Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
File:                     Km8SBBLYIPn_JM0F1ez0nmYtmco.mft (raw, json)
Hash identifier:          UhBy0p6ZviB5BPx0GRSViOcxjifurL8j8XmyYdluWV8=
Subject key identifier:   9D:B6:96:52:B2:B6:0E:61:9F:BA:12:A5:7B:D5:1E:AF:69:36:31:DE
Authority key identifier: 2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA
Certificate issuer:       /CN=A91F240B/serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA
Certificate serial:       2032
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
Manifest number:          2022
Signing time:             Wed 06 May 2026 15:56:09 +0000
Manifest this update:     Wed 06 May 2026 15:56:09 +0000
Manifest next update:     Wed 13 May 2026 15:56:09 +0000
Files and hashes:         1: Km8SBBLYIPn_JM0F1ez0nmYtmco.crl (hash: G+xSrLagF35yC5FlOi3svnS6M35GCtyKxlyoMGg5ch0=)
                          2: E352E0A2896F11E7BBF2923CC4F9AE02.roa (hash: f53n49BRZ+a4OFczbu9IHjhQmjnGPixaP4vK3+8G2j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl
                          rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8242 (0x2032)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F240B, serialNumber=2A6F120412D820F9FF24CD05D5ECF49E662D99CA
        Validity
            Not Before: May  6 15:56:09 2026 GMT
            Not After : May 13 15:56:09 2026 GMT
        Subject: CN=69fb6499-9073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:c9:9a:17:75:6f:ad:62:d6:43:ff:cf:d0:
                    66:87:fd:a5:e0:21:36:26:86:a6:56:80:e2:d4:c1:
                    39:3a:4c:1c:ca:7e:7b:a0:47:e0:4a:dd:77:f1:df:
                    90:d8:43:8b:7a:62:74:2b:30:de:fb:dc:f0:a7:b2:
                    0c:12:2a:f4:21:27:7e:be:62:f2:e8:d7:ca:cc:5a:
                    94:fe:54:0f:b4:e6:22:ea:35:15:f5:c6:35:e4:46:
                    04:c8:89:ab:91:ca:0c:04:ab:05:46:56:2c:42:b0:
                    0c:79:19:37:29:75:af:b0:38:cb:da:c4:83:2b:f4:
                    6d:86:e0:bf:72:26:30:d2:c7:b4:bf:8f:e1:af:3b:
                    ae:e2:a1:fa:b5:cf:8d:bf:2f:6f:e5:cd:3b:df:db:
                    24:bd:4c:90:45:17:42:21:8c:a8:8f:df:a9:32:eb:
                    0e:e9:50:54:e6:a7:47:70:ff:ac:66:99:df:a9:cb:
                    fe:d0:11:b8:76:ea:86:da:c7:d7:45:d8:3d:46:e8:
                    68:6d:a4:d3:e6:44:8a:b2:d8:60:a8:39:bd:14:0c:
                    23:8a:b5:fe:3f:b4:3d:d9:d6:42:d5:c9:23:44:e7:
                    c9:e0:23:c5:7c:b9:a9:be:27:27:1a:09:cd:e7:91:
                    46:56:9b:40:3b:70:56:75:8d:be:a8:98:98:90:22:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B6:96:52:B2:B6:0E:61:9F:BA:12:A5:7B:D5:1E:AF:69:36:31:DE
            X509v3 Authority Key Identifier:
                keyid:2A:6F:12:04:12:D8:20:F9:FF:24:CD:05:D5:EC:F4:9E:66:2D:99:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Km8SBBLYIPn_JM0F1ez0nmYtmco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F240B/5B736D92433311E6959A7815C4F9AE02/Km8SBBLYIPn_JM0F1ez0nmYtmco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:94:c1:be:34:19:42:75:af:d8:65:2a:5a:96:ee:b7:c0:9d:
         85:e0:81:dc:15:1e:fa:25:36:e4:c8:ef:7f:4f:59:72:de:16:
         3f:c0:0b:5a:be:2c:e0:35:66:d7:3c:d7:ed:bf:ec:6e:61:02:
         b1:27:8b:b8:69:32:d6:b7:2e:3c:86:88:7c:77:c9:4b:36:17:
         89:c9:f5:7a:c7:d9:27:e7:94:58:23:ac:31:b8:d8:45:3d:91:
         e2:62:d3:6b:94:8a:38:27:8b:44:d6:93:b1:e6:83:7c:b8:0a:
         14:58:e4:a1:ba:3c:cd:65:43:f2:df:30:d1:60:d0:ff:04:1d:
         e5:4a:13:70:04:3f:01:c3:09:ef:4c:6b:a2:8c:f4:ca:e0:0f:
         ff:1e:3f:c5:11:fd:bb:91:63:9b:7f:5b:3b:2c:81:33:e0:c6:
         87:ea:6a:78:60:27:1e:ff:bf:f1:50:27:d8:f7:b0:c8:46:6f:
         30:86:93:14:e5:e4:1f:ab:16:fd:f6:20:8f:3b:b1:9a:4b:fb:
         0e:c4:1a:4a:c6:b3:eb:b1:e7:68:b5:40:28:6b:24:79:78:2a:
         a7:0e:6c:2e:45:7c:e5:b5:62:7b:ca:26:09:92:40:75:68:1b:
         a9:62:a1:f0:e9:1a:22:f4:2b:75:1e:e3:84:6b:f7:f2:21:91:
         8b:fc:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:32:25 2026 by rpki-client