Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
File:                     KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json)
Hash identifier:          Lq5vVbBBi47n1V5fpIXN58vbnFwL/xCMlMAHuS81+D4=
Subject key identifier:   F9:94:32:78:B7:33:FC:BA:08:C7:F8:5A:CD:E6:F6:24:10:2A:B1:C3
Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1
Certificate issuer:       /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
Manifest number:          DA
Signing time:             Sat 13 Jun 2026 06:43:12 +0000
Manifest this update:     Sat 13 Jun 2026 06:43:12 +0000
Manifest next update:     Sat 20 Jun 2026 06:43:12 +0000
Files and hashes:         1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: Ads0J8+iWaZc03KSLSh95SNtBQ93pllt0TywHDCDlzA=)
                          2: C028C06E18E211F081A75558C4F9AE02.roa (hash: zKW/ra+nJQMWUbM8Pae8IdbHSNQ3IifmscVyx7k0qbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl
                          rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
        Validity
            Not Before: Jun 13 06:43:12 2026 GMT
            Not After : Jun 20 06:43:12 2026 GMT
        Subject: CN=6a2cfc00-32af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:56:11:28:16:3b:0b:08:ec:5d:d6:5a:d7:b9:
                    76:af:a7:96:92:84:f0:2e:d0:8f:95:bc:9e:c0:22:
                    04:22:89:8b:d1:89:69:a6:38:6b:ab:eb:bc:59:b4:
                    87:0d:e8:b8:23:6b:65:f6:8c:96:d1:3a:b1:3f:e1:
                    64:bc:b7:bc:98:d7:4d:03:20:ff:ff:9a:4b:c5:07:
                    df:47:64:0a:c5:34:c2:91:8c:79:fc:ad:20:fc:05:
                    c2:03:86:7d:aa:84:6c:a2:30:a9:6d:bf:9f:24:fe:
                    96:43:ff:90:a9:a5:97:b2:80:0e:39:74:e9:85:6a:
                    2d:07:3e:d7:39:dd:2a:d7:33:07:2b:7c:c9:ad:cb:
                    dc:5a:3d:7c:ef:df:0a:0a:c1:d8:22:82:df:f1:b6:
                    46:00:31:18:ab:16:cf:e6:3d:15:b9:ed:12:bf:80:
                    5d:e7:09:af:87:3f:31:af:d7:e0:ad:7e:41:26:b2:
                    86:48:77:4c:14:45:8d:b3:c4:fa:92:cb:bc:32:bc:
                    59:22:a3:35:7b:3f:c7:a2:83:f7:74:6f:b9:c5:f4:
                    03:87:02:89:03:e1:c0:6e:17:5d:27:68:ff:ff:47:
                    b6:f5:17:91:1c:fb:d2:83:20:8c:4f:86:37:20:1f:
                    3a:16:3c:a5:4d:31:e9:c8:5a:fc:59:a6:31:fd:e9:
                    2a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:94:32:78:B7:33:FC:BA:08:C7:F8:5A:CD:E6:F6:24:10:2A:B1:C3
            X509v3 Authority Key Identifier:
                keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:47:46:11:56:56:e9:75:63:73:27:32:8f:d2:da:d1:04:07:
         65:5c:82:d1:8b:76:d9:96:fd:60:37:04:4b:94:da:c5:34:5b:
         46:72:2f:11:3c:db:c7:71:69:c9:27:27:d4:30:4c:5b:de:bc:
         d6:0f:ef:9a:97:25:c7:59:f3:11:42:27:5e:2d:1e:8f:f9:83:
         cf:78:69:be:65:f6:65:74:2e:32:28:9a:8e:a2:95:e6:c0:e2:
         b4:ff:2b:9d:5b:e4:5e:79:e5:b4:ed:68:69:26:35:4a:3d:dc:
         9a:2f:6d:2c:b9:d7:c2:cf:35:51:74:91:93:a6:9d:ae:34:c7:
         f8:01:68:e7:ef:b2:a4:c6:d7:2e:59:c8:e1:8c:13:b7:a4:61:
         3a:e8:55:66:b3:21:3c:f9:05:3c:ae:4b:60:43:2e:76:63:c0:
         4a:04:12:b6:98:9f:8a:2d:55:36:67:ce:15:29:4b:ee:9a:da:
         78:82:36:99:66:cb:23:5b:2b:11:bb:75:ae:af:49:29:0e:f5:
         f0:cb:2d:13:a0:73:f5:77:f5:f5:da:ef:b6:cd:dd:ee:71:fb:
         0d:b3:58:9b:14:6e:71:8a:bc:e0:82:9d:0a:7e:f2:05:b8:3e:
         e8:d7:b9:f3:61:d3:61:3f:44:d9:72:2d:bb:b9:84:fd:65:40:
         2f:e4:84:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:54:42 2026 by rpki-client