Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft
File:                     KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json)
Hash identifier:          2q64YTcFdibfa62owsaRTy1PTDhehU7td4jfl16OYdI=
Subject key identifier:   17:2C:DB:A0:EC:07:5A:0C:8C:8E:BF:C7:75:34:2D:CC:41:77:C8:FF
Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58
Certificate issuer:       /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758
Certificate serial:       1B2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft
Manifest number:          1B09
Signing time:             Fri 12 Jun 2026 16:16:44 +0000
Manifest this update:     Fri 12 Jun 2026 16:16:43 +0000
Manifest next update:     Fri 19 Jun 2026 16:16:43 +0000
Files and hashes:         1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: +COuZJG5zTSc04r0rXNpLxQg64d+fHBO/3i3ntlb/+4=)
                          2: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: y1WBN7gHbpcQFgS5AiIM5+b+xvlqJCl6oOkurOSohSs=)
                          3: 442A935E2F1F11F0A35F5757C4F9AE02.roa (hash: Kuw7O4GbqUm/LsdHrCx6y55gHQykPcsm3zG17OVPWXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl
                          rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6959 (0x1b2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758
        Validity
            Not Before: Jun 12 16:16:43 2026 GMT
            Not After : Jun 19 16:16:43 2026 GMT
        Subject: CN=6a2c30ec-b64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e6:f3:d2:1d:40:32:8e:47:af:1d:7f:3d:7b:
                    c8:80:5a:fa:54:b5:09:dd:a3:11:31:49:85:4c:a3:
                    56:4d:97:65:c9:e2:a2:ab:d5:7c:72:e7:a1:b6:1a:
                    89:41:ee:00:65:a1:7e:22:9f:d9:6e:13:62:da:7a:
                    60:c9:c4:5e:92:07:ec:41:b7:77:0a:f1:e1:35:a0:
                    18:43:8a:a1:f0:58:b6:91:7c:05:65:64:7a:d2:c9:
                    e2:75:02:b5:e8:8b:23:93:3e:f9:2a:8f:56:dc:e5:
                    af:32:20:c0:49:58:a9:85:48:88:ca:e6:41:26:d3:
                    a8:d2:34:64:c4:1b:3d:4c:9e:13:b6:96:0d:d8:35:
                    34:6f:62:36:aa:71:3d:aa:f1:2c:aa:6a:26:44:21:
                    14:25:e7:13:6f:6c:65:5d:26:6a:0d:bd:05:71:1f:
                    4a:87:95:db:62:9f:23:96:c4:a4:10:89:19:31:9e:
                    fd:94:43:9e:d9:38:0f:24:e4:8e:04:3a:c7:d4:8d:
                    98:65:3a:da:73:10:5f:c9:5d:54:26:29:e9:72:b3:
                    9b:6e:75:62:9f:6e:e0:94:6e:6a:1b:56:b8:ef:00:
                    24:4e:c0:7e:df:0e:fb:9c:12:ba:f5:2e:5c:4c:cd:
                    cf:81:5c:8d:63:13:0a:6f:c4:a9:d8:c1:52:4a:c4:
                    0d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2C:DB:A0:EC:07:5A:0C:8C:8E:BF:C7:75:34:2D:CC:41:77:C8:FF
            X509v3 Authority Key Identifier:
                keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:83:59:84:76:3b:1e:d0:8b:db:e3:55:26:46:d6:f7:03:9a:
         a5:26:ab:4d:1d:1d:d2:a7:a9:23:2b:9a:38:5f:98:da:40:1a:
         79:f2:03:a2:c8:f5:40:95:be:f3:cb:cf:58:a6:4f:26:54:c5:
         8b:b9:fa:37:2e:6a:5c:b2:14:48:a0:ce:e7:83:74:05:7d:9d:
         88:ae:25:50:1f:38:55:01:7d:92:cd:7c:e7:07:5a:72:d0:95:
         54:1d:ee:6b:9d:cf:b5:07:23:8a:fe:68:3a:4d:38:19:eb:5a:
         85:2f:4f:5b:dc:e6:82:14:39:5e:95:9a:5c:62:23:0f:da:fe:
         84:e2:d0:45:d8:75:11:2e:d9:7c:97:d7:0f:ef:92:43:e6:c8:
         d3:f0:72:56:a3:91:0a:4f:e7:43:aa:e3:55:a4:db:3a:f7:67:
         0f:14:27:cf:45:4c:b6:34:fd:d9:f3:c8:a4:cc:98:1a:92:07:
         20:aa:68:20:2b:23:9c:a3:95:fc:85:d7:53:39:26:a3:b1:b0:
         47:39:ea:4c:2e:69:3e:8f:fe:1d:a9:ef:83:7b:13:81:70:2a:
         b5:7f:b5:46:0c:c1:9a:dc:97:d1:a3:7e:13:bc:34:bc:cc:6d:
         28:13:e3:0f:3b:b6:fd:cb:cd:a7:aa:d6:59:4e:4d:94:42:1d:
         14:75:1b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:39 2026 by rpki-client