Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
File:                     Kt1a2PtDrdgNUrtYNpPDG42asuw.mft (raw, json)
Hash identifier:          JgFPuVIAvGjUvpmq1OWq2dmHJ+66SmHGPRUZfYtLXSI=
Subject key identifier:   40:D5:78:3D:99:6B:35:D7:25:07:A6:D1:EE:47:59:FB:D0:2C:B2:26
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Certificate issuer:       /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial:       0CFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
Manifest number:          0CF2
Signing time:             Mon 22 Jun 2026 18:17:25 +0000
Manifest this update:     Mon 22 Jun 2026 18:17:25 +0000
Manifest next update:     Mon 29 Jun 2026 18:17:25 +0000
Files and hashes:         1: Kt1a2PtDrdgNUrtYNpPDG42asuw.crl (hash: HM9iLrjr1ijp6aYjCpP9UtdLAS18ze5sYI57I7CAuwc=)
                          2: 78550A2608FE11EAA003E778C4F9AE02.roa (hash: QuCnvPryU+p8dBWWOPW2KrTltF89H58QfoFBQxj01yQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
                          rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 18:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3322 (0xcfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913149F, serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
        Validity
            Not Before: Jun 22 18:17:25 2026 GMT
            Not After : Jun 29 18:17:25 2026 GMT
        Subject: CN=6a397c35-ec1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:a2:a3:53:4b:e6:a3:3e:88:1d:14:29:01:
                    ff:40:98:21:f4:b5:2b:c0:27:e4:17:c9:7f:7a:36:
                    ef:53:9f:c1:ef:11:ca:2b:43:94:43:9d:ce:3f:77:
                    c2:09:97:05:ab:fc:fe:a5:4f:fe:17:c1:46:57:35:
                    fd:16:ff:af:2b:d7:8e:af:08:c2:1c:ee:05:30:ec:
                    cd:a8:4c:71:df:37:17:38:de:d6:c6:51:47:86:30:
                    4a:0b:9d:7d:dd:a6:cf:78:c4:b4:20:c4:b6:b0:78:
                    bd:07:90:46:eb:8e:d7:33:7f:07:cb:b2:c5:b0:d7:
                    4b:74:50:07:75:d0:15:7c:8b:36:12:98:2c:9c:71:
                    51:04:40:92:fd:45:0f:5b:2d:2b:f9:87:d5:f1:8a:
                    57:8e:97:dc:4a:2a:0b:0e:df:74:6c:70:5a:f9:ba:
                    a9:67:4c:7e:24:59:3c:35:ca:81:d2:a4:48:58:2f:
                    67:56:8a:36:79:6b:7b:26:6e:42:2d:3d:93:1b:3f:
                    c8:1a:bb:5d:df:0f:38:06:50:38:4d:72:e2:a0:ee:
                    97:8f:f7:46:2a:69:74:0d:17:0e:d1:19:5d:1a:b4:
                    ce:f6:bb:c6:76:4a:73:de:a8:01:23:f1:27:6b:fa:
                    78:70:51:ec:cf:91:d5:92:e0:68:d5:0f:3b:30:73:
                    e3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D5:78:3D:99:6B:35:D7:25:07:A6:D1:EE:47:59:FB:D0:2C:B2:26
            X509v3 Authority Key Identifier:
                keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ff:0f:cb:cc:ff:f0:33:da:32:66:f7:00:e4:ae:0d:5b:1b:
         2f:04:0f:d4:1b:f9:e7:36:f0:35:e2:0d:b4:c4:d5:9c:a6:46:
         00:a1:77:4c:9a:60:72:1c:de:87:65:a5:d2:92:b6:6c:0d:f0:
         5f:0d:a9:28:00:83:36:ab:e2:f6:fc:8b:ea:cc:32:52:23:73:
         75:05:32:60:8a:59:bd:99:21:fb:36:5c:78:da:01:08:9d:c5:
         41:0f:a2:ad:f8:e0:58:69:ef:7a:5c:4c:e9:6a:c5:0a:90:a2:
         e8:77:0a:8a:dc:9c:49:4e:e2:6e:4e:a0:5d:4c:af:a4:8d:99:
         5a:38:ef:e4:14:20:12:9e:fc:77:2d:77:7f:8a:54:2c:95:72:
         8e:0f:ec:5a:2d:fa:c0:8c:64:8b:fc:f8:c8:30:3e:97:9d:be:
         8e:86:4f:42:fe:8e:c5:8d:14:5e:09:c2:c0:4a:8d:93:98:81:
         e7:8f:df:b4:3b:ef:88:15:c7:28:44:6d:69:ea:33:3f:30:eb:
         59:ea:a2:44:ef:c0:39:a0:16:3c:22:fd:5a:b5:75:67:c1:2b:
         c8:bd:d8:e7:07:06:24:aa:ea:9a:82:a7:96:00:9a:9f:de:c0:
         2d:bb:fe:86:53:ab:9c:bf:9b:52:f1:26:74:cc:08:14:f9:7d:
         b7:fc:4a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:37 2026 by rpki-client