Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
File:                     KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft (raw, json)
Hash identifier:          QUfDlcHCy3rqQ40/0rQMk7weQeJC1qY1rgVrMUDewGQ=
Subject key identifier:   45:B0:91:9A:3C:B6:6B:58:D8:09:F6:67:3A:38:40:E6:CA:03:0C:4E
Authority key identifier: 2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
Certificate issuer:       /CN=A911F536/serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
Manifest number:          010F
Signing time:             Sat 13 Jun 2026 06:03:33 +0000
Manifest this update:     Sat 13 Jun 2026 06:03:32 +0000
Manifest next update:     Sat 20 Jun 2026 06:03:32 +0000
Files and hashes:         1: KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl (hash: klTG+kxXBsG3Oz1WvZVMUjlEG/1Nl3CO1x9uv1dkOmU=)
                          2: F51AC6A6C99A11EFB5D4B020C4F9AE02.roa (hash: yevu27JexQC1pFGY5em0jam11butIck0VftNXiMexLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
                          rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F536, serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
        Validity
            Not Before: Jun 13 06:03:32 2026 GMT
            Not After : Jun 20 06:03:32 2026 GMT
        Subject: CN=6a2cf2b5-660f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:86:7b:22:47:3e:b4:e7:1e:32:cf:56:92:3a:
                    45:60:bd:6b:8c:a1:d3:23:cc:c2:9e:2c:95:98:41:
                    c0:c1:b5:b8:bc:e9:c5:e0:a1:03:fa:76:76:88:84:
                    81:8a:28:0f:07:21:b1:e2:da:b4:f5:c3:b3:3d:09:
                    47:d5:cf:58:18:b9:af:38:f5:df:11:70:51:03:3e:
                    a2:bf:dd:31:ae:01:8b:b4:a0:67:58:3e:4d:1b:bc:
                    d4:8f:08:a0:47:2f:88:6d:ba:82:e6:24:b6:7c:ae:
                    81:e5:62:0c:0d:bb:38:d3:36:2b:be:28:5a:19:7d:
                    de:1e:a4:a0:7e:5b:bf:0d:4d:ee:ec:0d:5a:ba:7b:
                    a4:68:cf:5d:3d:e5:ac:27:07:02:08:70:b7:66:c3:
                    a1:c1:d2:87:23:9f:70:10:67:5d:97:a1:64:82:91:
                    4d:b9:22:0d:23:22:aa:e7:7d:cd:f9:cf:35:8f:a4:
                    50:5c:21:1d:18:02:2e:93:61:53:27:a4:ec:4c:a2:
                    19:42:09:c5:cb:6c:c9:23:4c:9c:bf:b6:fd:38:80:
                    26:b7:0a:9e:ed:d3:e0:fc:39:83:4d:5e:1e:71:c1:
                    ae:9d:12:c7:3c:60:6a:0e:9a:fe:3d:ab:7c:12:97:
                    9b:16:6d:7b:fe:71:d8:d9:57:35:20:76:60:15:91:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B0:91:9A:3C:B6:6B:58:D8:09:F6:67:3A:38:40:E6:CA:03:0C:4E
            X509v3 Authority Key Identifier:
                keyid:2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f8:6f:0b:28:ae:cf:00:e4:6c:55:72:cf:5d:d9:eb:1c:62:
         ec:76:4b:54:2b:07:76:40:d3:67:4d:5f:a1:a8:bd:2a:fb:b1:
         88:92:d9:3d:f4:3c:e0:9a:07:eb:01:d8:56:97:ef:57:d8:db:
         e3:3c:68:6e:90:10:7c:9e:83:20:d0:ce:61:4a:db:ed:f5:16:
         6a:57:64:b1:85:12:a2:91:36:94:18:26:c3:8c:a6:2a:fe:24:
         0c:39:3e:41:86:6c:6f:e8:e4:22:ad:e2:51:33:3e:fe:50:0e:
         58:f9:05:5c:87:1f:1c:9f:8b:f2:dd:9d:39:73:d1:51:35:f2:
         65:7d:19:82:00:7e:f7:75:58:69:d6:0a:45:6c:20:53:6a:5b:
         24:44:b4:12:84:ac:71:dc:f9:af:6c:f9:99:a9:20:7d:5d:7b:
         58:b5:07:71:08:54:aa:8a:a8:4a:d5:92:ad:18:0c:66:be:0b:
         af:05:0a:b9:b8:90:ac:ac:72:b1:2a:ba:8e:e6:84:75:7b:68:
         b9:2f:95:5e:29:2f:b5:7e:8c:74:6c:aa:5d:b0:db:0c:b8:a5:
         72:96:df:a8:10:d2:9a:a4:cb:c3:77:36:1c:86:6c:c5:eb:6e:
         4f:2c:67:6b:ca:6e:94:51:f9:e4:ba:0e:1e:86:47:1f:50:bb:
         8e:e9:4f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:16:53 2026 by rpki-client