Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft
File:                     KozvQUIwYkfgXyYUwTFpXx7uChM.mft (raw, json)
Hash identifier:          cR8sxXx+ZdLZnPLtLrDKBFyCHxFt94wGUgFEmfZRQqc=
Subject key identifier:   EC:3E:E9:83:9B:C7:C0:99:AF:CB:D0:B3:0E:ED:D6:6F:15:1E:4C:4C
Authority key identifier: 2A:8C:EF:41:42:30:62:47:E0:5F:26:14:C1:31:69:5F:1E:EE:0A:13
Certificate issuer:       /CN=A9112762/serialNumber=2A8CEF4142306247E05F2614C131695F1EEE0A13
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft
Manifest number:          11
Signing time:             Tue 19 May 2026 08:54:34 +0000
Manifest this update:     Tue 19 May 2026 08:54:33 +0000
Manifest next update:     Tue 26 May 2026 08:54:33 +0000
Files and hashes:         1: KozvQUIwYkfgXyYUwTFpXx7uChM.crl (hash: XTcn49fqVC66FUaf6YmzPeewgFKIEpNLFlJ/tHhUBOk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.crl
                          rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112762, serialNumber=2A8CEF4142306247E05F2614C131695F1EEE0A13
        Validity
            Not Before: May 19 08:54:33 2026 GMT
            Not After : May 26 08:54:33 2026 GMT
        Subject: CN=6a0c2549-b56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:19:35:fd:e0:32:0e:ac:cb:78:73:de:fd:
                    24:df:70:a4:2a:43:a9:28:5f:af:a4:b6:d2:d7:61:
                    23:bc:59:a3:94:9d:d1:48:d0:b4:85:ce:e1:55:56:
                    61:ab:6e:37:4c:3b:3a:92:71:0c:5d:9f:ff:db:1d:
                    c0:05:ab:17:de:06:8b:0a:6c:89:93:37:d2:e4:ee:
                    b8:0a:79:7e:15:31:08:6d:c1:35:74:3a:e8:6c:c9:
                    61:19:a5:e9:fc:91:11:77:66:cf:a5:c7:d7:90:f0:
                    8d:95:02:cb:2c:e3:10:78:85:d8:aa:37:bd:81:16:
                    12:24:ca:00:a1:d6:d7:0a:ad:dd:0f:4e:d9:cd:01:
                    cc:35:2b:f5:c8:a1:39:db:d1:2e:42:83:8d:ed:aa:
                    13:73:44:b5:95:dd:2e:bc:bd:6d:c7:18:67:f1:b9:
                    3a:c2:dd:89:70:5b:70:a5:4a:cb:44:f0:04:24:95:
                    f4:ca:f1:51:f6:56:f1:50:9f:18:1f:c9:09:62:39:
                    f2:b9:8d:3b:b4:c7:e5:4c:49:67:f8:75:43:94:d9:
                    02:89:84:fe:08:c5:66:c5:fb:32:2f:f9:8c:5a:11:
                    fd:56:56:11:6c:d2:7d:69:2e:82:38:fb:69:31:1b:
                    d6:8e:e0:95:fa:1e:61:94:f1:b6:05:5b:92:f2:e6:
                    8a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3E:E9:83:9B:C7:C0:99:AF:CB:D0:B3:0E:ED:D6:6F:15:1E:4C:4C
            X509v3 Authority Key Identifier:
                keyid:2A:8C:EF:41:42:30:62:47:E0:5F:26:14:C1:31:69:5F:1E:EE:0A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KozvQUIwYkfgXyYUwTFpXx7uChM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112762/5156C54C3CA311F1A2F83546AB833773/KozvQUIwYkfgXyYUwTFpXx7uChM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ef:94:b8:e8:b6:1c:e0:15:d9:2f:31:7c:21:54:bb:16:c7:
         91:90:27:c3:33:be:e3:ec:1a:1e:e2:3f:f2:13:c7:9c:1b:30:
         24:93:1c:d4:2a:5b:d6:49:78:90:41:6c:fe:2d:97:fc:2c:d5:
         18:3f:12:b2:8c:3c:ad:12:06:16:59:9d:3f:2e:c2:2b:f2:a4:
         74:d5:c0:f6:fc:77:9f:d1:fb:6a:43:a1:69:2a:fb:d4:0e:2a:
         66:14:20:ad:fe:35:89:a6:67:42:bf:44:24:1b:ca:ec:e0:d7:
         c4:a7:bd:5f:24:c5:95:0e:eb:03:fe:c4:de:3b:7e:19:29:b1:
         21:8a:95:26:ab:71:96:39:ba:0e:d1:75:42:32:e4:89:2e:60:
         35:b8:73:35:64:47:3e:7f:1e:6a:fd:2c:90:d5:c1:f4:63:f1:
         6f:1c:ea:60:4a:8f:4a:09:49:b3:e3:02:6d:dc:86:b8:6c:af:
         11:27:9f:12:3f:2c:8f:96:00:81:56:0f:a5:93:dc:ba:c0:96:
         99:95:3e:1c:4b:91:28:e5:3a:f7:8c:26:4e:d5:8b:92:90:4e:
         28:c7:eb:93:f2:7c:3a:1f:f7:04:fc:79:b4:42:fb:4f:a2:b5:
         b8:0f:84:2f:17:8b:e6:46:9d:8d:39:10:28:86:f0:74:9d:fd:
         a8:64:71:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:30 2026 by rpki-client