Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
File:                     kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json)
Hash identifier:          JXDh3BGTzSTNoonSVu+2XQVHVN3/zsKmvq7CdsXMUA8=
Subject key identifier:   BE:E6:F4:4E:63:F2:6D:47:E4:65:3A:7D:0B:F9:B6:D1:4E:B5:55:4A
Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5
Certificate issuer:       /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
Certificate serial:       0525
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
Manifest number:          051D
Signing time:             Fri 12 Jun 2026 23:37:38 +0000
Manifest this update:     Fri 12 Jun 2026 23:37:37 +0000
Manifest next update:     Fri 19 Jun 2026 23:37:37 +0000
Files and hashes:         1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: 15SGec0xYxI41J2hgAn4Dl7VBdNgyXWiZDuKIdASBew=)
                          2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: wtcSk6Y7w0YC/tgX92PUFuNkS6TBVa+Kp56LZMlD0kQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl
                          rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:37:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
        Validity
            Not Before: Jun 12 23:37:37 2026 GMT
            Not After : Jun 19 23:37:37 2026 GMT
        Subject: CN=6a2c9842-7dee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:36:4d:c2:61:8e:0f:a7:99:2b:11:b6:29:25:
                    fa:bd:91:68:7d:af:5c:dd:a3:7c:6b:59:9b:a6:e5:
                    b3:00:cd:18:03:4c:24:c6:4e:5d:78:ab:57:b5:49:
                    00:ac:9b:95:91:63:c2:bd:1a:1e:79:59:b6:df:85:
                    8a:81:3d:8a:15:25:d9:6c:b1:5c:cf:63:ef:67:44:
                    88:8d:4d:c8:c4:dd:8e:72:84:bc:97:12:b4:e2:06:
                    6f:4a:c1:b3:24:3a:ef:4f:54:fc:ba:4c:f1:fb:c1:
                    a8:81:c0:90:0b:61:a1:ec:4c:a7:dd:cd:f7:f7:48:
                    a9:c6:8b:21:15:a6:6a:2c:95:76:c7:e3:ae:c1:55:
                    87:b8:a5:da:82:8d:bc:e9:e9:47:6e:9a:b9:94:76:
                    82:32:b0:ac:c9:3a:5f:c3:73:97:e2:b9:e0:2c:6b:
                    1b:20:95:f5:4e:0d:76:9a:8f:ef:b6:8e:85:64:fc:
                    f0:76:b5:3f:e3:d0:a5:6d:7c:53:43:63:39:de:11:
                    d2:c2:bd:4a:83:a8:c3:0b:ae:ec:70:fd:84:57:62:
                    e1:95:0d:44:ba:cc:d4:b2:0c:79:ff:74:fd:e2:fc:
                    7c:11:9e:09:1f:45:90:b9:3b:4b:0c:0f:04:1a:b4:
                    8a:6b:c5:96:d3:61:c5:d0:b6:a7:50:f0:26:50:1f:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E6:F4:4E:63:F2:6D:47:E4:65:3A:7D:0B:F9:B6:D1:4E:B5:55:4A
            X509v3 Authority Key Identifier:
                keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:62:6a:a9:4f:67:1c:f0:19:c2:cb:ee:56:8f:d2:b5:0a:79:
         4c:d3:ed:99:68:49:d1:08:3d:d4:fb:29:aa:91:d9:71:c8:49:
         bf:21:4f:a1:a0:29:df:de:b7:cc:45:aa:da:53:7e:cd:13:ec:
         18:7e:82:72:cd:bf:b6:b8:3e:b6:97:c1:52:fd:5d:e1:f9:af:
         eb:a1:90:92:78:54:dd:12:50:ab:ca:6b:66:b3:b5:c8:44:1b:
         fc:48:c8:c7:c1:6b:88:2b:3e:cd:70:17:87:15:d8:8b:c9:4a:
         4f:48:08:d7:64:a1:51:70:1a:bf:9c:d1:cd:e7:7f:88:c7:2e:
         0d:6c:c4:43:1b:c9:cb:48:ea:b2:1c:d5:d1:e7:d2:07:f1:1e:
         04:2a:bf:84:0a:85:bd:f5:d6:ac:23:7f:fd:ac:94:0f:74:b2:
         c9:83:3b:cc:bc:13:a1:1a:ed:50:cf:cc:a0:95:97:ea:b1:8b:
         57:de:49:07:52:02:99:f5:61:89:8f:2b:77:6d:c9:bf:68:11:
         a4:23:1b:2a:23:15:04:15:89:5b:5e:c9:ba:67:2d:97:89:17:
         07:aa:80:91:27:c8:a0:47:2f:d7:ec:bc:9f:43:67:ab:33:85:
         53:16:a0:5d:ec:1d:61:85:fe:fa:88:7e:86:60:c7:76:0a:3a:
         f3:3d:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:38:51 2026 by rpki-client