Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
File:                     kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft (raw, json)
Hash identifier:          zfN9RPbP0otaoEocF5heelF3BV/AvIxDcCPutS4315k=
Subject key identifier:   5E:88:4F:4C:89:FD:7A:6A:DA:DB:49:1F:5D:9D:22:A0:88:88:26:08
Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE
Certificate issuer:       /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
Manifest number:          0173
Signing time:             Sat 13 Jun 2026 04:43:08 +0000
Manifest this update:     Sat 13 Jun 2026 04:43:07 +0000
Manifest next update:     Sat 20 Jun 2026 04:43:07 +0000
Files and hashes:         1: kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl (hash: 5LR9hhov/Ncg+7EcI1vjvbii/S+yd5wmPQe7sjhdY8Y=)
                          2: 671EAC66343D11EFB36ED310C4F9AE02.roa (hash: 0mQHZNKSu/fOdeBAKFYNxdU/VQzOEWz87PHkDUFkGGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl
                          rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
        Validity
            Not Before: Jun 13 04:43:07 2026 GMT
            Not After : Jun 20 04:43:07 2026 GMT
        Subject: CN=6a2cdfdb-e7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:3e:01:03:85:ca:6d:ff:98:22:62:fc:0a:
                    13:dc:c8:f7:dd:b5:6d:80:d1:88:c4:37:11:36:74:
                    37:30:d0:8f:ca:0b:b7:89:aa:ff:0c:e7:1c:be:d1:
                    01:f4:5f:d6:62:d5:79:3c:33:01:d0:74:00:6d:50:
                    92:bc:d1:1d:4c:48:52:4e:c7:9a:7b:ca:21:ac:96:
                    25:e5:d4:a7:1e:2d:68:7f:00:bd:ba:ad:99:be:84:
                    6f:6a:16:ee:c5:95:a8:bf:4e:60:95:b5:bc:c5:f3:
                    56:02:83:c7:e6:6d:66:72:d4:3f:83:2a:7f:7e:d2:
                    5c:48:e9:a9:8d:69:10:c8:12:89:43:00:e6:25:17:
                    2d:60:11:66:8c:e0:f8:11:8c:a4:08:e2:7f:2c:27:
                    2d:a5:60:24:df:6e:ae:53:45:67:6d:ef:0e:ed:27:
                    d1:8f:38:d2:da:9e:9d:97:a4:07:db:ae:06:de:d0:
                    b8:a1:bb:27:e4:bc:b7:db:63:00:0c:ee:2d:4d:f2:
                    dd:f9:0e:47:7f:fa:62:13:13:21:03:18:4e:5d:fe:
                    7d:e1:e7:17:89:dd:18:51:dc:5c:2c:0e:32:dc:0b:
                    7b:8d:ab:d6:36:fa:f4:6f:8b:b8:61:ba:36:a2:23:
                    f3:54:b6:ec:74:78:d1:8e:ce:eb:ea:9b:c8:35:da:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:88:4F:4C:89:FD:7A:6A:DA:DB:49:1F:5D:9D:22:A0:88:88:26:08
            X509v3 Authority Key Identifier:
                keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1f:f6:dc:51:71:7e:76:11:3e:ce:e9:cc:84:7b:87:a1:4a:
         98:e2:99:94:cf:3b:69:24:3a:3b:92:ba:ad:26:c1:1b:90:2e:
         b7:eb:84:00:9b:fd:99:19:42:d2:c2:b3:fa:e5:74:19:2e:eb:
         a2:8d:5d:26:08:b1:f6:37:df:44:63:3b:59:77:ee:73:9d:1a:
         0a:b8:ae:d6:ef:c8:88:fa:3b:12:5c:be:47:7a:ea:34:95:cd:
         a0:b2:82:36:fa:dc:48:0e:bc:46:64:8a:33:38:c1:61:b1:28:
         38:e4:7e:bf:21:2e:4a:21:4a:da:0b:18:7d:c7:e4:99:b9:93:
         0e:5d:55:6e:b5:88:28:7a:f9:c0:de:50:6d:5a:63:c3:53:2a:
         02:35:90:05:66:65:e4:98:c0:61:98:b9:71:a2:fd:a0:17:32:
         b4:39:ee:29:ef:e8:6e:ea:9f:9f:26:16:95:48:1a:df:9c:ff:
         17:ec:0e:49:4c:20:c1:8a:fc:22:11:bd:13:b3:77:18:5d:ec:
         eb:c7:24:cf:fe:ae:0f:4f:a7:55:a9:cc:b6:a2:cb:c6:26:16:
         99:4c:d5:17:51:55:3a:56:75:55:0e:d4:31:04:4a:81:45:58:
         74:97:ab:79:0f:47:fa:04:97:fb:57:b7:06:b2:e9:49:fd:3c:
         f7:6a:38:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:49:33 2026 by rpki-client