Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
File:                     k-bMnLyUxrTox9mGQYMN5mORud8.mft (raw, json)
Hash identifier:          27VGjBq2xqut6OR1+oCFlwTfHtj3TWzMSckOS5B+H7Y=
Subject key identifier:   6B:37:E5:72:D6:96:D3:1A:8C:E1:76:26:2E:BD:35:3A:EB:9F:35:7B
Authority key identifier: 93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF
Certificate issuer:       /CN=A91357FC/serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
Manifest number:          6A
Signing time:             Mon 01 Jun 2026 08:40:12 +0000
Manifest this update:     Mon 01 Jun 2026 08:40:11 +0000
Manifest next update:     Mon 08 Jun 2026 08:40:11 +0000
Files and hashes:         1: k-bMnLyUxrTox9mGQYMN5mORud8.crl (hash: UeWNCnIw7ed0Y41ujKh61AivShx1uw7lFNT0v++XyOQ=)
                          2: 115DA80CBDFA11F0AC07856DC4F9AE02.roa (hash: W13G9UJDUOXNhE35H+xQmcCjaFGO3pjeXgy05QF6k+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl
                          rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91357FC, serialNumber=93E6CC9CBC94C6B4E8C7D98641830DE66391B9DF
        Validity
            Not Before: Jun  1 08:40:11 2026 GMT
            Not After : Jun  8 08:40:11 2026 GMT
        Subject: CN=6a1d456c-1fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:3a:f0:fa:8a:f4:70:5a:fd:2b:40:9c:50:
                    e9:48:c8:e1:21:23:33:ca:73:c0:1b:6c:cb:9e:ef:
                    75:e2:35:74:bc:a6:47:91:16:ed:79:f4:0e:3d:e5:
                    a5:17:b7:9b:7c:d1:2a:44:07:ba:11:2e:22:8d:dd:
                    f9:80:eb:e1:6d:19:1a:23:58:b4:30:d1:e7:b2:e5:
                    5f:3c:77:77:56:47:51:e4:08:3a:bd:90:e9:48:a0:
                    51:ac:bf:c1:e6:05:19:ce:c0:a0:4c:b5:0b:f6:db:
                    2f:2c:4b:c6:e7:71:84:a0:1f:b0:a0:00:6a:21:63:
                    92:38:b5:ed:b7:09:09:d0:ec:be:c3:9f:a6:ee:0e:
                    f0:f1:4a:ad:c4:0c:ed:67:64:43:20:42:0d:5c:5b:
                    9c:be:dc:60:5f:16:22:34:c7:b8:60:a9:0e:27:1f:
                    64:60:aa:8b:68:b7:64:58:bc:d8:ce:6a:09:9f:52:
                    17:1c:d3:35:b7:0b:28:ff:7b:ce:b5:6b:94:11:79:
                    e7:7e:cb:89:27:f0:8e:c1:a4:4a:4d:77:72:ee:bc:
                    67:32:fa:04:f2:88:2b:d6:b5:b0:dd:4b:6b:cd:66:
                    68:fa:fa:e0:36:bc:92:4e:19:ad:cb:04:64:3a:66:
                    ca:ed:aa:6e:8c:33:c7:67:dc:8f:a2:03:6d:15:84:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:37:E5:72:D6:96:D3:1A:8C:E1:76:26:2E:BD:35:3A:EB:9F:35:7B
            X509v3 Authority Key Identifier:
                keyid:93:E6:CC:9C:BC:94:C6:B4:E8:C7:D9:86:41:83:0D:E6:63:91:B9:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k-bMnLyUxrTox9mGQYMN5mORud8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91357FC/884572D4BDF911F0B3E0526CC4F9AE02/k-bMnLyUxrTox9mGQYMN5mORud8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:99:ca:2d:e0:92:0b:50:12:a6:1f:9a:25:24:c2:51:0b:5d:
         d3:87:94:6f:21:b3:2b:59:f2:9b:7d:aa:8c:79:f7:29:01:e7:
         56:a8:cd:04:d9:31:ac:e3:c6:58:4d:c6:24:ad:44:04:87:73:
         b9:f3:dd:5d:ca:92:d7:b4:5b:36:d7:9b:76:f1:48:0a:ae:e1:
         69:c2:6f:61:d4:d2:1f:73:7e:d4:f3:08:4c:28:f0:c2:c2:65:
         bc:b6:21:9b:a6:0b:59:bb:35:78:55:14:11:d0:ba:7f:40:84:
         a5:8b:e6:10:2c:c3:20:f2:ee:5f:0d:cb:ee:8d:56:f7:1e:15:
         ad:99:71:2a:38:1d:ba:35:52:c7:18:2d:07:53:26:2c:39:b2:
         38:3a:fa:48:d0:46:d7:ab:1e:28:96:03:90:a6:c2:9e:3f:fd:
         6c:3d:c0:9c:93:85:40:27:cf:1c:ed:5b:c8:4f:8a:06:47:c6:
         ac:ef:b9:86:83:02:a5:bf:d2:59:26:b3:ad:34:6c:a9:be:02:
         07:16:ab:39:54:36:bf:de:08:a8:9f:fe:03:d9:20:28:00:bd:
         cb:23:37:80:cc:1a:1b:ba:41:dc:da:b7:ef:fd:8b:62:5b:43:
         e9:15:4a:e2:c8:44:a4:88:92:4e:27:5b:40:ca:52:00:b9:94:
         f4:f1:1b:d8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NTdGQzExMC8GA1UEBRMoOTNFNkNDOUNCQzk0QzZCNEU4QzdEOTg2NDE4MzBERTY2
MzkxQjlERjAeFw0yNjA2MDEwODQwMTFaFw0yNjA2MDgwODQwMTFaMBgxFjAUBgNV
BAMTDTZhMWQ0NTZjLTFmZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+7zrw+or0cFr9K0CcUOlIyOEhIzPKc8AbbMue73XiNXS8pkeRFu159A495aUX
t5t80SpEB7oRLiKN3fmA6+FtGRojWLQw0eey5V88d3dWR1HkCDq9kOlIoFGsv8Hm
BRnOwKBMtQv22y8sS8bncYSgH7CgAGohY5I4te23CQnQ7L7Dn6buDvDxSq3EDO1n
ZEMgQg1cW5y+3GBfFiI0x7hgqQ4nH2Rgqotot2RYvNjOagmfUhcc0zW3Cyj/e861
a5QReed+y4kn8I7BpEpNd3LuvGcy+gTyiCvWtbDdS2vNZmj6+uA2vJJOGa3LBGQ6
Zsrtqm6MM8dn3I+iA20VhP6jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUazflctaW
0xqM4XYmLr01OuufNXswHwYDVR0jBBgwFoAUk+bMnLyUxrTox9mGQYMN5mORud8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1N0ZDLzg4NDU3MkQ0QkRG
OTExRjBCM0UwNTI2Q0M0RjlBRTAyL2stYk1uTHlVeHJUb3g5bUdRWU1ONW1PUnVk
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvay1iTW5MeVV4clRveDltR1FZTU41bU9SdWQ4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1
N0ZDLzg4NDU3MkQ0QkRGOTExRjBCM0UwNTI2Q0M0RjlBRTAyL2stYk1uTHlVeHJU
b3g5bUdRWU1ONW1PUnVkOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCnmcot4JILUBKmH5olJMJRC13Th5RvIbMrWfKbfaqMefcpAedWqM0E2TGs48ZY
TcYkrUQEh3O5891dypLXtFs215t28UgKruFpwm9h1NIfc37U8whMKPDCwmW8tiGb
pgtZuzV4VRQR0Lp/QISli+YQLMMg8u5fDcvujVb3HhWtmXEqOB26NVLHGC0HUyYs
ObI4OvpI0EbXqx4olgOQpsKeP/1sPcCck4VAJ88c7VvIT4oGR8as77mGgwKlv9JZ
JrOtNGypvgIHFqs5VDa/3gion/4D2SAoAL3LIzeAzBobukHc2rfv/YtiW0PpFUri
yESkiJJOJ1tAylIAuZT08RvY
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:26:09 2026 by rpki-client