Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
File:                     KgHI_pZ5aUR4MewBwCvE6cuaziw.mft (raw, json)
Hash identifier:          gYw7ga0oH1xdY9RKzcBrE8mgazdpbP198/trPnVyLng=
Subject key identifier:   70:F8:36:B6:CB:B4:A0:60:A0:BC:A4:39:6C:94:96:19:D6:3A:00:9A
Authority key identifier: 2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C
Certificate issuer:       /CN=A9158F8D/serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
Manifest number:          0159
Signing time:             Sat 13 Jun 2026 05:07:47 +0000
Manifest this update:     Sat 13 Jun 2026 05:07:46 +0000
Manifest next update:     Sat 20 Jun 2026 05:07:46 +0000
Files and hashes:         1: KgHI_pZ5aUR4MewBwCvE6cuaziw.crl (hash: 4HSrLnB9QHmAjalLYS318TmXvTizE0UYIsB011yf+Dc=)
                          2: B9574A322C1311F0B642882AC4F9AE02.roa (hash: vOf/o1JHkb8wuECkMMHoKSsb6jXZeHUN4IdzhUHE9fc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl
                          rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158F8D, serialNumber=2A01C8FE967969447831EC01C02BC4E9CB9ACE2C
        Validity
            Not Before: Jun 13 05:07:46 2026 GMT
            Not After : Jun 20 05:07:46 2026 GMT
        Subject: CN=6a2ce5a2-4433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a8:9b:9a:23:77:6e:30:cc:b9:b1:1d:27:66:
                    56:75:48:5b:c0:64:4b:b0:ec:ee:af:73:af:2b:64:
                    e3:b3:6e:1e:3e:e0:33:0e:93:0e:fc:b7:b0:6d:d2:
                    28:79:37:99:14:c6:96:76:03:1f:de:e0:b4:a1:29:
                    be:ea:4f:a0:5c:7f:7e:6a:7a:ba:3d:14:38:67:69:
                    54:62:ca:47:ce:c1:55:be:9b:3f:b4:27:44:66:0b:
                    28:36:81:71:08:36:5f:99:50:97:7a:46:be:7d:21:
                    fa:1e:2e:ab:09:ba:2e:ca:5f:25:7c:b8:76:68:b5:
                    9d:ac:cb:f9:95:2e:e3:41:fc:5b:3a:96:8d:d2:d5:
                    37:04:42:1e:e8:84:fd:87:c2:50:e2:20:ed:2a:90:
                    5f:e1:48:f7:51:f0:c5:43:5d:b4:5c:a6:38:03:af:
                    39:b9:c5:98:ad:b3:01:84:4a:84:5b:f0:b9:75:f2:
                    9c:e2:a9:61:34:a4:88:bd:6c:45:17:1f:2b:9a:a6:
                    41:4b:fe:a4:3e:9a:a8:1b:58:8b:15:b4:cf:e9:b2:
                    de:6a:62:07:f9:a9:c4:41:d7:93:22:e4:db:2d:ab:
                    14:21:74:10:d4:8a:26:26:ca:9f:ea:5c:aa:82:96:
                    61:34:18:95:34:6e:bc:c6:9a:ad:bc:00:b9:7d:16:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F8:36:B6:CB:B4:A0:60:A0:BC:A4:39:6C:94:96:19:D6:3A:00:9A
            X509v3 Authority Key Identifier:
                keyid:2A:01:C8:FE:96:79:69:44:78:31:EC:01:C0:2B:C4:E9:CB:9A:CE:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KgHI_pZ5aUR4MewBwCvE6cuaziw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F8D/A179E53C647711EFA82DE93DC4F9AE02/KgHI_pZ5aUR4MewBwCvE6cuaziw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d5:bb:28:fd:d3:62:f7:90:22:b5:f9:00:e3:0f:48:e0:dd:
         c4:5a:d1:71:45:71:5d:f9:4d:ea:bc:40:1a:d2:31:48:09:32:
         74:97:2f:ee:e5:71:89:57:81:ae:b0:72:09:6d:69:c0:39:b4:
         a1:20:71:8d:b0:1e:f6:7d:ce:98:54:a3:4a:22:98:02:76:ac:
         09:12:dd:85:00:ee:c9:bf:07:df:13:f5:e1:75:3a:f0:ab:c4:
         28:a1:c3:4d:65:ef:76:4f:06:0b:d2:98:12:19:49:81:e4:46:
         d0:84:41:d0:0c:01:91:57:7e:b8:53:80:d7:b6:1f:fd:6d:81:
         6b:14:d7:08:13:90:4d:1e:53:58:0f:53:3b:81:ab:7a:90:4f:
         60:ce:84:f2:00:65:26:50:11:7a:e2:df:bb:af:14:c0:62:08:
         f9:bf:8d:63:52:f5:66:dc:5e:b1:da:a4:c0:e0:b5:66:c0:74:
         c0:4f:97:12:b7:28:2f:f9:01:1c:00:f0:f3:36:07:79:9c:e6:
         e6:45:6c:b5:79:47:1b:20:ec:f8:5a:7e:3f:a4:a6:45:77:14:
         25:13:3a:e9:6b:d5:2c:a3:c9:48:47:0c:ec:40:a0:96:a8:59:
         85:86:c2:b9:0b:da:e8:1e:c9:56:e0:83:56:25:2e:fd:c8:5a:
         4e:90:0a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:16:47 2026 by rpki-client