Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
File:                     KMruhJZWnFc8PlsYkMWhs0z8jjA.mft (raw, json)
Hash identifier:          kM4SQfoJ2eYP3gc0uOi6xJC6UE4o8fT/KTevcI08tbY=
Subject key identifier:   DE:AB:BB:11:E8:4B:4E:8A:49:E4:13:3A:D4:C0:2A:92:19:9F:9F:E9
Authority key identifier: 28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30
Certificate issuer:       /CN=A91E4EF6/serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30
Certificate serial:       0791
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
Manifest number:          1289
Signing time:             Sat 04 Apr 2026 19:08:46 +0000
Manifest this update:     Sat 04 Apr 2026 19:08:45 +0000
Manifest next update:     Sat 11 Apr 2026 19:08:45 +0000
Files and hashes:         1: KMruhJZWnFc8PlsYkMWhs0z8jjA.crl (hash: mVRdGO7E1kPBYwFk6w4gpyw7KztGWnYegVYBfwMRF04=)
                          2: 377B6620506B11EBAD849641C4F9AE02.roa (hash: 7lVvPvKm0jDrCtO8FOe2rLzoGXgVOgfwoKgNAbdQ/CA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl
                          rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937 (0x791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4EF6, serialNumber=28CAEE8496569C573C3E5B1890C5A1B34CFC8E30
        Validity
            Not Before: Apr  4 19:08:45 2026 GMT
            Not After : Apr 11 19:08:45 2026 GMT
        Subject: CN=69d161bd-4365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:d9:55:df:de:e3:be:b2:78:77:be:87:70:
                    b4:e7:d9:c6:bb:d4:a1:e0:d1:c1:a7:76:d3:cf:d1:
                    a0:02:08:cf:14:05:8d:a0:04:62:47:f5:53:85:ff:
                    e4:97:0d:1d:1f:15:ec:f3:09:7a:53:47:ca:fb:0f:
                    90:05:a8:05:c9:a3:fd:c3:b8:ad:b3:c0:6d:7b:dc:
                    93:83:36:6d:43:1c:1c:aa:59:1a:1b:1a:fb:13:37:
                    73:08:57:38:d9:be:d9:d4:12:e0:ac:a4:ff:3f:5a:
                    70:ee:b0:b5:33:9e:a0:8b:15:39:b4:58:7e:f1:0d:
                    bf:76:e4:f2:26:41:a0:f7:27:90:66:50:06:35:6d:
                    de:0f:65:10:5e:22:5f:86:7c:9e:05:d9:26:4a:56:
                    2f:d7:0e:a3:29:de:58:00:a4:a7:70:b2:25:2a:9b:
                    30:22:07:ef:43:f9:23:cb:8a:2b:b7:2a:b9:83:f3:
                    68:1f:a9:c1:08:75:fd:73:64:85:da:a8:36:fa:ea:
                    10:f9:d4:53:d4:fd:81:6c:9b:3a:fd:39:e8:2a:ac:
                    19:f5:0a:c1:c4:f3:cf:df:dc:91:37:2a:93:76:c3:
                    7e:af:d4:32:98:9e:dd:d8:fa:15:9b:21:d7:24:dd:
                    8b:86:16:15:33:a8:12:36:3c:37:28:41:6f:c5:87:
                    12:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AB:BB:11:E8:4B:4E:8A:49:E4:13:3A:D4:C0:2A:92:19:9F:9F:E9
            X509v3 Authority Key Identifier:
                keyid:28:CA:EE:84:96:56:9C:57:3C:3E:5B:18:90:C5:A1:B3:4C:FC:8E:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMruhJZWnFc8PlsYkMWhs0z8jjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/KMruhJZWnFc8PlsYkMWhs0z8jjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:fb:c1:f1:ae:09:65:0c:2f:60:03:01:08:c4:82:47:eb:49:
         13:6a:6f:48:13:5b:cd:d6:dc:3a:94:05:c0:e6:53:07:ce:3f:
         e1:ea:9c:9e:06:f4:89:7f:31:01:cb:30:4d:8a:5d:8c:98:b6:
         17:fb:1b:20:24:84:8e:45:fa:d9:2b:f3:8c:67:88:f3:cc:90:
         45:f9:36:a3:f4:d2:06:9a:bc:9e:ee:43:8c:e4:a0:99:9d:70:
         0d:8a:a9:f1:5c:a1:7c:83:93:4e:c3:2a:3b:09:f3:fd:c2:88:
         d3:63:6a:12:78:61:51:00:23:ec:b4:bb:ec:32:9f:d8:fd:72:
         69:2d:6e:89:a6:9e:da:39:f3:f0:5e:f8:1a:c7:90:3c:9f:c0:
         f2:cb:93:35:ab:bc:33:b1:b3:44:dd:a5:3b:50:55:c5:c1:3b:
         26:3e:24:49:d4:62:f3:98:9e:9f:ba:6a:ab:43:a9:5a:4a:63:
         10:a3:ee:a4:51:bd:54:d6:1c:e8:b7:8a:a2:06:6b:f6:91:60:
         62:6f:24:cf:69:d9:dd:1f:3f:0a:31:d0:cf:ee:55:61:60:10:
         e2:ad:65:1e:6e:34:f1:42:ae:7a:6e:67:11:92:05:64:77:21:
         23:e6:f7:64:05:24:3c:61:3a:bb:73:db:01:63:8b:ce:e8:9b:
         ba:64:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:14 2026 by rpki-client