Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
File:                     3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json)
Hash identifier:          GQKQApcCQLrB8WKBsN6ePX2SDB444kKjJbNLpxk8y+E=
Subject key identifier:   04:69:CC:81:12:6D:BE:32:92:42:0C:5C:F3:75:22:49:AC:B9:D3:D2
Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
Certificate issuer:       /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Certificate serial:       01A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
Manifest number:          0198
Signing time:             Sat 13 Jun 2026 04:18:12 +0000
Manifest this update:     Sat 13 Jun 2026 04:18:12 +0000
Manifest next update:     Sat 20 Jun 2026 04:18:12 +0000
Files and hashes:         1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: sIaONeLn1H0ccKDkeM/qfyml97IU+GADMe/lhqNjJlw=)
                          2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: 6f62DrCIqXQzH0Me6UWUB3Obo/TfW+7iKkRiIr7raYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl
                          rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
        Validity
            Not Before: Jun 13 04:18:12 2026 GMT
            Not After : Jun 20 04:18:12 2026 GMT
        Subject: CN=6a2cda04-27cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:52:4e:b5:cf:d9:62:de:f1:a8:de:81:e0:
                    55:4a:fe:e4:01:cf:3e:10:a2:1e:81:84:be:ab:23:
                    58:07:0e:75:e0:d7:93:39:42:2b:c9:16:55:dc:16:
                    0f:d3:86:dd:43:9d:66:6d:bd:37:0f:43:4c:a3:87:
                    aa:4a:a6:36:c9:2b:20:7f:cd:f2:cb:64:35:f5:d8:
                    9f:09:7b:9c:53:7a:aa:62:f1:c9:c0:6d:de:2e:f6:
                    a5:8e:68:ba:81:0c:a0:31:87:06:1b:b0:76:f8:2a:
                    87:31:64:b0:6e:53:19:b6:c8:25:a2:e7:56:44:89:
                    b6:f1:d0:1a:6b:d8:55:3f:5e:cd:03:d3:a2:86:4a:
                    7c:14:33:e9:9a:7d:59:e7:6f:ab:c7:13:15:62:e0:
                    cd:cf:aa:14:9c:c1:a7:72:64:47:8d:78:54:26:0c:
                    74:c2:a0:96:c6:0a:e5:a1:a4:e6:50:1a:1c:3b:48:
                    7c:4d:b2:c9:1f:ce:7f:58:94:13:ac:d2:56:54:b1:
                    6b:c1:ec:df:3b:d7:ab:bd:5e:53:47:ee:e1:3d:41:
                    0f:b3:7b:63:0b:25:0e:d4:9f:06:b8:55:2c:ac:bb:
                    43:8e:8f:dc:64:3e:0c:b2:01:db:f0:36:a0:4f:8d:
                    b3:8c:78:05:5f:37:13:2a:0c:9b:72:2d:29:24:64:
                    98:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:69:CC:81:12:6D:BE:32:92:42:0C:5C:F3:75:22:49:AC:B9:D3:D2
            X509v3 Authority Key Identifier:
                keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5e:61:52:59:ce:8f:e1:f0:f4:8e:ed:4d:c7:97:93:80:37:
         3a:f8:76:21:be:e9:33:57:73:9b:6b:fb:f3:4c:8d:3f:a8:fd:
         59:84:92:ac:6a:aa:6d:2d:62:1a:b5:36:4f:91:88:d5:c8:d9:
         7e:63:f8:7e:fa:a8:6d:f2:4c:9f:5a:48:8b:d7:8a:6b:eb:b5:
         20:0e:80:c7:72:a5:20:81:33:af:76:f9:6c:b7:e6:d9:d5:56:
         c6:f9:c9:85:98:a9:15:12:a1:4c:71:93:96:b8:e2:53:6d:2e:
         84:bb:8c:a1:67:f6:bd:e7:9d:f1:d8:9f:b8:5d:67:bd:ca:8d:
         28:f6:df:51:67:8a:bc:f2:42:de:63:8b:50:8d:39:37:c7:4a:
         81:06:aa:d5:c5:99:f5:47:11:52:f9:09:68:93:81:8e:19:13:
         bb:0a:82:ba:2c:4d:b0:3c:d9:a2:9a:98:58:4b:e0:16:15:91:
         f4:50:f7:c1:02:9e:0a:3d:40:44:ef:ca:88:18:a5:be:79:c4:
         34:cc:dd:1f:e5:28:39:e2:81:c8:d3:52:98:2e:a9:b6:f2:16:
         2f:3a:87:3e:39:20:e1:35:35:ca:92:d8:c9:00:00:19:e9:7f:
         12:36:98:73:6b:84:be:cb:99:d3:30:3c:e3:07:19:fe:35:52:
         19:06:25:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:08 2026 by rpki-client