Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft
File:                     kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft (raw, json)
Hash identifier:          YTfEr9IVVZSHCxKF4IqyOK1J4KR7zov8AUsBkGemF3U=
Subject key identifier:   21:FD:AB:74:98:80:71:A3:48:28:D8:73:C3:FF:DC:D2:E7:23:52:CB
Authority key identifier: 90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72
Certificate issuer:       /CN=A91248C9/serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft
Manifest number:          01F0
Signing time:             Sat 13 Jun 2026 03:19:00 +0000
Manifest this update:     Sat 13 Jun 2026 03:19:00 +0000
Manifest next update:     Sat 20 Jun 2026 03:19:00 +0000
Files and hashes:         1: kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl (hash: 10TpY7jXIP2rLEfYFmenmjKlYV+OmUe3mk1K2k89or4=)
                          2: 4B3C43EA6EF011EE84DC9B0EC4F9AE02.roa (hash: YTWQLKjMPS+pJcK/98qLOrg1cnW5P2/DgKnTnaoaWiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl
                          rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91248C9, serialNumber=90F680FCA7C930FD1FDC533675385AE90FB41672
        Validity
            Not Before: Jun 13 03:19:00 2026 GMT
            Not After : Jun 20 03:19:00 2026 GMT
        Subject: CN=6a2ccc24-67bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:da:4b:f4:0c:00:1b:03:7f:39:dc:e7:87:25:
                    01:e7:e0:34:72:bd:de:7c:88:41:14:1c:7c:d1:b8:
                    e9:c5:fb:96:77:84:2a:d6:7a:cb:50:8d:c5:7b:a7:
                    17:32:24:e8:f6:3c:9c:52:02:2b:ab:12:13:af:a6:
                    53:81:00:4a:4a:65:87:09:21:5c:a5:e8:66:88:35:
                    50:5e:5a:e3:b7:f8:fb:ec:ca:ce:f9:ad:62:2a:15:
                    98:27:1d:0a:ed:d6:d1:6c:07:31:de:4b:4a:c9:56:
                    f0:76:37:9c:79:9c:64:e1:84:72:4a:df:2d:e0:2e:
                    96:6c:2a:2f:2a:b4:43:bd:1d:95:a8:0c:9b:79:27:
                    21:5f:d8:84:98:bb:1c:73:5f:35:10:66:ae:9d:e4:
                    4b:54:92:1d:12:b0:36:48:6a:07:46:78:3f:55:00:
                    2f:a1:5e:df:d0:e0:e2:51:03:e3:ce:29:d4:b0:e8:
                    19:81:6f:c2:3c:3e:67:49:0e:4c:4e:af:50:4b:8d:
                    39:cb:e3:7f:ad:20:c1:e6:21:c1:75:5b:2d:f7:0e:
                    56:69:58:55:1d:c6:9b:33:28:e7:eb:8b:93:20:92:
                    42:88:8e:01:30:aa:a5:9d:52:41:5b:90:55:21:e0:
                    b9:4d:d1:0f:71:58:44:87:16:11:cd:57:8e:0d:24:
                    7d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FD:AB:74:98:80:71:A3:48:28:D8:73:C3:FF:DC:D2:E7:23:52:CB
            X509v3 Authority Key Identifier:
                keyid:90:F6:80:FC:A7:C9:30:FD:1F:DC:53:36:75:38:5A:E9:0F:B4:16:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kPaA_KfJMP0f3FM2dTha6Q-0FnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91248C9/A055B5B26EED11EEBC1AAB53C4F9AE02/kPaA_KfJMP0f3FM2dTha6Q-0FnI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:01:f7:22:7f:3c:11:9e:97:de:48:a9:db:72:3c:6e:5c:ef:
         d1:19:21:62:3b:1d:ec:ae:1f:f0:fe:42:ab:7b:30:f7:2a:41:
         1d:a7:28:92:27:a7:d3:7a:7b:96:e2:37:27:d3:1e:19:ac:b3:
         aa:cf:be:4a:dd:96:a4:78:f1:55:ed:0f:0c:b0:8c:3a:e0:d0:
         4f:2c:bb:5d:63:c1:0e:50:75:b0:01:c3:2b:72:0f:ad:15:9c:
         95:08:9e:16:1a:7e:81:9b:9e:72:06:53:08:02:6b:2c:c9:a2:
         cb:9c:ff:e8:56:31:58:2a:99:fa:6c:8b:dd:13:cd:2b:04:0b:
         de:5b:08:cf:9b:eb:cc:89:5e:f2:eb:e9:c6:c1:22:37:06:6d:
         1a:1b:fd:8d:12:31:d5:4f:48:5c:ef:3f:19:cb:a9:7a:c7:cd:
         1a:81:89:ac:06:21:70:c1:17:13:39:32:68:71:fa:09:22:ff:
         f1:d9:26:7c:51:5b:90:5f:69:a1:c7:b4:83:e6:71:d4:07:49:
         e9:64:59:e6:6a:da:99:4c:34:b7:3e:1a:c4:69:59:cf:09:f0:
         e5:ad:42:f1:1c:74:22:37:60:8e:ee:63:89:42:0d:9f:05:35:
         b1:d0:74:25:ac:ae:00:c2:58:34:ea:59:0b:a3:ab:0c:ff:f0:
         ba:2d:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:19:13 2026 by rpki-client