Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
File:                     kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json)
Hash identifier:          kD4UYUpoZ3kIfrT58YJMeHXxWb8plceWZgtoqc80gRA=
Subject key identifier:   B3:46:C9:F2:B3:7C:2E:D3:BF:C9:6B:F0:40:D5:01:C5:8A:3B:B0:49
Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
Certificate issuer:       /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
Manifest number:          F1
Signing time:             Sat 13 Jun 2026 06:30:00 +0000
Manifest this update:     Sat 13 Jun 2026 06:29:59 +0000
Manifest next update:     Sat 20 Jun 2026 06:29:59 +0000
Files and hashes:         1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: NUmbatFB63dwYLocQQ9B7RayqaG6TDFehZ+//tcURNY=)
                          2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: pFG5/WCaL+yt9ghGi9neBn3ryCri7CWT6hIptpI2Hyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
                          rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
        Validity
            Not Before: Jun 13 06:29:59 2026 GMT
            Not After : Jun 20 06:29:59 2026 GMT
        Subject: CN=6a2cf8e7-da09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:5e:41:16:c3:24:40:3c:49:37:95:f6:95:
                    50:1b:9b:d2:c8:8c:f9:f1:90:df:2c:90:e4:27:5f:
                    32:2b:7f:96:d4:59:00:39:a1:b4:41:0a:4d:6f:01:
                    79:27:b8:1b:1d:a3:8b:74:e4:91:82:04:d0:8a:92:
                    d5:f3:3b:c4:12:a7:f9:e8:ef:c4:c2:64:1c:2a:40:
                    3d:6d:63:c1:44:82:71:43:c1:b9:b4:e3:b7:0f:b4:
                    d3:19:13:25:f7:7c:e0:d1:a7:fd:68:25:af:52:e3:
                    dc:14:1a:68:01:56:ad:7e:87:15:ad:1c:74:56:0d:
                    33:a2:49:7b:59:fa:c0:7f:65:0b:f3:10:31:0f:06:
                    0e:15:ad:c9:52:50:37:ee:68:f2:6c:01:4a:26:41:
                    4f:19:f5:7a:89:30:bf:6d:b0:53:1d:99:f2:89:34:
                    46:4c:c5:83:f3:e8:5b:c2:02:8f:d6:8a:b8:11:c0:
                    92:b8:d2:cb:67:8e:e8:32:97:3e:33:42:a6:81:d7:
                    bc:c1:08:25:70:e2:b4:12:69:31:3c:19:40:3e:62:
                    b2:04:1b:e3:8b:f6:ba:39:d0:6c:02:0e:a6:0e:fe:
                    7f:17:84:50:c9:d1:d3:f4:0c:08:8d:75:e6:27:b5:
                    14:b6:f0:7a:c4:fe:d1:2b:d4:0f:02:9b:b7:bc:95:
                    94:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:46:C9:F2:B3:7C:2E:D3:BF:C9:6B:F0:40:D5:01:C5:8A:3B:B0:49
            X509v3 Authority Key Identifier:
                keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:dc:97:5c:7c:32:af:1c:7b:68:d3:52:6f:1d:d0:50:38:
         46:21:6b:d9:ef:56:9c:36:6d:4b:72:29:d2:cf:94:71:d2:bd:
         cd:08:76:c3:52:d5:03:eb:72:aa:dd:b6:b0:8d:b6:a4:d5:3a:
         14:46:b8:aa:df:2e:d0:21:97:5b:1a:2e:2a:36:f3:24:a8:ba:
         fd:98:a1:12:d7:c0:e0:9f:99:42:e1:20:a9:2e:4f:a7:63:52:
         70:0f:93:85:09:63:5b:03:16:ae:c7:73:54:2b:c6:11:cd:8d:
         c1:a6:ce:13:50:08:04:8d:2d:68:4b:7f:da:86:a3:05:4f:5c:
         8d:74:ca:4b:fd:c0:9c:1b:96:9a:98:82:40:32:74:64:7e:74:
         42:4a:d7:24:ab:76:72:a6:6b:a4:31:1c:0e:53:30:e4:80:bd:
         10:0c:f8:9f:3a:92:e7:ff:2c:d9:07:e5:77:63:ef:2c:d1:1d:
         80:79:77:ef:e2:dd:12:c5:0f:37:01:17:55:97:9d:b2:a7:57:
         53:d1:9f:bc:91:d5:2d:2f:d0:a2:27:82:88:83:09:8e:b9:90:
         9a:42:5f:54:99:e5:72:04:9e:35:c1:c6:74:56:55:d1:ba:83:
         dc:a6:b6:03:f8:68:a0:6f:06:fc:fe:6d:dc:9e:00:75:91:1b:
         4a:7f:88:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI5NzQxMTAvBgNVBAUTKDkwQjJGMTJCRTdBNTg2NjNCRjE1REM3MTdFN0Q0MEIz
MDI0MUI4RUEwHhcNMjYwNjEzMDYyOTU5WhcNMjYwNjIwMDYyOTU5WjAYMRYwFAYD
VQQDEw02YTJjZjhlNy1kYTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlPleQRbDJEA8STeV9pVQG5vSyIz58ZDfLJDkJ18yK3+W1FkAOaG0QQpNbwF5
J7gbHaOLdOSRggTQipLV8zvEEqf56O/EwmQcKkA9bWPBRIJxQ8G5tOO3D7TTGRMl
93zg0af9aCWvUuPcFBpoAVatfocVrRx0Vg0zokl7WfrAf2UL8xAxDwYOFa3JUlA3
7mjybAFKJkFPGfV6iTC/bbBTHZnyiTRGTMWD8+hbwgKP1oq4EcCSuNLLZ47oMpc+
M0Kmgde8wQglcOK0EmkxPBlAPmKyBBvji/a6OdBsAg6mDv5/F4RQydHT9AwIjXXm
J7UUtvB6xP7RK9QPApu3vJWU4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNGyfKz
fC7Tv8lr8EDVAcWKO7BJMB8GA1UdIwQYMBaAFJCy8SvnpYZjvxXccX59QLMCQbjq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk3NC9FNEU4OTAwRUZC
NjUxMUVGOUJCQUVFNDlDNEY5QUUwMi9rTEx4Sy1lbGhtT19GZHh4Zm4xQXN3SkJ1
T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tMTHhLLWVsaG1PX0ZkeHhmbjFBc3dKQnVPby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Qjk3NC9FNEU4OTAwRUZCNjUxMUVGOUJCQUVFNDlDNEY5QUUwMi9rTEx4Sy1lbGht
T19GZHh4Zm4xQXN3SkJ1T28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhc/cl1x8Mq8ce2jTUm8d0FA4RiFr2e9WnDZtS3Ip0s+UcdK9zQh2w1LVA+ty
qt22sI22pNU6FEa4qt8u0CGXWxouKjbzJKi6/ZihEtfA4J+ZQuEgqS5Pp2NScA+T
hQljWwMWrsdzVCvGEc2NwabOE1AIBI0taEt/2oajBU9cjXTKS/3AnBuWmpiCQDJ0
ZH50QkrXJKt2cqZrpDEcDlMw5IC9EAz4nzqS5/8s2Qfld2PvLNEdgHl37+LdEsUP
NwEXVZedsqdXU9GfvJHVLS/QoieCiIMJjrmQmkJfVJnlcgSeNcHGdFZV0bqD3Ka2
A/hooG8G/P5t3J4AdZEbSn+IFA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:41:35 2026 by rpki-client