Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft
File:                     kzxM1thDXA-L4vUjRybWYQ9-2jo.mft (raw, json)
Hash identifier:          gbTa1HPSClHkxxLbc1snV55UKVeWNiDkX/sFD2hFVWw=
Subject key identifier:   81:16:2C:53:CE:B9:BC:AC:D8:F8:CF:0B:24:1B:14:69:75:B7:27:A1
Authority key identifier: 93:3C:4C:D6:D8:43:5C:0F:8B:E2:F5:23:47:26:D6:61:0F:7E:DA:3A
Certificate issuer:       /CN=A918D0DE/serialNumber=933C4CD6D8435C0F8BE2F5234726D6610F7EDA3A
Certificate serial:       0CD2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft
Manifest number:          0CC1
Signing time:             Fri 12 Jun 2026 18:30:43 +0000
Manifest this update:     Fri 12 Jun 2026 18:30:43 +0000
Manifest next update:     Fri 19 Jun 2026 18:30:43 +0000
Files and hashes:         1: kzxM1thDXA-L4vUjRybWYQ9-2jo.crl (hash: +35aqaKpA8A0Zdj1evDHldwWjLIVY9GkOfd+Av0auT0=)
                          2: 38FFAC50884411EDA212BC24C4F9AE02.roa (hash: 8Kzq8ge3wSUVu+VYpnFOyTT3NcPx0P4ByioHfNwqHSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.crl
                          rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3282 (0xcd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D0DE, serialNumber=933C4CD6D8435C0F8BE2F5234726D6610F7EDA3A
        Validity
            Not Before: Jun 12 18:30:43 2026 GMT
            Not After : Jun 19 18:30:43 2026 GMT
        Subject: CN=6a2c5053-888d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ac:fd:f0:f1:12:4d:69:5d:9f:55:3e:a3:47:
                    7a:45:7d:69:0a:f7:94:c9:71:c5:ea:2e:2c:e5:fe:
                    86:27:e5:ad:11:78:19:f7:06:0a:a9:23:1d:1e:89:
                    ae:c1:8f:d8:19:05:da:41:ad:9f:66:cc:2b:83:c7:
                    c2:a0:9f:44:e7:d6:e5:c9:cd:a3:40:73:ca:06:71:
                    2b:85:2e:61:b8:77:c5:f5:a8:e5:a4:3c:76:95:ec:
                    bd:d7:07:7c:d5:5e:c1:cb:bb:fa:ff:b2:d2:09:ae:
                    12:0b:bb:59:85:43:44:25:f3:35:46:fd:7e:01:87:
                    17:41:5e:ce:44:62:d2:48:4c:e6:25:26:08:da:3f:
                    ab:74:96:04:6d:d2:2c:ae:e2:f0:b4:5d:32:ab:26:
                    03:31:6c:75:5c:7b:94:65:8f:0d:35:91:ea:c5:8d:
                    24:5d:77:5a:c7:99:ed:b1:d2:03:fa:b3:d3:9b:dc:
                    60:73:a1:95:dc:38:f4:27:30:fb:7c:78:71:a2:ce:
                    ed:92:ff:b2:dd:cc:f4:b4:66:8b:75:9e:dc:d8:bc:
                    7c:c8:0c:1f:fc:10:ad:9e:5c:9e:b1:cd:db:f8:f2:
                    17:6d:ad:3c:b7:28:20:78:c8:63:20:d9:06:8e:3d:
                    2a:8e:9a:f1:92:d9:8f:70:5f:c0:c0:b9:c5:5e:67:
                    8c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:16:2C:53:CE:B9:BC:AC:D8:F8:CF:0B:24:1B:14:69:75:B7:27:A1
            X509v3 Authority Key Identifier:
                keyid:93:3C:4C:D6:D8:43:5C:0F:8B:E2:F5:23:47:26:D6:61:0F:7E:DA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzxM1thDXA-L4vUjRybWYQ9-2jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0DE/DA45D430152511EA80DBF009C4F9AE02/kzxM1thDXA-L4vUjRybWYQ9-2jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:94:0f:a1:67:6a:f9:1f:b1:f2:bf:ea:c1:0b:94:ec:5b:2f:
         79:62:7b:9a:95:4f:eb:8a:bc:9a:4c:00:99:c2:8d:5d:ac:a7:
         af:5d:da:44:d6:ed:a4:b9:66:e9:1f:10:53:90:a2:58:65:4f:
         98:98:64:8b:8c:49:bd:14:d5:ff:24:9b:72:d9:23:0f:6d:bd:
         91:5c:b1:ad:30:6c:4a:bc:e8:cb:9d:8e:26:a7:40:bf:92:11:
         f1:90:94:a0:53:c3:71:42:92:5f:2b:f5:31:93:34:e3:39:a5:
         ea:89:68:8b:6d:13:3e:0f:91:ac:fa:aa:7e:65:b1:33:5d:21:
         4c:45:5f:27:2d:e7:21:b4:ad:06:7b:08:68:59:aa:d0:48:5a:
         d5:0d:78:43:8e:2e:0a:22:02:cb:51:0a:ee:be:c6:3a:ef:87:
         60:ed:07:f0:5e:06:b5:ad:82:f7:0b:70:20:6b:50:ee:c4:44:
         81:73:57:83:2f:c0:b1:63:f0:5e:2b:80:64:f3:66:79:6b:17:
         63:4c:5f:61:8f:35:5d:ab:ff:30:88:28:3f:38:b5:89:96:a0:
         a1:fa:97:36:28:4d:57:4f:4c:b2:83:4d:fe:5e:0c:b3:0a:df:
         f1:f3:af:93:a0:2b:3b:c4:aa:06:08:a1:d1:4c:73:b2:8f:b8:
         14:58:c6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:31:01 2026 by rpki-client