Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
File:                     kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json)
Hash identifier:          HI+QFqak4qowG1aFvS3OIf93Bb/NdJa24MOyu9OnG0E=
Subject key identifier:   BD:DF:99:65:44:AD:26:3D:2B:C3:FD:B1:E7:16:7B:AB:DD:FC:85:E8
Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01
Certificate issuer:       /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
Certificate serial:       0D3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
Manifest number:          0D30
Signing time:             Mon 22 Jun 2026 18:03:12 +0000
Manifest this update:     Mon 22 Jun 2026 18:03:11 +0000
Manifest next update:     Mon 29 Jun 2026 18:03:11 +0000
Files and hashes:         1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: X9wKnQZm4rAjWSUV+CBaIBlfEQm6YJYfFy1C8p1wCPE=)
                          2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: YjPccAzJNBU/ZdWKFo5jYPgMQyoV2n/b3P7n6tGh3TQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl
                          rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3388 (0xd3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
        Validity
            Not Before: Jun 22 18:03:11 2026 GMT
            Not After : Jun 29 18:03:11 2026 GMT
        Subject: CN=6a3978e0-74cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:41:7b:90:ba:03:bd:41:d2:39:ff:2b:0e:
                    d1:c3:51:56:ab:6e:7a:ef:ef:c7:09:3e:ec:6b:4b:
                    b2:e5:22:57:cf:8d:d5:47:c9:36:1f:07:17:70:b0:
                    d6:1d:59:b5:cc:c5:6b:e7:91:b9:3e:c3:1a:29:44:
                    67:d7:5e:75:f8:75:c2:ea:bf:c7:31:b8:c9:30:50:
                    04:26:bb:69:73:5c:0a:e9:55:61:db:0c:0a:17:e1:
                    12:f4:de:23:e0:de:94:98:bb:1f:8a:29:66:c4:11:
                    55:20:f1:f0:84:72:d7:4c:9c:1d:83:17:52:09:a5:
                    13:3c:ed:88:75:61:cc:0b:91:35:1b:af:6a:b3:99:
                    31:40:60:af:35:13:64:ce:58:15:4e:e2:47:dc:8a:
                    26:3b:ed:e1:2a:82:e3:f0:06:ba:01:97:0d:85:47:
                    69:f0:d8:4f:12:47:10:2e:39:4d:b7:77:5e:13:72:
                    52:66:14:54:f8:27:fa:b3:7a:d4:04:d5:fe:6a:ba:
                    9a:c6:41:c7:b7:bb:5b:68:96:a3:6a:01:28:7b:32:
                    50:6b:67:26:ca:ed:b7:8e:eb:d9:52:0f:ad:60:1f:
                    bc:de:0c:2b:ea:0f:6d:94:3b:d1:63:f2:03:be:88:
                    de:26:28:1d:47:23:c8:7d:2d:7c:fe:da:0b:20:9d:
                    65:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DF:99:65:44:AD:26:3D:2B:C3:FD:B1:E7:16:7B:AB:DD:FC:85:E8
            X509v3 Authority Key Identifier:
                keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cc:23:ad:d2:6b:5b:35:e2:ff:45:b0:27:68:86:dd:47:f5:
         38:c9:c6:1c:5d:4f:e2:fc:c0:53:ed:c5:59:ae:e5:59:f7:f3:
         b8:1d:af:98:08:63:d5:3b:34:38:b4:0c:f7:8b:5a:fc:1f:4c:
         03:af:18:a6:95:04:54:bc:d2:43:3e:5b:f6:fc:ff:27:98:05:
         4a:06:fc:48:9e:21:54:2e:37:ab:9e:e9:10:8c:2a:7a:51:1d:
         c3:d9:20:f4:54:b9:0e:b9:95:c7:dc:59:07:d9:0f:ae:a3:20:
         f4:ca:e3:47:73:10:01:51:9d:5b:0d:6d:d5:d9:92:49:00:5d:
         bf:3a:0d:33:f1:e3:37:ac:f8:32:a4:09:a1:26:f3:95:a4:be:
         8c:d9:df:d2:79:60:84:fe:43:90:7a:ae:76:7d:98:ed:a4:f3:
         c1:8d:6e:ca:bf:6e:2f:97:39:32:00:3a:07:e3:fb:53:70:6c:
         97:ea:56:09:b2:ee:0e:29:59:58:b8:ef:24:00:f8:47:fd:bc:
         9e:91:f8:69:23:4e:65:28:35:12:3a:c0:68:9b:3f:06:64:c6:
         8a:a1:80:dc:79:99:73:fd:40:1c:f5:a6:67:81:1f:07:52:8b:
         96:91:fc:a8:8a:26:ff:4e:c8:dd:37:75:4d:9c:d8:2d:c1:4d:
         48:40:1c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:38 2026 by rpki-client