Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
File:                     KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json)
Hash identifier:          qWdLqx9bF6itmDtBpa7ZqqgEDJ0rreMpASmxzI3f3Tw=
Subject key identifier:   66:F3:F0:7E:6B:70:E9:15:7C:5C:CC:A1:DC:36:82:44:1F:91:4C:74
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Certificate issuer:       /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial:       0767
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
Manifest number:          0757
Signing time:             Sat 04 Apr 2026 21:29:59 +0000
Manifest this update:     Sat 04 Apr 2026 21:29:59 +0000
Manifest next update:     Sat 11 Apr 2026 21:29:59 +0000
Files and hashes:         1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: A0tkkwio88JifOhynRtnEzvKhCna71NHDa7VW8V/ddA=)
                          2: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: bFSS96O4radzazvR0OO67dPHVo81LQWTCGUGmX2A0Eg=)
                          3: 9398F508619611EBA485B448C4F9AE02.roa (hash: mGBSLne8/rU2A9xuOPlh+Kt9amKjy+mVgkjCDSndQxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
                          rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1895 (0x767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
        Validity
            Not Before: Apr  4 21:29:59 2026 GMT
            Not After : Apr 11 21:29:59 2026 GMT
        Subject: CN=69d182d7-5480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:c2:fa:b4:03:0e:3b:33:22:da:be:ca:41:
                    ec:3a:e3:df:ca:24:d7:11:93:bc:72:64:37:92:2a:
                    2d:7d:6e:41:51:c5:a1:fe:cf:e5:94:ca:ea:42:ca:
                    ce:89:ff:e2:e6:62:7a:a6:28:d9:d3:a5:0a:3e:70:
                    a7:ac:f0:2c:56:99:7c:3c:1b:7c:a0:aa:bc:21:6d:
                    1b:ea:28:04:df:19:e1:e3:d6:c1:32:1a:9e:ee:7a:
                    34:de:5f:f5:d2:fc:d4:87:72:85:f5:92:c5:3e:f7:
                    87:01:51:50:b2:96:5f:3a:93:ae:bf:3a:52:53:24:
                    01:fc:e1:28:cf:16:ef:bb:d9:20:f8:db:81:55:45:
                    03:e0:d1:53:b2:4d:d9:3f:8a:49:5c:d7:88:43:93:
                    95:87:0f:b7:c8:fa:41:75:43:7c:79:e2:1a:2d:2f:
                    0d:9c:5d:51:5b:80:6c:e8:41:e5:00:bb:da:d0:97:
                    a4:fe:4e:1f:fd:03:e0:18:6c:47:a2:62:dd:6b:a6:
                    e7:68:41:4b:3e:3b:cc:77:dd:82:c2:4a:fc:78:56:
                    05:df:6a:94:6c:82:b0:6b:70:7c:35:10:a7:8c:d4:
                    ee:fc:1d:08:d1:63:0d:91:25:51:57:1e:40:09:e4:
                    28:3a:6a:58:94:97:01:00:60:15:45:58:9a:70:22:
                    2c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F3:F0:7E:6B:70:E9:15:7C:5C:CC:A1:DC:36:82:44:1F:91:4C:74
            X509v3 Authority Key Identifier:
                keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e1:04:13:22:a4:6b:ef:56:d9:28:fa:93:29:6b:cc:a7:d5:
         16:fb:7d:5d:25:41:88:11:ac:34:99:7f:3a:0b:26:16:90:ba:
         78:c9:0c:24:f6:4e:e8:0a:a8:92:1f:bc:bb:fe:d8:33:65:aa:
         9e:00:38:f2:8d:69:2d:77:b0:2c:c6:2d:03:26:14:a6:6a:f5:
         5e:d1:c5:f5:10:1c:cf:37:c8:2b:f7:d5:84:dd:0f:8a:4d:95:
         a8:eb:97:8e:aa:e0:73:84:82:de:fd:fb:fa:5b:f3:2a:cd:b6:
         4a:0c:8c:bd:33:61:98:23:53:8e:e9:27:c4:e2:01:bc:9e:06:
         a0:fe:6a:34:96:d0:ef:1e:99:46:fe:b9:71:a4:01:5b:e9:5c:
         7f:9d:85:71:ee:4e:62:97:72:47:c1:49:6a:6d:d9:f9:8a:22:
         f0:98:94:c2:06:38:2e:c1:a8:4e:2f:de:d6:a5:83:9d:92:3b:
         03:af:53:b5:60:76:6e:a0:35:38:cb:8b:f7:66:f5:ec:5f:da:
         e7:67:fb:b5:5b:33:57:91:ea:12:07:14:3b:0c:bd:79:6b:4a:
         a4:ba:7f:ea:aa:7b:97:59:8a:ea:0a:88:8f:5c:fd:d6:e3:d9:
         13:8b:1f:78:ed:4d:d4:14:82:bf:f1:56:f2:64:fa:90:2e:cc:
         c8:87:29:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:04 2026 by rpki-client