Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft
File:                     k-Wm1UXgDFaegN4yLrINV1d1BXU.mft (raw, json)
Hash identifier:          teK5vjRI3euy0wETtgXLGQCPbY4SRUqU0VYk7gw1Muw=
Subject key identifier:   C9:91:78:E7:21:3F:01:4E:CD:3D:1B:F4:75:27:85:BF:F1:D3:6A:BA
Authority key identifier: 93:E5:A6:D5:45:E0:0C:56:9E:80:DE:32:2E:B2:0D:57:57:75:05:75
Certificate issuer:       /CN=A9171A47/serialNumber=93E5A6D545E00C569E80DE322EB20D5757750575
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft
Manifest number:          8B
Signing time:             Sat 13 Jun 2026 07:40:12 +0000
Manifest this update:     Sat 13 Jun 2026 07:40:11 +0000
Manifest next update:     Sat 20 Jun 2026 07:40:11 +0000
Files and hashes:         1: k-Wm1UXgDFaegN4yLrINV1d1BXU.crl (hash: KMHnsHtqIoDeDmDGfqkwQNY7c0pzimWKKpMh4CLiaec=)
                          2: 1805E4389DE011F0B44FDA76C4F9AE02.roa (hash: xUw+Uv9TI74Dhb2CGJETI5/wwvPlX2t3PbWQpNbjfhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.crl
                          rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171A47, serialNumber=93E5A6D545E00C569E80DE322EB20D5757750575
        Validity
            Not Before: Jun 13 07:40:11 2026 GMT
            Not After : Jun 20 07:40:11 2026 GMT
        Subject: CN=6a2d095b-0cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:a3:28:9f:be:ae:07:8e:29:b3:37:5b:79:
                    a3:0a:21:3a:0e:8b:d5:00:5c:61:1b:60:79:3c:70:
                    59:69:2c:b3:e7:7f:24:43:09:0e:1f:90:02:93:19:
                    51:37:8f:91:3d:d4:a6:5b:e9:71:aa:74:99:1d:a1:
                    69:98:71:30:fb:d6:1b:ff:86:17:18:25:53:45:9e:
                    a6:d1:ee:e8:75:de:1e:77:30:cf:03:9b:97:dc:c4:
                    61:8b:40:6a:4a:6a:39:14:aa:2c:57:b4:13:8d:a0:
                    ed:d3:61:16:8e:17:9c:fc:03:ed:1f:0a:8c:e8:ad:
                    2c:cb:55:bb:8a:bf:cb:7f:83:5e:f8:b5:e0:24:cb:
                    3f:85:62:92:20:c1:8e:b2:80:51:65:7a:5c:c4:b6:
                    19:ce:1c:93:2f:ce:8a:a2:9e:65:be:3a:85:df:67:
                    cd:5c:e9:fe:34:f8:89:b2:6f:2a:80:86:4d:e2:6d:
                    d4:b4:00:00:63:24:c8:12:4b:22:b6:ed:61:69:a3:
                    cf:55:33:97:18:05:c4:f3:45:93:8e:7d:99:0b:a0:
                    c3:78:f1:0e:f9:8c:b8:d1:dc:14:47:fb:6f:10:01:
                    20:05:4c:f3:63:41:43:a3:67:a2:7c:70:b4:a1:9f:
                    ca:e8:78:07:07:21:38:c0:e2:06:0a:3f:2b:52:e8:
                    03:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:91:78:E7:21:3F:01:4E:CD:3D:1B:F4:75:27:85:BF:F1:D3:6A:BA
            X509v3 Authority Key Identifier:
                keyid:93:E5:A6:D5:45:E0:0C:56:9E:80:DE:32:2E:B2:0D:57:57:75:05:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2e:df:bb:84:9d:4e:db:4a:f2:1a:02:a2:d0:ec:05:34:04:
         c1:aa:c0:69:51:1d:a8:5e:09:50:40:65:1f:f8:73:82:cf:d0:
         ee:c3:5c:ab:12:74:97:4f:3b:75:79:0f:58:94:1e:ad:8c:75:
         90:a8:51:f1:7e:53:14:e1:bf:01:d7:f7:dd:b9:4e:55:9c:42:
         a1:da:d0:9c:23:2d:04:7b:11:76:79:76:c7:ae:1b:53:23:3d:
         f4:fb:8b:7c:2a:7c:3e:61:96:ec:8a:86:d8:60:85:29:2e:08:
         e6:f8:a7:68:d2:96:46:65:d2:f6:d9:5d:a4:14:a5:0b:50:8b:
         3b:12:3f:86:1e:99:56:da:d4:1a:1b:c2:a2:f4:1e:40:e2:29:
         bf:62:19:69:e8:b4:59:fd:b2:70:06:83:0f:d6:88:c7:f5:d2:
         5e:2a:00:a8:1c:37:c7:75:b5:8a:ac:5e:39:af:1e:f3:d2:3a:
         e3:0a:06:ff:8e:37:b9:bb:f7:d7:07:0f:d5:e6:7a:27:0e:57:
         a9:11:a1:5b:cd:94:95:96:b2:a5:ee:a3:12:69:bd:1b:f8:40:
         16:d3:81:b1:a3:b0:4d:91:c4:fa:de:fe:da:2d:1b:c8:c3:b3:
         f0:b8:c8:ef:c7:2a:f8:95:18:18:53:c4:6d:47:50:2b:37:19:
         25:72:e6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:14:02 2026 by rpki-client