Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
File:                     kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json)
Hash identifier:          d9YDwqa1QymPTM7aoBWqrFQ114ib1KizTn67SzBacJg=
Subject key identifier:   9D:51:2E:DB:57:10:6D:E4:2A:0A:7D:D0:5B:8D:37:30:96:B8:35:45
Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
Certificate issuer:       /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Certificate serial:       0500
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
Manifest number:          04F9
Signing time:             Fri 12 Jun 2026 23:46:26 +0000
Manifest this update:     Fri 12 Jun 2026 23:46:26 +0000
Manifest next update:     Fri 19 Jun 2026 23:46:26 +0000
Files and hashes:         1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: nlCQTY3sOVwVP+sYnDWrXJVGkVJr6asGllbfY6PYNAg=)
                          2: 02D13C94D4B211F093413921C4F9AE02.roa (hash: 5S6cmEeP7M2EZTlTeoJaoR5wTUKBQoK3xjSaXGSNves=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1280 (0x500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
        Validity
            Not Before: Jun 12 23:46:26 2026 GMT
            Not After : Jun 19 23:46:26 2026 GMT
        Subject: CN=6a2c9a52-4048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:36:d8:26:92:9c:4b:97:cb:14:6d:dc:96:ad:
                    9a:15:a1:73:2e:48:8a:e1:b9:ab:0f:35:36:9d:8b:
                    a8:3f:32:c9:c3:9e:3e:7a:10:b9:1f:f2:dd:51:21:
                    ef:e9:7c:fe:0f:8b:a5:bb:03:d1:a5:91:2f:f5:7b:
                    40:f0:83:f6:11:7b:4c:60:67:51:3c:3c:e3:46:d0:
                    0b:95:16:39:54:05:5b:d3:85:3c:15:c0:45:70:b8:
                    89:df:af:fc:49:cf:6c:38:6e:22:ca:95:2e:1a:5c:
                    70:45:15:97:e6:dc:dc:e5:7e:eb:59:31:da:ec:73:
                    ae:a7:6c:94:f9:9d:c7:cb:53:8e:a9:1d:9e:50:ec:
                    12:4e:15:d6:b0:24:9b:d3:40:5f:22:33:5e:ef:2f:
                    c4:0d:a4:ad:04:92:51:65:f3:12:fb:9b:af:2a:0d:
                    1a:cb:af:45:4c:04:64:e6:e1:97:61:7e:4a:eb:9f:
                    2b:f9:a3:81:f1:91:93:aa:14:cf:f4:2c:f7:b4:69:
                    32:5c:24:96:97:e5:ef:80:63:6b:9e:1d:47:85:bb:
                    88:6a:7f:4c:d3:72:36:14:34:1c:68:0c:9a:68:9a:
                    6e:6c:cc:fc:59:a7:55:40:4e:a8:5a:44:62:4d:e4:
                    30:83:fa:3b:7d:9f:4c:f3:06:c2:31:3b:bc:da:9b:
                    6a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:51:2E:DB:57:10:6D:E4:2A:0A:7D:D0:5B:8D:37:30:96:B8:35:45
            X509v3 Authority Key Identifier:
                keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3f:78:0f:bc:b1:f6:65:4b:85:8b:59:13:84:30:46:c7:1b:
         d4:f1:38:80:b8:00:26:16:83:bc:80:d6:33:a4:7a:1b:54:ab:
         b2:a9:4f:33:cb:13:62:51:5d:26:5f:e3:a6:2f:43:b8:9d:4a:
         bb:11:1c:ee:43:5d:c0:8b:cc:a3:98:43:d5:88:b8:6c:da:64:
         47:4d:ed:14:9d:2f:ce:b1:80:d4:3b:7c:7f:ee:8e:6b:d6:6f:
         74:b8:bf:8c:6a:f0:7f:ad:91:7f:8b:ef:1d:a9:6c:68:78:9e:
         81:49:0f:19:32:32:1b:bf:8e:4c:69:f6:66:45:ba:94:22:b8:
         94:03:c2:84:17:6f:ab:ab:dc:9f:1b:e4:81:9e:14:2a:bd:d9:
         0d:95:d2:60:32:8b:68:d3:d0:22:0e:22:71:73:fe:9f:f2:8c:
         33:38:ae:5f:73:d5:15:d9:4d:77:46:10:01:96:4d:68:8c:d5:
         50:55:cd:5c:11:e4:eb:f7:2a:03:5d:d4:0d:1e:51:1b:da:c9:
         d2:b2:88:cf:48:3f:df:07:1c:fa:9c:79:4f:11:2b:00:24:d0:
         c7:95:d3:3b:78:83:88:1d:c1:f0:0b:4d:49:b1:8d:f0:4f:e5:
         2f:0b:75:e3:11:ad:f5:2d:83:26:f7:d3:70:4f:30:40:b5:3b:
         02:a8:2d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:26:28 2026 by rpki-client