Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
File:                     Klm5bDClX71h0iMDc864nR2wGos.mft (raw, json)
Hash identifier:          OOvqGCiYMog1qbk/eAGc8wo0jY15JlI7pR7/ZIumwio=
Subject key identifier:   82:D3:77:CE:BE:6E:FA:74:3A:A6:FB:AD:61:42:C4:AE:FF:5E:38:FE
Authority key identifier: 2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B
Certificate issuer:       /CN=A91F523F/serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
Manifest number:          ED
Signing time:             Tue 03 Mar 2026 05:59:39 +0000
Manifest this update:     Tue 03 Mar 2026 05:59:38 +0000
Manifest next update:     Tue 10 Mar 2026 05:59:38 +0000
Files and hashes:         1: Klm5bDClX71h0iMDc864nR2wGos.crl (hash: TGqsmiFrelCCr0Yumxwk1HbnSYkFO6wV3KXKCMNIu00=)
                          2: 607B5F6AB05411EF84C8DC74C4F9AE02.roa (hash: FK/DlPDSG9WEqzNFstF7HVEnaAW4fzuMAjNc2Kwb/bg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl
                          rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F523F, serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B
        Validity
            Not Before: Mar  3 05:59:38 2026 GMT
            Not After : Mar 10 05:59:38 2026 GMT
        Subject: CN=69a678ca-3679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:fe:ce:62:41:3c:44:06:be:ec:4f:88:ba:
                    c7:2b:d2:ee:90:75:f9:6b:70:6e:69:08:a3:1d:0e:
                    2f:16:33:e7:1b:99:7c:f3:9d:f3:86:1a:63:70:9f:
                    3b:32:6e:5f:48:09:96:af:40:3d:03:1a:25:42:3c:
                    85:cb:2b:ab:6c:25:63:92:10:d5:88:0c:8e:da:cf:
                    99:d9:b2:89:de:11:e6:36:a3:3d:ba:2e:a4:10:60:
                    a7:6c:95:ba:d4:e0:6b:5d:98:8d:79:ac:f2:a6:c1:
                    7f:e4:4e:67:00:92:b0:f7:cd:2a:b8:10:55:36:61:
                    aa:fa:4f:cd:37:6f:a9:81:90:82:c5:a1:cf:14:6a:
                    13:54:d7:af:02:ad:53:82:f9:9a:93:2b:2b:18:d4:
                    fc:60:dd:10:05:f9:5c:5f:47:2c:ce:80:46:48:4a:
                    b7:4b:15:32:39:cf:51:4c:87:ca:e6:d9:61:0d:19:
                    11:ce:2e:8b:1e:67:11:40:5e:b7:f7:bd:1b:c1:56:
                    ae:93:16:51:35:49:3b:c9:bb:e3:f5:91:72:ab:4f:
                    92:c4:4d:e4:d8:93:ad:00:ed:f0:c4:1e:91:4c:94:
                    76:f0:76:38:aa:e7:28:11:8f:ce:07:41:72:8c:7e:
                    d3:e5:a8:f6:cd:5e:41:ee:4f:ad:c6:74:55:95:1f:
                    2c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D3:77:CE:BE:6E:FA:74:3A:A6:FB:AD:61:42:C4:AE:FF:5E:38:FE
            X509v3 Authority Key Identifier:
                keyid:2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:18:ff:5d:d1:40:2a:88:b9:b9:f3:6f:e1:56:6c:cd:9b:4b:
         0b:c8:6e:18:ba:3c:15:32:03:08:12:85:41:f5:c6:6c:b4:4d:
         ad:52:5f:32:c7:43:17:d8:63:87:07:94:a0:a8:0f:31:33:f0:
         4f:01:c0:ec:0d:e0:43:68:df:59:d7:48:b3:7b:a6:8e:17:e2:
         d7:13:07:7d:fb:d1:a9:d5:f0:85:51:66:d6:13:83:13:19:92:
         ae:ad:c9:f0:4a:b4:ce:bc:23:24:c0:b4:46:38:42:91:cd:eb:
         84:22:ff:4d:ac:fd:b1:59:c7:e5:7f:ec:ef:ad:9b:4f:95:fb:
         c8:8c:8c:40:d5:7f:80:51:86:58:1f:22:8b:12:fa:37:c8:e6:
         64:8a:89:fa:38:3b:bf:a1:5b:b8:d4:db:b1:4e:14:d1:88:d7:
         f0:1f:b6:17:bd:d7:47:06:a9:5a:a2:ff:b2:02:36:76:95:24:
         0d:f7:b1:5e:68:aa:09:4b:c1:3e:7c:d1:a6:8e:ba:95:17:be:
         7e:e9:b8:62:5d:7d:21:d1:26:4d:c3:9e:5f:7d:40:1d:e5:b4:
         1a:c8:dd:43:d2:e5:fc:20:ee:cc:41:2f:ed:cf:87:39:1a:97:
         01:df:31:7a:3a:0a:3f:ae:61:95:99:85:d9:d4:50:86:b4:cb:
         6e:03:9e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:22:23 2026 by rpki-client