Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File:                     Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier:          lk27wrD5SLqOXdgfE5ko8MvbPreuA0Re/qV6tYvQ91M=
Subject key identifier:   A6:6F:76:1E:73:7B:86:1B:3A:69:1E:1F:B5:37:B9:04:1D:58:57:E7
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer:       /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial:       0CF5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number:          0CED
Signing time:             Fri 12 Jun 2026 18:17:29 +0000
Manifest this update:     Fri 12 Jun 2026 18:17:29 +0000
Manifest next update:     Fri 19 Jun 2026 18:17:29 +0000
Files and hashes:         1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: Xpggml9SL9M3x5+YnjJFGM3A+DavZj3iuYzlv/FVqMQ=)
                          2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: QuCnvPryU+p8dBWWOPW2KrTltF89H58QfoFBQxj01yQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
                          rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3317 (0xcf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
        Validity
            Not Before: Jun 12 18:17:29 2026 GMT
            Not After : Jun 19 18:17:29 2026 GMT
        Subject: CN=6a2c4d39-0f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:4d:e7:a5:03:3c:c8:88:b1:aa:cd:9a:39:
                    94:63:8f:19:8e:0c:1b:e5:54:87:73:a1:f9:a7:27:
                    90:4b:c0:7c:3f:b2:17:fc:e1:bf:03:0a:42:71:d6:
                    77:e6:af:c1:88:45:57:28:29:52:c5:39:76:a7:8b:
                    6b:07:ea:01:40:a2:d6:1c:bd:b6:8b:c5:e4:bd:31:
                    bc:a7:c2:a4:c2:a2:da:93:d0:f7:c8:1c:5c:76:7f:
                    b9:b6:a3:fb:d0:95:60:d4:b7:19:3e:c0:e0:aa:71:
                    8b:9b:53:8d:7a:57:63:0e:f5:59:8e:7d:24:49:89:
                    7d:0e:cf:03:b5:f2:4b:cd:c7:a0:20:e2:55:f1:60:
                    13:0c:59:da:87:f5:4e:29:f0:3f:05:f3:5e:6d:8a:
                    15:e8:eb:14:a5:48:f7:d0:38:4b:35:49:d3:4f:f4:
                    65:96:6e:e8:78:a6:f2:54:c7:93:0b:6d:a6:cf:90:
                    45:57:2a:6e:bc:46:5b:2f:5e:3b:2c:3a:fe:8e:d4:
                    ef:ac:92:70:d1:ed:98:1d:66:5c:d6:75:b7:35:0d:
                    0f:c7:6d:e8:9b:e9:b8:ba:16:f7:58:eb:e0:1f:00:
                    72:1d:37:23:6a:1b:ee:08:c3:64:f8:bc:6f:81:28:
                    0a:78:43:61:eb:5b:63:c4:d9:8b:d9:8c:8f:cb:71:
                    48:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6F:76:1E:73:7B:86:1B:3A:69:1E:1F:B5:37:B9:04:1D:58:57:E7
            X509v3 Authority Key Identifier:
                keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:71:ac:d6:b5:2e:38:93:78:d9:ce:a0:fe:28:b5:0e:af:06:
         51:9a:f4:e0:be:eb:7f:60:f4:6e:47:a5:b5:03:68:9c:a7:aa:
         79:df:c5:00:34:25:fc:50:e5:de:2c:99:92:f1:24:db:8e:3f:
         53:47:fe:a8:41:44:2c:57:36:f4:c6:e9:46:21:6c:5d:76:90:
         9c:b7:24:11:e2:0d:80:87:f6:e1:d9:04:fb:58:ea:97:7c:23:
         5a:a5:c8:9b:d9:f2:46:13:6e:e5:e2:be:25:86:06:a1:da:a5:
         1b:06:d6:3c:ff:c6:89:b7:09:0b:fb:8b:80:8e:1c:13:5d:e8:
         c4:44:d2:24:e3:e2:48:53:ac:ac:fc:b3:94:94:19:a3:3d:73:
         47:d5:37:5f:ec:cd:06:3f:be:0e:c9:f8:c1:f5:3e:dc:fd:49:
         17:4e:0f:bd:e4:c1:8a:ae:a4:70:53:d5:52:df:9e:2b:11:a8:
         5a:e8:6e:d6:c1:ca:6e:6f:1d:65:f9:85:99:94:81:72:b3:ca:
         17:76:06:cf:9d:76:ef:3f:70:8d:8f:07:27:3d:73:1c:4a:7c:
         a7:70:55:24:44:58:1e:de:33:de:04:ec:18:c6:d6:55:7d:f7:
         97:db:9e:f1:fc:e8:45:be:60:30:79:34:95:52:39:ae:eb:66:
         9a:56:e4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:35:22 2026 by rpki-client