Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
File:                     _KtbpyYSYFeOSNmqwBIRqzpaIwk.mft (raw, json)
Hash identifier:          S1sow0fgIhA7tjYrDJIYoxGA00Vhg5gH4EjDUOA5S4Q=
Subject key identifier:   4B:C0:88:5A:35:7C:3C:83:C2:BA:6B:C1:7A:E2:E6:66:D5:BA:F4:F0
Authority key identifier: FC:AB:5B:A7:26:12:60:57:8E:48:D9:AA:C0:12:11:AB:3A:5A:23:09
Certificate issuer:       /CN=A9186214/serialNumber=FCAB5BA7261260578E48D9AAC01211AB3A5A2309
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
Manifest number:          1D
Signing time:             Fri 12 Jun 2026 15:32:40 +0000
Manifest this update:     Fri 12 Jun 2026 15:32:40 +0000
Manifest next update:     Fri 19 Jun 2026 15:32:40 +0000
Files and hashes:         1: _KtbpyYSYFeOSNmqwBIRqzpaIwk.crl (hash: ZfwCsDuq5y2ZADY0K3RGobGjzFKBXVOzMH3qdEZvDyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=FCAB5BA7261260578E48D9AAC01211AB3A5A2309
        Validity
            Not Before: Jun 12 15:32:40 2026 GMT
            Not After : Jun 19 15:32:40 2026 GMT
        Subject: CN=6a2c2698-698e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:09:ee:34:cc:0d:ac:a2:8c:34:cb:5d:ec:
                    a3:22:53:98:6f:83:28:e8:1a:74:c0:a7:c9:30:05:
                    cf:f5:6a:0e:3a:6a:65:60:e1:2e:00:7b:9f:d7:a7:
                    f8:a0:d9:7a:b2:47:32:35:35:6a:4e:70:21:87:45:
                    4d:24:a2:88:f2:43:52:7c:a2:5a:49:0f:eb:76:c6:
                    83:29:51:e9:9b:f5:f5:96:9d:e4:0a:46:8c:ae:f5:
                    74:b7:10:da:fa:bb:b0:2c:c3:c9:ca:fa:4d:52:5a:
                    5a:41:8a:e4:f1:cf:03:2f:42:9e:71:91:08:2e:1e:
                    f3:6b:c0:9a:48:fb:aa:f4:0d:9f:f4:e2:5d:7f:41:
                    b8:e3:62:85:c8:55:73:f8:18:16:b8:fa:f2:f7:a2:
                    ab:81:30:4f:9f:93:fb:ce:be:9e:04:c2:16:71:50:
                    02:f5:ba:7d:20:59:83:7a:14:4e:f3:76:b8:b8:ef:
                    71:e7:50:1a:96:91:16:19:c5:94:7b:03:69:a8:30:
                    e7:ab:54:61:ac:0e:64:9f:21:9f:f8:17:aa:14:6f:
                    22:7a:8f:0b:d6:74:88:5c:9b:d6:4d:da:6e:4b:82:
                    86:6a:83:f3:7c:90:99:fc:ed:b2:20:f1:a1:c7:5c:
                    75:51:a5:d4:3d:8b:9c:da:1c:77:8b:9f:79:87:14:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C0:88:5A:35:7C:3C:83:C2:BA:6B:C1:7A:E2:E6:66:D5:BA:F4:F0
            X509v3 Authority Key Identifier:
                keyid:FC:AB:5B:A7:26:12:60:57:8E:48:D9:AA:C0:12:11:AB:3A:5A:23:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/_KtbpyYSYFeOSNmqwBIRqzpaIwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/0D9CE5F244AA11F1AA4D012E99EE528E/_KtbpyYSYFeOSNmqwBIRqzpaIwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:89:19:3e:68:ee:be:e1:98:20:bc:b1:1b:96:c8:46:6c:ce:
         e0:f3:f8:5a:43:80:cf:a0:69:c8:e0:d6:1e:db:58:19:5d:27:
         a1:3c:7a:4d:66:c0:e1:26:2a:70:8f:bd:54:3d:37:07:8d:89:
         2c:4b:e1:c8:b9:ee:10:d8:76:70:3c:d2:2d:f6:62:1f:78:29:
         64:c8:96:0d:1f:1f:f3:6a:97:67:b0:ca:97:0a:76:0e:e6:cc:
         80:59:6c:d7:a5:8b:5e:5b:a3:12:15:93:9a:b5:db:4a:73:47:
         aa:09:a3:17:5a:de:ae:c6:62:b8:c7:2f:33:1f:73:69:c0:2a:
         c5:41:21:0e:45:3f:80:6d:8a:4c:de:db:f2:ba:29:f2:75:c7:
         a4:ab:69:e3:59:84:d6:64:46:85:0e:20:2e:6d:f5:29:7b:e2:
         75:e2:a7:5f:94:02:14:1a:3d:ad:5f:03:e4:f2:90:26:2a:e5:
         e5:59:3d:dd:86:15:59:68:db:f9:a0:0c:46:93:cb:79:8d:e2:
         d6:4b:a0:37:c5:bb:27:f1:7b:74:4c:ab:01:35:cd:55:b7:f1:
         6e:ce:51:ae:6d:3f:ca:76:65:18:f8:26:55:03:23:66:14:01:
         b7:05:83:23:62:0d:c3:bd:86:b0:57:fa:3d:0e:ea:60:e5:bd:
         10:47:c7:b4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NjIxNDExMC8GA1UEBRMoRkNBQjVCQTcyNjEyNjA1NzhFNDhEOUFBQzAxMjExQUIz
QTVBMjMwOTAeFw0yNjA2MTIxNTMyNDBaFw0yNjA2MTkxNTMyNDBaMBgxFjAUBgNV
BAMTDTZhMmMyNjk4LTY5OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/bAnuNMwNrKKMNMtd7KMiU5hvgyjoGnTAp8kwBc/1ag46amVg4S4Ae5/Xp/ig
2XqyRzI1NWpOcCGHRU0koojyQ1J8olpJD+t2xoMpUemb9fWWneQKRoyu9XS3ENr6
u7Asw8nK+k1SWlpBiuTxzwMvQp5xkQguHvNrwJpI+6r0DZ/04l1/QbjjYoXIVXP4
GBa4+vL3oquBME+fk/vOvp4EwhZxUAL1un0gWYN6FE7zdri473HnUBqWkRYZxZR7
A2moMOerVGGsDmSfIZ/4F6oUbyJ6jwvWdIhcm9ZN2m5LgoZqg/N8kJn87bIg8aHH
XHVRpdQ9i5zaHHeLn3mHFPV1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUS8CIWjV8
PIPCumvBeuLmZtW69PAwHwYDVR0jBBgwFoAU/KtbpyYSYFeOSNmqwBIRqzpaIwkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MjE0LzBEOUNFNUYyNDRB
QTExRjFBQTREMDEyRTk5RUU1MjhFL19LdGJweVlTWUZlT1NObXF3QklScXpwYUl3
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG
RDFGRjIvX0t0YnB5WVNZRmVPU05tcXdCSVJxenBhSXdrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2
MjE0LzBEOUNFNUYyNDRBQTExRjFBQTREMDEyRTk5RUU1MjhFL19LdGJweVlTWUZl
T1NObXF3QklScXpwYUl3ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCbiRk+aO6+4ZggvLEblshGbM7g8/haQ4DPoGnI4NYe21gZXSehPHpNZsDhJipw
j71UPTcHjYksS+HIue4Q2HZwPNIt9mIfeClkyJYNHx/zapdnsMqXCnYO5syAWWzX
pYteW6MSFZOatdtKc0eqCaMXWt6uxmK4xy8zH3NpwCrFQSEORT+AbYpM3tvyuiny
dcekq2njWYTWZEaFDiAubfUpe+J14qdflAIUGj2tXwPk8pAmKuXlWT3dhhVZaNv5
oAxGk8t5jeLWS6A3xbsn8Xt0TKsBNc1Vt/FuzlGubT/KdmUY+CZVAyNmFAG3BYMj
Yg3DvYawV/o9Dupg5b0QR8e0
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:24 2026 by rpki-client