Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
File:                     KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json)
Hash identifier:          ykeWmuW6lkGJIuJ30ngRve6F5G48yDxaYSEaTpO/CP4=
Subject key identifier:   C1:2A:3C:FC:35:8A:F0:CB:C6:82:9A:84:2B:B8:2C:90:B8:26:DE:40
Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D
Certificate issuer:       /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
Certificate serial:       0BDA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
Manifest number:          0BCF
Signing time:             Fri 12 Jun 2026 19:01:27 +0000
Manifest this update:     Fri 12 Jun 2026 19:01:26 +0000
Manifest next update:     Fri 19 Jun 2026 19:01:26 +0000
Files and hashes:         1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: v/qiXuxenQhfDqUkqQG1P0ZREQBJgWkTfXPbxbR5AFE=)
                          2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: HUSLKFky67fxy4K/r8HyQudWgBuSg6q+GxzLOv9Syp4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl
                          rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3034 (0xbda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D
        Validity
            Not Before: Jun 12 19:01:26 2026 GMT
            Not After : Jun 19 19:01:26 2026 GMT
        Subject: CN=6a2c5786-2e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:1f:96:61:99:38:a6:cf:e2:c0:ca:ed:89:
                    b5:25:a1:57:be:08:0d:61:c4:b9:0b:d2:70:d9:85:
                    41:f6:6a:35:32:8e:fc:00:c2:cb:44:cc:9c:4e:57:
                    51:3b:49:99:44:ec:e8:40:1a:41:0a:10:09:e5:a3:
                    5f:5d:ed:99:9e:81:74:fb:d0:81:92:89:b7:a1:39:
                    f9:56:19:5a:e0:52:8b:41:46:2a:c2:28:c9:33:15:
                    bb:8c:d4:02:04:0b:07:85:10:49:0e:8c:af:c8:2c:
                    99:12:0b:07:65:b9:fa:58:0d:16:1e:63:96:c6:6e:
                    8a:55:43:e1:4e:e3:fd:90:bc:5c:2a:ac:37:39:bc:
                    00:17:78:52:8c:03:e5:d4:90:0e:19:c8:d3:62:8c:
                    17:29:55:15:17:92:67:76:10:a5:af:c8:6d:05:64:
                    a4:6c:1e:39:e3:e3:44:0a:d7:ed:ed:1d:6a:4b:f4:
                    c4:36:4a:1c:54:41:91:b3:30:2c:e0:37:5a:24:15:
                    db:6e:28:21:33:40:6d:51:6b:8b:43:24:bc:7d:74:
                    e6:9c:50:0d:d2:92:66:cd:26:3f:18:25:9f:8b:cd:
                    03:c8:18:bb:e5:a6:a0:7a:a9:f3:ed:b1:b1:31:b3:
                    9e:61:ca:9a:4a:6c:ee:25:7b:82:96:41:d7:46:6e:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2A:3C:FC:35:8A:F0:CB:C6:82:9A:84:2B:B8:2C:90:B8:26:DE:40
            X509v3 Authority Key Identifier:
                keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:8d:32:a5:f5:85:82:29:91:9a:61:79:b1:8d:11:82:c6:5c:
         f0:bf:81:1c:24:e4:e3:0a:1c:ab:a8:22:9c:dd:6b:c2:32:0b:
         45:f5:eb:67:51:c2:cc:44:e2:b0:72:75:57:8b:d2:91:6e:15:
         c1:12:01:b6:0e:89:c7:96:80:da:da:ab:bd:50:e4:6e:7d:98:
         d0:e0:52:ea:ef:18:2e:d5:19:a5:e9:71:c7:16:a5:e8:9e:d0:
         1c:62:86:77:45:a1:fc:d8:bb:71:fe:2c:53:36:c9:ee:21:87:
         36:b2:29:98:62:0b:13:c0:71:0a:57:cd:bb:c2:aa:7a:81:51:
         ee:0d:f2:ce:63:8d:a9:68:7e:9c:0e:99:f0:b3:af:4a:af:1c:
         c5:84:50:69:f9:80:d5:fa:e8:b0:53:74:d1:2d:a1:45:72:4f:
         ff:82:6b:12:ca:f6:cc:62:6a:73:5c:4c:ab:b7:6c:1c:a6:ff:
         49:3c:4b:f3:46:79:df:b0:d7:79:c1:be:67:3d:1d:1d:b9:78:
         63:a3:8b:1f:b6:c3:91:59:3f:e5:6a:76:24:fc:38:e3:2e:bd:
         06:7c:fa:05:3e:19:8b:52:e8:dc:0b:20:9e:20:da:8e:8d:4b:
         fb:d7:89:bc:0e:f8:46:40:a3:53:2b:ab:ef:93:8a:cf:e6:ca:
         95:96:9f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:15:42 2026 by rpki-client