Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
File:                     kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json)
Hash identifier:          TmlVun8UrFxplvNrYZ+tx02eYTbW+TxAGunpjTIqfok=
Subject key identifier:   B0:42:E3:60:32:CD:46:BB:22:C0:95:BC:DC:15:CA:C5:96:AC:42:68
Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
Certificate issuer:       /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Certificate serial:       0ADE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
Manifest number:          0AD4
Signing time:             Fri 12 Jun 2026 19:26:50 +0000
Manifest this update:     Fri 12 Jun 2026 19:26:49 +0000
Manifest next update:     Fri 19 Jun 2026 19:26:49 +0000
Files and hashes:         1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: j23BRKVR7aQuDirYzFN9WLuminBHzqF4NJR6U6IoNpU=)
                          2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: gSKNogEshZnmN/3zaUCV8zHvFUQUbigi4NIpUM9EKFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
                          rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2782 (0xade)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
        Validity
            Not Before: Jun 12 19:26:49 2026 GMT
            Not After : Jun 19 19:26:49 2026 GMT
        Subject: CN=6a2c5d79-1f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:58:91:02:91:de:6a:45:75:ae:53:36:18:
                    3b:0b:10:40:26:88:36:93:33:0b:22:cf:10:33:b5:
                    00:81:ec:d7:d4:47:df:ca:18:83:94:f9:59:c8:03:
                    83:e8:a0:17:53:4f:4b:2d:32:b5:76:70:b1:93:57:
                    df:61:9d:fe:b0:64:ef:11:aa:9e:a2:f7:76:9a:9b:
                    a9:ce:fc:e7:f2:32:3e:1b:41:e7:16:5e:ed:47:73:
                    29:7d:49:34:bf:f2:a6:de:a7:7a:a9:de:79:cc:2d:
                    33:04:ab:5c:1a:5b:71:85:fe:58:97:32:43:fe:fe:
                    12:c4:66:6e:f8:be:b7:69:66:4e:14:95:c5:22:cc:
                    b7:22:97:e6:f3:f7:e9:43:ee:b3:9c:e3:48:60:df:
                    a7:76:06:87:6d:92:b6:95:e1:67:82:e0:03:9a:00:
                    6f:b2:d6:2b:14:f7:8f:14:09:46:bc:d6:d0:6b:ca:
                    d9:e7:bf:2a:61:d6:6f:ef:c2:60:dd:7d:23:9e:7d:
                    16:24:c7:54:31:25:5f:1d:a8:e5:2b:e2:47:da:2e:
                    b8:17:d1:fb:4c:04:4c:61:d9:4f:e0:9c:79:1b:81:
                    4e:90:a5:10:f6:79:5e:ed:93:54:ff:10:d1:91:9f:
                    0d:2a:2b:8b:5e:a7:51:59:55:60:6f:51:0d:6e:de:
                    e7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:42:E3:60:32:CD:46:BB:22:C0:95:BC:DC:15:CA:C5:96:AC:42:68
            X509v3 Authority Key Identifier:
                keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:7a:e2:4e:50:91:81:82:db:2c:94:fa:38:38:9a:ea:bb:2f:
         0f:33:58:76:b8:ad:3c:bb:d7:d3:38:92:1c:ae:bd:05:51:c2:
         40:9d:3a:5d:f1:89:1d:84:fe:2d:f4:c0:c0:20:c6:c5:b8:da:
         6e:15:5a:e2:78:d5:e4:33:84:df:9d:f3:5a:80:56:0d:47:da:
         73:bc:33:9e:ca:b6:36:9d:e5:d4:e1:47:7e:43:bf:34:3a:14:
         e6:3a:8c:88:0a:ec:4d:4e:b8:3f:c3:1f:a2:2c:02:9e:27:c3:
         e7:a5:96:1b:f1:2d:bf:6a:c0:07:57:5e:25:62:c8:9d:cd:6f:
         0d:91:95:3c:83:17:47:28:8f:71:65:1a:15:e0:e3:1e:1c:0d:
         35:0e:f6:fa:51:ab:fa:76:e7:c8:15:90:af:d0:40:4b:0c:30:
         14:b0:86:28:a3:1d:e5:e7:f7:f0:f6:51:ce:a8:83:62:0b:c3:
         f0:87:7d:c8:8e:a9:d9:cc:d3:eb:2c:2e:70:28:f0:f7:1f:8e:
         07:de:11:f5:d0:a9:e0:f1:09:1f:bb:f4:12:63:54:ff:d7:ad:
         81:75:08:75:9b:4a:17:26:6a:48:02:4e:d5:67:f7:27:c3:1a:
         7f:fb:e3:3e:98:c0:b7:18:d1:65:62:1a:90:31:2c:5f:e8:36:
         70:9d:9a:da
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E3QTYxMTAvBgNVBAUTKDkwN0IwMzhBREVDN0MzRkE5QzY0OTMwRTY0MTlCMkZC
QkFCOUM4MUMwHhcNMjYwNjEyMTkyNjQ5WhcNMjYwNjE5MTkyNjQ5WjAYMRYwFAYD
VQQDEw02YTJjNWQ3OS0xZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAud5YkQKR3mpFda5TNhg7CxBAJog2kzMLIs8QM7UAgezX1EffyhiDlPlZyAOD
6KAXU09LLTK1dnCxk1ffYZ3+sGTvEaqeovd2mpupzvzn8jI+G0HnFl7tR3MpfUk0
v/Km3qd6qd55zC0zBKtcGltxhf5YlzJD/v4SxGZu+L63aWZOFJXFIsy3Ipfm8/fp
Q+6znONIYN+ndgaHbZK2leFnguADmgBvstYrFPePFAlGvNbQa8rZ578qYdZv78Jg
3X0jnn0WJMdUMSVfHajlK+JH2i64F9H7TARMYdlP4Jx5G4FOkKUQ9nle7ZNU/xDR
kZ8NKiuLXqdRWVVgb1ENbt7nhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLBC42Ay
zUa7IsCVvNwVysWWrEJoMB8GA1UdIwQYMBaAFJB7A4rex8P6nGSTDmQZsvu6ucgc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80REI5NDQzQTcz
QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdfcWNaSk1PWkJteS03cTV5
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tIc0RpdDdId19xY1pKTU9aQm15LTdxNXlCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTdBNi80REI5NDQzQTczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdf
cWNaSk1PWkJteS03cTV5QncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqnriTlCRgYLbLJT6ODia6rsvDzNYdritPLvX0ziSHK69BVHCQJ06XfGJHYT+
LfTAwCDGxbjabhVa4njV5DOE353zWoBWDUfac7wznsq2Np3l1OFHfkO/NDoU5jqM
iArsTU64P8MfoiwCnifD56WWG/Etv2rAB1deJWLInc1vDZGVPIMXRyiPcWUaFeDj
HhwNNQ72+lGr+nbnyBWQr9BASwwwFLCGKKMd5ef38PZRzqiDYgvD8Id9yI6p2czT
6ywucCjw9x+OB94R9dCp4PEJH7v0EmNU/9etgXUIdZtKFyZqSAJO1Wf3J8Maf/vj
PpjAtxjRZWIakDEsX+g2cJ2a2g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:56 2026 by rpki-client