Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
File:                     kKozD4l2v2xASeZzwoIf0pHUO8E.mft (raw, json)
Hash identifier:          yrq6qXMIGWHBqutxIuUok4LkXavwRWth98umb7mPhHE=
Subject key identifier:   26:7D:28:FE:99:E0:86:59:CD:8F:60:9A:A6:A8:AB:B0:97:BA:98:4F
Authority key identifier: 90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1
Certificate issuer:       /CN=A91AE85E/serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1
Certificate serial:       05E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
Manifest number:          05E6
Signing time:             Mon 02 Mar 2026 14:18:29 +0000
Manifest this update:     Mon 02 Mar 2026 14:18:28 +0000
Manifest next update:     Mon 09 Mar 2026 14:18:28 +0000
Files and hashes:         1: kKozD4l2v2xASeZzwoIf0pHUO8E.crl (hash: VQWZj6S9/V9mhWCsxtIGnij6GG3z3F38emdOBW87K4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl
                          rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510 (0x5e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE85E, serialNumber=90AA330F8976BF6C4049E673C2821FD291D43BC1
        Validity
            Not Before: Mar  2 14:18:28 2026 GMT
            Not After : Mar  9 14:18:28 2026 GMT
        Subject: CN=69a59c34-b0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:27:2c:dd:a3:a8:82:86:98:a3:45:91:5c:2c:
                    ab:e8:78:2d:a3:88:b4:50:f0:ec:18:75:5f:60:7c:
                    a4:d0:ca:6b:77:6a:6a:91:d0:31:41:f9:20:65:e0:
                    8b:57:13:b0:72:4d:3c:aa:2d:57:f4:31:2c:27:eb:
                    57:0b:da:c9:3c:77:28:58:7c:36:b6:9d:be:a5:84:
                    3c:f1:31:7b:5d:97:ae:bb:be:0f:56:b4:57:6b:00:
                    34:03:05:2c:6b:7d:dc:10:f7:21:8f:59:4a:43:6f:
                    07:31:37:31:15:95:47:9f:f8:f3:e0:0d:86:f7:f9:
                    1b:bd:3b:7e:cd:02:c9:78:82:af:f5:f5:74:04:e3:
                    f6:82:e3:de:53:29:de:cb:e7:45:a4:71:14:46:7a:
                    55:b8:d6:7e:92:d9:c0:01:a0:61:a8:11:94:f4:a6:
                    14:8d:f8:76:89:e7:2f:3a:2a:b8:7b:cc:e8:2e:42:
                    9a:5e:5a:6d:19:54:41:5b:ae:38:e8:33:fa:fc:93:
                    ed:7f:37:c3:e2:ff:f0:9b:a4:96:cf:8b:53:32:2d:
                    92:18:14:29:dc:14:8b:93:a7:ce:67:22:c8:15:12:
                    aa:f3:70:08:cd:db:a5:49:3e:52:83:17:0b:21:2e:
                    de:8c:03:c9:4b:7e:37:86:e0:1e:17:6b:08:04:0e:
                    e8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7D:28:FE:99:E0:86:59:CD:8F:60:9A:A6:A8:AB:B0:97:BA:98:4F
            X509v3 Authority Key Identifier:
                keyid:90:AA:33:0F:89:76:BF:6C:40:49:E6:73:C2:82:1F:D2:91:D4:3B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kKozD4l2v2xASeZzwoIf0pHUO8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/1A16EB86F3EA11EBB258BA7BC4F9AE02/kKozD4l2v2xASeZzwoIf0pHUO8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:01:62:9c:e9:8d:ed:b3:ae:4e:6b:e1:63:99:20:be:1a:a8:
         a0:03:00:7e:55:d4:8a:f4:76:19:1c:86:28:4a:2f:d2:e5:c6:
         00:a4:c4:d4:7b:ce:f7:22:bd:b0:36:fb:e3:e5:d6:86:cd:70:
         d4:28:f4:84:86:f7:1e:4e:bc:f9:bb:52:a1:7c:1e:ef:36:be:
         82:39:cf:f9:ed:2c:2d:9b:2f:6b:51:6c:1e:66:0b:82:82:66:
         f9:97:b6:56:08:cd:30:51:1c:19:b4:77:1f:fe:f4:b5:ae:7a:
         cb:a7:6c:29:68:75:60:bf:72:f7:c5:01:99:c6:e5:12:03:2f:
         78:bd:b1:4a:98:86:2d:d1:c7:a9:e8:15:e3:ef:d9:01:b5:6a:
         8c:64:c6:7f:53:b7:a4:77:b7:c7:d2:8b:d2:17:e2:a6:7d:b9:
         f7:a7:af:36:73:36:1b:a6:12:c5:f1:c7:9d:fc:fa:65:41:8b:
         ca:c5:ac:c1:55:e2:94:1f:89:ab:e0:10:b6:c5:0b:94:a7:dc:
         8d:b1:a2:08:ed:32:5a:10:87:dd:a6:42:dc:59:1e:f1:d5:f4:
         0e:66:bf:cf:bf:85:fa:3d:65:bd:b4:da:4a:76:c7:99:fb:d2:
         94:d8:96:08:71:68:6d:db:71:e0:5d:bc:b1:0f:4b:63:ad:fb:
         4e:30:4a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:29 2026 by rpki-client