97:12:46:
                    5d:d7:28:3e:10:31:96:42:ee:0a:82:73:ed:5e:85:
                    89:2f:7e:51:6d:ea:69:f7:fa:85:c3:b6:24:a9:43:
                    5f:4d:d8:10:24:d9:fc:10:00:16:83:5c:b8:ff:23:
                    f0:a7:f2:e0:b2:f5:84:dd:f8:11:d8:2f:65:84:e8:
                    16:cf:53:dc:f3:81:81:e6:03:32:da:b5:0c:d9:68:
                    8f:b0:ad:d9:02:31:ab:6f:03:c4:cd:21:e0:ae:67:
                    8a:7c:38:65:36:7b:5d:bf:d0:6f:51:33:9d:21:e5:
                    12:9f:c3:9e:7f:e9:5a:1e:c6:af:d2:08:1a:1f:b0:
                    81:f1:8e:27:bb:c2:1a:5d:d7:bc:a8:92:50:80:ac:
                    54:52:e0:7e:de:ad:14:92:29:20:bc:c3:54:71:40:
                    3f:6f:66:3c:37:12:0f:a2:25:98:94:cc:e3:5a:db:
                    4e:85:7b:2e:87:f2:6d:6d:64:72:ab:1a:72:94:10:
                    a0:83:29:e0:5b:e3:d2:13:74:75:b2:8b:f2:0c:b6:
                    73:93:f1:cc:10:3c:f8:1b:59:9d:38:31:d8:e3:82:
                    8d:da:30:e2:96:23:0c:df:8b:ca:fa:70:8f:cf:4a:
                    f8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D0:F0:18:67:16:AB:5A:95:F5:17:3B:20:F8:69:88:42:91:97:1F
            X509v3 Authority Key Identifier:
                keyid:90:CB:7F:A1:37:96:9C:43:56:A4:CA:52:F7:05:DC:A1:AB:22:5F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMt_oTeWnENWpMpS9wXcoasiX9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/419E7E126C5911F0A3884E7AC4F9AE02/kMt_oTeWnENWpMpS9wXcoasiX9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:98:6c:67:b9:cb:8a:a1:fc:7f:0c:9a:8c:72:a8:c2:c5:58:
         ef:34:49:09:57:45:d3:df:cb:2e:16:bc:9e:b4:11:f1:36:d5:
         21:99:dd:e4:2c:20:eb:cb:db:2a:0c:95:0f:d2:ea:2f:d9:25:
         d7:c1:f5:20:a8:11:88:75:a5:c1:07:d9:10:81:98:e4:cd:62:
         bf:75:71:2e:77:0e:72:2e:63:27:5d:c8:06:21:43:a1:e3:b0:
         f0:bd:75:53:97:12:66:16:99:ec:77:a0:80:ec:e0:d6:1b:53:
         b3:af:d4:b7:bc:9f:0c:0f:dc:36:4e:01:9e:cb:85:70:b7:9a:
         d6:0c:62:19:88:d9:6d:b8:a4:5c:1e:25:53:df:78:0a:b8:dc:
         33:f9:3f:c4:3a:16:2f:d3:1b:34:2a:68:8a:59:22:6c:b3:d4:
         67:ed:d1:17:ae:18:c3:40:9a:22:92:61:16:8e:59:87:51:fb:
         2b:49:56:4d:2b:e4:f6:6d:28:f0:bf:89:fc:0f:10:a9:a2:f2:
         56:ff:6e:30:d4:35:5e:a2:d0:7b:a3:ad:93:32:55:07:4c:f8:
         ba:b9:26:f1:a4:cc:9d:b9:c8:de:11:7b:0b:60:10:63:bf:9a:
         ed:17:a8:10:f9:b0:7b:92:05:74:2a:19:e9:60:25:09:36:7a:
         25:92:76:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:59:17 2026 by rpki-client