Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
File:                     KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json)
Hash identifier:          wkKakfdMp2RtU5HqU6N4h0H3qNVQi527ZQAby6/MH40=
Subject key identifier:   AA:97:A9:82:FC:6D:05:38:BD:08:83:B6:56:71:1E:58:0A:80:41:0B
Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
Certificate issuer:       /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Certificate serial:       0ACD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
Manifest number:          0AC4
Signing time:             Sat 04 Apr 2026 19:16:32 +0000
Manifest this update:     Sat 04 Apr 2026 19:16:32 +0000
Manifest next update:     Sat 11 Apr 2026 19:16:32 +0000
Files and hashes:         1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: zTMrzMo6709ZjV/ve9ZiyhZg9OQNvWOmICPX0nAsljM=)
                          2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: AkREMdUY9iw5osiiQhe7w1xnANjcqb+Bqi344RCqSk0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
                          rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2765 (0xacd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
        Validity
            Not Before: Apr  4 19:16:32 2026 GMT
            Not After : Apr 11 19:16:32 2026 GMT
        Subject: CN=69d16390-f961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:ea:f1:86:bf:af:8a:a5:02:08:e4:25:45:
                    91:bc:c9:b5:4e:f5:b9:cd:ee:95:19:45:f1:b9:fc:
                    dc:1d:c8:94:61:c7:1c:18:ac:be:5a:c8:de:0a:22:
                    48:be:2c:9c:93:bd:b4:50:be:00:54:25:da:04:9f:
                    55:0a:f2:ea:d7:87:9e:74:42:44:0f:e8:ad:7b:e0:
                    70:47:12:c1:4a:c3:ea:74:1d:b2:de:93:ff:58:b4:
                    a6:b6:0e:fd:06:be:87:12:d8:90:07:23:2f:b6:b6:
                    20:43:a4:fa:c5:32:51:2a:c1:f0:75:67:31:c7:3d:
                    f2:53:b1:01:81:fd:93:c1:17:d5:fd:c3:6d:9f:7a:
                    76:49:22:7d:fd:d8:78:f8:7b:ca:83:be:34:57:39:
                    e9:71:31:17:a0:46:aa:d8:9f:21:b1:ac:31:3d:84:
                    da:09:d6:a9:6e:4e:e7:b2:bb:37:bd:94:cf:15:3f:
                    36:e0:93:a6:4e:ce:27:d1:21:15:25:27:50:2c:3a:
                    18:5b:d0:cd:50:35:e4:11:d3:a6:d2:74:1b:0d:4b:
                    51:2d:d4:b6:07:2e:96:00:12:21:20:30:cb:c3:8e:
                    76:0b:62:fb:24:0e:34:21:3a:19:11:ac:79:49:74:
                    91:d9:46:97:ef:47:9c:57:d4:a6:03:9f:80:26:a5:
                    a4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:97:A9:82:FC:6D:05:38:BD:08:83:B6:56:71:1E:58:0A:80:41:0B
            X509v3 Authority Key Identifier:
                keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b5:68:8a:09:a1:44:ff:b3:db:09:54:b5:42:f8:28:96:6f:
         cb:eb:f0:99:0a:37:71:24:29:30:7d:46:12:c8:a9:40:11:8b:
         ce:f1:d9:13:80:5f:ea:6b:2a:3f:26:e4:c8:2d:4e:8f:cd:2f:
         be:b5:34:8d:18:4d:87:5a:22:6b:cf:3c:37:7c:4e:d3:3d:34:
         c5:31:d0:d6:c2:84:3a:6d:b9:32:20:a8:ba:61:ac:63:42:f6:
         8c:84:84:81:34:a8:15:4b:b4:3c:ae:ec:f4:74:76:0a:19:ff:
         78:36:08:8a:bc:70:9e:d5:e9:be:6b:c1:b7:b1:25:67:06:ed:
         5d:6d:51:88:e8:f7:2f:2a:27:e4:36:35:34:ae:2d:50:be:39:
         41:25:2f:e0:b3:e8:32:61:7e:28:00:09:58:2e:b4:59:bc:00:
         b2:de:2e:ac:5f:ba:d2:47:65:59:45:18:2e:12:a3:57:95:dc:
         11:ed:b3:57:05:a5:ae:4f:d4:af:23:b4:47:a2:97:38:68:14:
         00:35:04:fe:22:4e:7f:f1:92:2b:b0:c4:33:f5:12:7d:5d:24:
         d6:fa:07:50:f4:6f:65:f3:19:e8:e8:f5:99:49:10:da:20:d0:
         bc:01:e8:8f:40:87:5d:fe:1e:e5:11:5a:96:7d:48:7e:c7:07:
         a8:52:27:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:36 2026 by rpki-client