Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
File:                     kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json)
Hash identifier:          MSSVuzqsPXyh4ycjmDIeddQcWX1cNQpQN+482CbPIew=
Subject key identifier:   03:C3:3E:05:3E:89:E9:CA:6C:00:91:F3:FB:A9:A3:30:35:75:B4:6D
Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
Certificate issuer:       /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
Manifest number:          0183
Signing time:             Sun 05 Apr 2026 03:59:52 +0000
Manifest this update:     Sun 05 Apr 2026 03:59:51 +0000
Manifest next update:     Sun 12 Apr 2026 03:59:51 +0000
Files and hashes:         1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: 5fGWRZi6/pr2wHh9VWRJvrMtCLvINu72hFZ5GK9bSHQ=)
                          2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: tH4b5xPuIWbZyhcelLgLFsPKjP+sPf0BVd7oViQfnB0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
                          rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
        Validity
            Not Before: Apr  5 03:59:51 2026 GMT
            Not After : Apr 12 03:59:51 2026 GMT
        Subject: CN=69d1de37-be35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:5b:78:0c:f3:f8:34:8f:5f:80:73:1b:11:
                    53:61:53:74:30:49:55:6c:c3:87:87:c0:7d:69:bd:
                    d4:55:8c:f1:10:d1:81:ba:bd:73:cc:81:3a:64:14:
                    68:c0:e9:5c:0c:ed:7c:a2:87:c0:81:cc:8f:12:7b:
                    35:30:d0:96:9c:ea:e0:b1:0e:48:00:03:82:cf:a7:
                    95:38:2d:58:0f:1c:71:77:31:ce:f9:ad:91:bd:bb:
                    e4:1d:47:ba:be:a0:09:4f:cd:f4:37:40:54:2e:fe:
                    60:4f:8c:be:73:25:a7:b9:5b:28:d6:76:b3:01:07:
                    9e:6c:9a:59:90:95:8e:02:1f:d8:85:96:a1:b2:22:
                    d2:a5:52:4e:7e:44:62:04:c0:af:33:cd:61:5e:a8:
                    1b:6d:cc:49:50:e4:fc:fd:39:61:6e:2c:57:f2:d0:
                    da:db:4a:ef:fe:82:fa:73:16:05:98:91:e1:d7:5f:
                    92:2c:fe:60:41:e0:31:c3:ff:89:ca:55:81:7e:d3:
                    b8:f5:2b:cd:25:46:2e:d7:dc:c6:8a:38:aa:40:c7:
                    70:6e:72:40:4f:80:25:32:4b:6a:42:44:03:46:4e:
                    61:09:3f:02:89:53:45:3e:4b:bc:29:b9:f7:60:21:
                    b3:15:87:78:c8:15:65:ad:40:1b:ee:d5:40:6e:e8:
                    b4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C3:3E:05:3E:89:E9:CA:6C:00:91:F3:FB:A9:A3:30:35:75:B4:6D
            X509v3 Authority Key Identifier:
                keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:65:bd:69:03:68:53:0d:6e:ce:02:a2:b1:eb:1a:0e:83:69:
         5a:9d:b6:0e:20:2d:3c:8d:ca:54:22:1d:53:14:6c:f1:93:aa:
         6a:7e:04:3f:71:f4:13:d5:ab:23:ba:13:1b:90:c3:bb:14:cc:
         28:40:ab:3c:27:a9:86:a6:b9:76:ec:4c:14:97:b2:bb:2f:b1:
         c5:ca:43:69:32:6c:cb:f4:ab:df:42:b4:c5:b1:49:da:6f:95:
         39:83:b5:80:d5:06:7e:2b:bb:41:e6:b4:3d:24:a8:0b:f0:3f:
         67:bf:1c:27:6c:c1:33:b6:68:72:ba:28:a4:42:07:ae:5f:3d:
         00:93:01:76:8f:4d:28:37:c2:fd:d0:3d:ca:f0:8c:3a:5e:dc:
         b4:88:af:0c:a9:07:f6:7d:df:f9:0e:e8:68:8f:a6:46:fe:4e:
         db:6c:32:13:61:d0:6e:a9:ec:a3:8d:70:0b:7e:56:aa:95:0c:
         a8:69:fc:01:6c:fb:cf:b7:73:2e:8e:59:ae:3e:a1:25:62:a0:
         94:a6:03:72:9a:32:05:af:24:1d:f6:63:59:c6:55:f8:ef:53:
         6c:bd:1a:2f:89:1f:fc:56:7b:9c:a8:87:a2:ce:b5:c9:83:94:
         60:88:72:c2:a0:a4:18:c4:f5:38:82:44:f9:3f:63:e7:92:1b:
         21:3f:ea:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:36 2026 by rpki-client