Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
File:                     kIDbUP8LdD_6MredDdXDGQIdbiQ.mft (raw, json)
Hash identifier:          OAtzG7r+emeYvTD5sLHRPzFyiKz9fvKDcW1SCMWuxlE=
Subject key identifier:   7B:CF:4D:AA:DD:83:06:99:7B:E1:F8:F2:65:3F:C1:39:2B:91:33:C8
Authority key identifier: 90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24
Certificate issuer:       /CN=A91B5377/serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
Manifest number:          010C
Signing time:             Sat 13 Jun 2026 06:06:01 +0000
Manifest this update:     Sat 13 Jun 2026 06:06:01 +0000
Manifest next update:     Sat 20 Jun 2026 06:06:01 +0000
Files and hashes:         1: kIDbUP8LdD_6MredDdXDGQIdbiQ.crl (hash: 1ehdgfORavMUwq6tEgtu1Z3CZpoqdCWYbn7M66lqYwA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5377, serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
        Validity
            Not Before: Jun 13 06:06:01 2026 GMT
            Not After : Jun 20 06:06:01 2026 GMT
        Subject: CN=6a2cf349-3e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:96:ae:57:4d:2b:2f:82:60:01:69:bc:a8:
                    9a:59:01:37:71:c6:44:e9:4c:f7:4c:f3:7b:ab:51:
                    b1:54:16:b3:a2:14:6b:e2:cf:89:c0:08:6c:9a:8e:
                    0f:b3:f2:a1:5c:64:54:c1:2a:d3:95:ff:4a:0d:05:
                    f4:45:e5:c2:0a:94:4b:4c:7f:cc:97:2d:f3:7b:68:
                    7c:ea:54:0a:f2:ed:69:65:8e:01:71:b8:14:8b:6c:
                    a0:76:5a:9c:7f:66:c5:ff:b3:51:3e:54:6e:9b:c4:
                    48:b9:4f:32:63:ff:30:bc:2b:5b:39:5c:62:ba:35:
                    1a:97:61:8b:8f:87:3d:d0:9a:5e:b4:2d:f7:f2:ad:
                    fc:3b:17:52:cd:a5:ab:d9:f7:fe:16:4d:08:19:5f:
                    ab:f0:70:33:94:46:5e:ce:30:27:2d:d3:18:c4:56:
                    65:e9:4f:ef:57:cf:f0:1b:2e:8b:08:0f:13:60:77:
                    69:3b:ac:b4:75:6b:4e:94:4c:82:d7:7c:65:eb:84:
                    d7:e8:e9:aa:7b:5c:c4:10:cb:38:fa:25:57:dc:72:
                    81:7f:98:7c:82:37:2b:4a:02:69:b4:9b:a6:67:9f:
                    ce:b5:d6:e3:82:7c:36:fe:25:1d:95:34:37:38:ab:
                    90:2f:86:d0:4a:c8:e0:4a:cd:df:6e:c9:63:bb:90:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CF:4D:AA:DD:83:06:99:7B:E1:F8:F2:65:3F:C1:39:2B:91:33:C8
            X509v3 Authority Key Identifier:
                keyid:90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4d:b3:f2:3a:d6:2d:28:af:0c:b2:59:1e:12:03:80:c3:a8:
         19:fb:82:4f:eb:c7:f2:7b:ca:21:b1:8d:65:96:4e:43:aa:bd:
         19:3e:a0:56:5b:51:e2:62:de:1e:fa:14:d8:b4:aa:6d:2b:be:
         92:04:21:04:55:cb:87:ea:e4:ab:69:ff:8a:9c:80:8f:03:72:
         c5:00:64:8d:d1:a4:d2:bc:52:1b:72:41:ac:4d:c9:85:78:e5:
         13:f7:0d:6d:bf:ef:f3:f4:a6:54:90:da:57:1b:08:1b:8a:e2:
         40:f3:ec:c7:da:1b:34:43:6e:8e:5d:8a:3e:81:d3:e4:27:26:
         25:5c:81:8e:5f:a9:56:63:de:64:c1:41:97:67:f8:9c:b0:18:
         97:52:59:2b:70:a0:8a:fc:77:a9:ef:76:b7:e5:a1:fe:67:4c:
         24:7c:2b:84:e4:6a:39:ec:3a:d4:71:a7:fa:0d:3b:bc:ef:b8:
         ec:ba:64:c0:98:9d:c0:ea:39:ce:ac:50:44:68:0a:51:b0:4b:
         10:77:dd:99:a5:26:51:5a:8e:4e:04:bc:02:30:a4:02:5a:90:
         e6:ee:6e:a6:de:7b:7c:54:d5:d0:0d:69:06:d3:68:4e:69:2e:
         f4:6a:30:bd:08:0e:57:4d:8b:1c:e1:0d:21:7b:fc:86:f6:69:
         95:2d:1b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:13 2026 by rpki-client