Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
File:                     klUgH_qh5mcsBsLfbovhFYLML64.mft (raw, json)
Hash identifier:          ssKI7thmBfHWD7nhlwx/K8RJGWzkQlgc7P4UAa7b9PY=
Subject key identifier:   61:51:48:77:7A:76:57:D2:E4:42:7C:E7:E4:23:DD:90:77:50:35:86
Authority key identifier: 92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE
Certificate issuer:       /CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE
Certificate serial:       02FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
Manifest number:          02F4
Signing time:             Thu 21 May 2026 01:21:35 +0000
Manifest this update:     Thu 21 May 2026 01:21:34 +0000
Manifest next update:     Thu 28 May 2026 01:21:34 +0000
Files and hashes:         1: klUgH_qh5mcsBsLfbovhFYLML64.crl (hash: GsTuv76s034pYzgiSgaNiNNSLRA0L+FmbCOvVxAUlT4=)
                          2: 6DE1A436246811ED82556323C4F9AE02.roa (hash: r3TW15SuIdGpywpcotauMLYQIycZlTkIxb64gJm7VrA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl
                          rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762 (0x2fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112A7D, serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE
        Validity
            Not Before: May 21 01:21:34 2026 GMT
            Not After : May 28 01:21:34 2026 GMT
        Subject: CN=6a0e5e1e-7c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:58:17:43:a0:f6:ac:44:b1:8d:a3:4b:b1:
                    58:73:d5:b0:ed:c1:19:9c:f8:09:2b:f6:4f:3a:77:
                    9f:7a:37:69:82:e6:b0:8c:0b:c8:b0:58:34:56:ca:
                    1d:2c:47:aa:28:ca:b7:11:ba:f4:26:02:05:24:d0:
                    8e:ba:a8:97:ba:e1:13:e4:64:79:0b:70:93:98:a1:
                    39:32:37:f5:4b:51:ef:60:95:76:b2:5c:52:cd:70:
                    5c:75:a4:f3:fe:5c:c0:39:6d:3d:64:a3:ef:dd:16:
                    9f:f3:95:49:1c:aa:0b:e3:ac:8c:0e:bc:b4:94:12:
                    ca:0e:cb:2a:8f:e1:33:eb:8c:15:3b:bb:90:cf:60:
                    72:9f:c0:44:1a:35:5f:4b:9f:4b:99:de:fc:2a:41:
                    d3:97:33:78:d8:b9:9d:97:dc:33:6c:ec:bd:54:27:
                    74:82:a6:25:0f:2a:8f:0a:0b:6f:3b:59:a0:1c:75:
                    12:01:ae:a8:cb:4f:f6:ec:18:89:3e:af:f8:18:6b:
                    ba:c4:d3:1d:01:79:ff:d4:5c:2b:aa:dc:5d:da:0a:
                    db:c1:3b:22:31:fe:73:e7:26:49:6a:35:ee:90:4f:
                    2a:38:cf:07:ad:d4:6a:f0:5b:f2:e8:b2:25:02:d5:
                    14:ca:c8:d6:26:aa:74:7b:d0:41:07:cf:92:c8:57:
                    b9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:51:48:77:7A:76:57:D2:E4:42:7C:E7:E4:23:DD:90:77:50:35:86
            X509v3 Authority Key Identifier:
                keyid:92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f1:01:d5:f2:39:d0:10:8e:ad:b1:56:94:a0:5d:7c:7d:04:
         90:f8:11:a2:c1:b4:0d:85:75:e3:1f:02:53:9d:10:7f:d8:c9:
         12:0f:d0:c3:a5:90:ff:2c:ca:87:69:72:31:5c:64:9f:eb:40:
         ce:57:cc:06:98:6e:18:54:8d:ed:fe:8a:71:7e:27:22:b1:24:
         5c:80:09:1a:6a:71:29:c6:91:7a:6f:06:72:bd:be:e8:3f:5c:
         66:d4:8c:06:dd:47:59:08:7e:f0:74:d9:de:40:f0:71:b1:1d:
         dc:18:2c:5d:1a:6d:fb:5e:f5:91:e0:cb:18:2b:12:16:9f:ab:
         d2:56:85:29:be:ba:82:05:af:d6:19:7e:7b:73:87:ed:0f:0b:
         f7:90:6c:24:c3:7d:1a:e6:ab:0f:21:c9:e5:ec:6e:0b:a3:8c:
         11:c7:2f:83:f7:c7:05:45:44:25:8f:69:de:bf:62:94:0a:c6:
         67:7c:f0:55:47:b6:e3:d1:cc:32:7c:b2:48:83:9a:d4:e9:8d:
         a8:20:e0:f7:69:2f:39:1a:03:6c:fa:b6:79:02:33:e5:6a:ff:
         4d:54:91:93:ce:6f:35:31:32:62:67:df:01:bb:7c:1c:91:74:
         4f:ad:76:96:cd:5f:69:73:c1:a4:bd:ac:87:fd:d1:5a:8d:16:
         0c:ba:12:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:24:19 2026 by rpki-client