Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
File:                     bkWq8A0m8fB31nRzkUTUuMOU87g.mft (raw, json)
Hash identifier:          B3eviQCNnug8/1XYW/8P97IqHiGA2mr+tLtZAigjXX4=
Subject key identifier:   A6:F6:6B:8B:9D:2B:CD:C5:05:F9:00:D8:20:9D:3F:DA:F3:3A:FF:1B
Authority key identifier: 6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8
Certificate issuer:       /CN=A919F0DA/serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
Certificate serial:       24A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
Manifest number:          627E
Signing time:             Fri 12 Jun 2026 14:15:27 +0000
Manifest this update:     Fri 12 Jun 2026 14:15:26 +0000
Manifest next update:     Fri 19 Jun 2026 14:15:26 +0000
Files and hashes:         1: bkWq8A0m8fB31nRzkUTUuMOU87g.crl (hash: kSirz/pmpnR3pNie9vZ1xOTVfw15zDhcudkUSY8oeaM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9378 (0x24a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
        Validity
            Not Before: Jun 12 14:15:26 2026 GMT
            Not After : Jun 19 14:15:26 2026 GMT
        Subject: CN=6a2c147e-8f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:68:52:b8:59:40:1c:c8:63:83:c6:b9:87:
                    ad:e4:9c:c0:ed:62:ed:63:04:62:4c:99:c2:a1:f3:
                    f7:04:20:cc:ec:fc:1c:3d:b1:0f:4c:4e:0e:8e:bc:
                    b5:44:8d:4c:dd:15:ad:4f:9a:2b:6f:ac:f7:99:b9:
                    4d:5b:c1:dd:cb:c3:76:5a:b4:db:d7:d3:ad:30:fd:
                    ec:11:e4:7f:93:8c:19:61:e6:2a:7e:a5:7c:49:12:
                    cc:86:9e:be:37:97:d1:bf:8b:c5:99:55:c8:ae:b6:
                    98:d7:f2:f1:cd:fd:32:6e:98:f2:76:1b:bc:c9:0b:
                    cc:ae:79:01:61:10:b6:6b:8c:7f:84:08:d7:4c:57:
                    2e:eb:34:bf:f2:ff:8b:0c:01:9c:3b:4b:a2:d5:64:
                    15:90:d3:4e:57:bd:de:2d:91:16:68:ce:70:f6:a3:
                    1a:56:2b:ee:bf:f6:3a:af:ab:bd:6a:50:c4:c4:c0:
                    52:38:70:dc:4d:c5:e6:25:ba:91:0a:ca:79:2d:54:
                    8c:7b:dc:86:48:03:fd:f1:eb:b7:62:50:38:94:25:
                    5e:cd:a0:d8:50:83:6e:f1:62:1b:7a:83:f7:23:57:
                    c7:e3:12:12:45:18:99:10:f4:26:ab:42:77:02:ce:
                    a0:2c:49:1f:46:63:20:4b:69:ac:fd:a3:0d:b8:80:
                    48:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F6:6B:8B:9D:2B:CD:C5:05:F9:00:D8:20:9D:3F:DA:F3:3A:FF:1B
            X509v3 Authority Key Identifier:
                keyid:6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a4:fd:98:df:39:7e:ab:a0:84:d2:53:8e:5c:ce:e9:4b:d3:
         1c:3a:e9:bf:03:cf:c9:a6:7b:3b:04:7f:da:c7:07:92:2e:0a:
         57:b2:41:8b:f1:a9:1e:16:94:0a:04:da:a9:70:20:0c:b2:70:
         15:eb:5e:44:42:e1:32:3a:fa:cc:01:4d:58:9c:2a:d5:14:82:
         f9:e2:6f:33:9a:38:10:88:3b:48:2c:31:77:32:6f:dc:70:fe:
         d6:0e:c1:03:61:18:3e:22:49:dd:3c:91:d7:1c:c7:ed:28:8a:
         3c:74:bb:a3:40:d9:eb:ca:a6:17:6e:9e:4c:11:9e:a0:35:e5:
         c6:51:34:af:5e:c6:59:27:25:e3:39:2a:66:bd:78:37:a2:2d:
         30:af:0c:97:8a:50:d1:fa:ce:0d:e9:59:cd:67:78:86:e4:87:
         09:f3:88:ef:d6:a1:91:a3:b8:ee:1f:b3:b7:b6:fa:84:6b:fc:
         28:74:0e:cf:dc:98:51:22:3a:46:d7:d7:9a:c8:78:d2:5f:32:
         f3:7a:8b:e0:fc:80:58:fc:06:b8:5c:f0:11:3c:ef:3d:fe:f5:
         1c:a3:3c:0d:05:77:f0:9e:8e:43:f9:bb:53:c4:94:61:75:62:
         29:a5:38:ab:91:c5:30:54:cd:43:d7:f1:17:f6:71:c7:ed:3c:
         70:27:cc:68
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwREExMTAvBgNVBAUTKDZFNDVBQUYwMEQyNkYxRjA3N0Q2NzQ3MzkxNDRENEI4
QzM5NEYzQjgwHhcNMjYwNjEyMTQxNTI2WhcNMjYwNjE5MTQxNTI2WjAYMRYwFAYD
VQQDEw02YTJjMTQ3ZS04Zjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxNFoUrhZQBzIY4PGuYet5JzA7WLtYwRiTJnCofP3BCDM7PwcPbEPTE4Ojry1
RI1M3RWtT5orb6z3mblNW8Hdy8N2WrTb19OtMP3sEeR/k4wZYeYqfqV8SRLMhp6+
N5fRv4vFmVXIrraY1/Lxzf0ybpjydhu8yQvMrnkBYRC2a4x/hAjXTFcu6zS/8v+L
DAGcO0ui1WQVkNNOV73eLZEWaM5w9qMaVivuv/Y6r6u9alDExMBSOHDcTcXmJbqR
Csp5LVSMe9yGSAP98eu3YlA4lCVezaDYUINu8WIbeoP3I1fH4xISRRiZEPQmq0J3
As6gLEkfRmMgS2ms/aMNuIBIVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKb2a4ud
K83FBfkA2CCdP9rzOv8bMB8GA1UdIwQYMBaAFG5FqvANJvHwd9Z0c5FE1LjDlPO4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS8xNTBEM0VGNDFE
NjgxMUUyOEMxODI4QTQwOEIwMkNEMi9ia1dxOEEwbThmQjMxblJ6a1VUVXVNT1U4
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JrV3E4QTBtOGZCMzFuUnprVVRVdU1PVTg3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjBEQS8xNTBEM0VGNDFENjgxMUUyOEMxODI4QTQwOEIwMkNEMi9ia1dxOEEwbThm
QjMxblJ6a1VUVXVNT1U4N2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsqT9mN85fqughNJTjlzO6UvTHDrpvwPPyaZ7OwR/2scHki4KV7JBi/GpHhaU
CgTaqXAgDLJwFeteRELhMjr6zAFNWJwq1RSC+eJvM5o4EIg7SCwxdzJv3HD+1g7B
A2EYPiJJ3TyR1xzH7SiKPHS7o0DZ68qmF26eTBGeoDXlxlE0r17GWScl4zkqZr14
N6ItMK8Ml4pQ0frODelZzWd4huSHCfOI79ahkaO47h+zt7b6hGv8KHQOz9yYUSI6
RtfXmsh40l8y83qL4PyAWPwGuFzwETzvPf71HKM8DQV38J6OQ/m7U8SUYXViKaU4
q5HFMFTNQ9fxF/Zxx+08cCfMaA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:58:26 2026 by rpki-client