Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
File:                     kXcqmmw5cZ-KbmlxY21ITt5DplA.mft (raw, json)
Hash identifier:          WvyW/AeQzFe1xeOhGguvB3oodE5aoI1nm+qHWHUfP/U=
Subject key identifier:   01:97:4C:84:4D:E7:DB:D8:18:8F:DD:8E:3C:24:9F:89:91:E2:88:74
Authority key identifier: 91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50
Certificate issuer:       /CN=A9122C94/serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650
Certificate serial:       06E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
Manifest number:          06DE
Signing time:             Fri 12 Jun 2026 21:06:27 +0000
Manifest this update:     Fri 12 Jun 2026 21:06:27 +0000
Manifest next update:     Fri 19 Jun 2026 21:06:27 +0000
Files and hashes:         1: kXcqmmw5cZ-KbmlxY21ITt5DplA.crl (hash: tVWRTfCnDHCMnV4Herbfh2ggxAH8M2+EIOgSUL4/76E=)
                          2: DFA876BAA1D011EB909F3352C4F9AE02.roa (hash: kx0li/zw87s40T3OezyGkC+0pUIU5Rs0sCA+z6TjHX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl
                          rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768 (0x6e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122C94, serialNumber=91772A9A6C39719F8A6E6971636D484EDE43A650
        Validity
            Not Before: Jun 12 21:06:27 2026 GMT
            Not After : Jun 19 21:06:27 2026 GMT
        Subject: CN=6a2c74d3-b6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:6e:d4:4a:e9:73:cb:71:ac:cf:d6:47:8b:
                    25:03:ec:bc:3f:9b:b3:40:d5:f2:37:ba:a1:b1:63:
                    f0:91:25:bd:4f:3b:37:ee:3d:88:28:58:82:95:9d:
                    cd:e4:97:d6:8c:6e:0d:90:7e:98:1a:6e:a5:6c:74:
                    f6:25:d3:93:c1:14:e3:53:d5:93:11:84:30:6a:65:
                    ee:70:b4:72:77:01:69:3f:e9:2f:f7:d8:88:11:96:
                    d2:4d:bc:04:92:dc:af:d8:35:b5:ec:93:0c:cc:d6:
                    a8:c2:41:5a:3c:ab:48:d7:cd:18:75:2a:76:a5:d0:
                    6d:1d:4f:c8:e8:4a:77:a8:12:e0:37:57:db:02:95:
                    cd:50:de:78:6e:02:39:23:82:d9:69:79:e6:c9:b8:
                    58:ee:02:e8:83:da:40:4f:13:83:77:31:bc:6a:ae:
                    6b:73:cb:4b:b1:b8:50:2c:cb:08:1a:0f:63:1b:c1:
                    35:f0:4b:13:12:27:88:30:1c:8b:c4:6d:28:ce:11:
                    d8:ab:bc:be:60:3a:2f:c5:32:83:5c:93:69:c6:cf:
                    cc:fe:a8:22:47:c6:3c:22:ca:4e:02:8b:e5:46:2b:
                    76:2a:18:f4:8c:57:59:56:b9:e7:77:8a:b0:54:24:
                    e8:e1:0c:83:2c:ba:49:d5:2d:12:62:09:1d:ae:4b:
                    84:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:97:4C:84:4D:E7:DB:D8:18:8F:DD:8E:3C:24:9F:89:91:E2:88:74
            X509v3 Authority Key Identifier:
                keyid:91:77:2A:9A:6C:39:71:9F:8A:6E:69:71:63:6D:48:4E:DE:43:A6:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kXcqmmw5cZ-KbmlxY21ITt5DplA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/6AE202A6A1D011EB92A2DF29C4F9AE02/kXcqmmw5cZ-KbmlxY21ITt5DplA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:11:a3:a7:2c:c0:49:35:c6:dd:27:c4:ff:92:01:cc:f7:ab:
         b7:43:8c:dd:69:b9:0e:28:4a:5a:55:f3:5d:ac:00:a9:9b:5d:
         09:d6:54:e0:53:4d:46:48:68:eb:43:7d:62:7d:62:e9:5f:4c:
         70:ee:1e:9f:76:50:ad:59:0f:e9:09:6b:a9:a7:cb:b4:c3:9b:
         33:d9:6c:f6:f0:9c:99:5c:b3:d2:cf:3a:3d:28:a3:b0:7a:fe:
         5f:34:1d:39:40:e6:95:51:29:f2:93:43:4c:e8:09:2b:b8:f5:
         b8:4e:0f:12:65:3c:f2:ac:15:09:39:ce:ef:7c:df:ef:cc:43:
         17:46:b6:ff:d3:41:6a:31:2d:04:a7:27:1f:1c:12:c1:b6:2b:
         a6:b1:56:c5:88:29:40:f6:55:67:91:b8:9d:17:db:f9:5f:e3:
         83:0e:03:26:dc:de:e7:08:3a:03:4c:b1:44:33:bb:37:80:94:
         f6:2e:13:c6:cd:93:27:7f:ec:cb:f8:db:42:3c:e6:68:fa:54:
         2f:7b:86:6d:38:cb:95:d0:a4:d7:1e:87:7b:9c:25:71:89:4e:
         ae:7c:da:fe:cc:12:c9:83:47:30:86:38:f4:24:d5:75:d5:14:
         c7:d5:70:90:46:4d:7f:32:ed:ee:9f:5a:ca:74:c4:de:e7:a5:
         45:6c:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:16:51 2026 by rpki-client