Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
File:                     KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft (raw, json)
Hash identifier:          dpN9d9FbvZmKyURFXL/dv352FYocMNMbyhrCrd9IvnE=
Subject key identifier:   1F:4E:50:F9:00:D2:F7:8D:74:19:3B:09:6A:27:BC:93:AA:02:C2:25
Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38
Certificate issuer:       /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
Manifest number:          017A
Signing time:             Sat 13 Jun 2026 04:36:04 +0000
Manifest this update:     Sat 13 Jun 2026 04:36:04 +0000
Manifest next update:     Sat 20 Jun 2026 04:36:04 +0000
Files and hashes:         1: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl (hash: 6iG+XT7ez20cgOAmMCuh4p4k9ssyfUiDqczB0PcAL3A=)
                          2: 4394064223D511EF9AB13E4FC4F9AE02.roa (hash: m9PVqT0U37yXO4ZBkmsSwAW86j+V8m+FgHiO1R6bfj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl
                          rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
        Validity
            Not Before: Jun 13 04:36:04 2026 GMT
            Not After : Jun 20 04:36:04 2026 GMT
        Subject: CN=6a2cde34-bebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:ae:00:c3:77:2e:ad:09:2e:7e:e0:58:3b:
                    9e:10:16:ac:e0:01:cf:f5:f8:0d:ec:ba:33:fd:3a:
                    0d:0d:b4:fa:7b:c4:d2:ed:33:c0:39:cb:38:9a:ff:
                    35:80:81:95:15:dc:98:a2:67:1b:76:ff:ed:e0:01:
                    94:25:bb:0b:c0:5b:99:4c:b4:b7:a8:0c:71:92:91:
                    06:cd:36:16:52:e2:4b:b6:33:da:6a:c8:fa:9d:ce:
                    64:90:22:26:8b:0c:d2:7f:05:aa:21:dc:22:8d:cd:
                    bd:22:91:8c:4f:12:a2:76:8f:4b:6f:81:e6:a9:2f:
                    eb:7e:d7:0c:b1:d3:2e:a1:9e:1a:ef:d3:26:f1:89:
                    98:46:74:44:63:88:ab:51:60:a7:11:32:c2:56:5d:
                    a4:b6:91:79:d5:56:6f:83:fb:7b:48:66:df:d8:52:
                    23:0f:11:aa:71:96:6f:53:88:a5:24:b0:0f:a2:52:
                    6d:ff:e8:50:81:71:78:9b:fb:74:1a:d6:78:27:17:
                    2d:d0:2d:96:3c:be:8e:10:be:8a:f7:2a:56:62:34:
                    e5:a4:eb:30:ef:b6:ff:e8:bb:6f:72:93:7e:5c:e7:
                    f3:ab:93:84:bb:43:ac:d9:aa:dd:b2:cd:73:57:78:
                    ce:1f:10:55:5f:4e:f9:64:11:73:5b:9c:06:6f:e1:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4E:50:F9:00:D2:F7:8D:74:19:3B:09:6A:27:BC:93:AA:02:C2:25
            X509v3 Authority Key Identifier:
                keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:9c:05:eb:91:15:70:8e:47:f6:ab:1f:35:8b:2b:80:2e:15:
         66:6b:ac:94:5a:8b:2f:91:c7:d0:3d:a6:65:ce:20:01:51:eb:
         a1:b7:fd:c7:f6:31:12:0c:1d:ae:46:fe:09:eb:61:78:38:30:
         d2:0b:8c:8a:ef:d2:67:1c:93:44:42:6c:d0:6b:c1:b3:a3:64:
         30:35:96:56:a2:0b:ed:ed:57:83:9d:2e:60:4e:b6:ac:e3:fe:
         8f:ac:49:51:01:44:44:8f:d1:24:7a:fa:e8:85:14:6c:74:14:
         05:c3:c1:57:6b:98:98:f7:6e:98:75:f6:d0:ee:7b:b5:4e:c1:
         56:9a:dd:18:ca:2c:36:3c:62:ba:de:4a:20:05:9c:cf:d6:44:
         30:6a:55:d6:a8:09:12:62:94:b8:ea:af:82:c6:f3:79:77:5a:
         c5:a4:0c:15:4f:7d:ce:d9:93:e0:0a:97:6c:e0:51:80:93:63:
         61:2a:73:10:de:bb:ca:4f:22:77:a3:80:6a:8d:b4:04:b4:ab:
         87:79:6a:17:bb:ee:09:55:3f:e3:c1:f9:22:50:bf:50:78:d4:
         41:63:ec:77:92:01:25:3b:5f:4a:a5:e9:4e:97:82:fa:ca:65:
         bb:28:c2:aa:79:e1:2a:2b:9e:40:e2:e1:a4:87:50:26:d0:86:
         2b:c9:21:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:06 2026 by rpki-client