Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
File:                     kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json)
Hash identifier:          CZ2/nSkrzkjWzpQFLlweZpzb1pCGQ72JQ2uljBWBL2E=
Subject key identifier:   73:BA:70:32:49:B4:66:BB:48:70:3F:43:08:2B:DC:F6:87:99:80:78
Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
Certificate issuer:       /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Certificate serial:       0AD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
Manifest number:          0ACF
Signing time:             Tue 02 Jun 2026 19:26:50 +0000
Manifest this update:     Tue 02 Jun 2026 19:26:49 +0000
Manifest next update:     Tue 09 Jun 2026 19:26:49 +0000
Files and hashes:         1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: FM9AlkRwmkuLDkvyR0TUlGRRoYLyDvk+v3fFPCJByA8=)
                          2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: gSKNogEshZnmN/3zaUCV8zHvFUQUbigi4NIpUM9EKFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
                          rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2777 (0xad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
        Validity
            Not Before: Jun  2 19:26:49 2026 GMT
            Not After : Jun  9 19:26:49 2026 GMT
        Subject: CN=6a1f2e7a-ecb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:5f:ee:b8:63:ba:43:12:10:42:5b:ac:fa:
                    9e:d9:65:f9:ff:c4:f3:12:d9:5b:ad:15:e2:e8:45:
                    ea:1b:3a:16:16:3f:32:b9:b5:91:90:7e:e2:01:7b:
                    d9:06:d0:55:6e:77:3a:72:bb:11:41:a9:83:92:88:
                    79:50:f0:2b:38:47:f4:1b:58:46:c5:dd:3c:f1:6a:
                    94:9d:00:8b:7c:32:73:56:e3:25:1c:0e:b6:4a:69:
                    bb:5a:8e:25:fa:70:b2:a6:35:c0:45:d3:59:36:4e:
                    73:aa:05:bb:6b:49:f4:a2:0d:2f:5e:97:6d:83:bf:
                    b8:3f:d1:80:29:f6:68:b8:a5:0c:93:81:60:29:d3:
                    4e:22:7c:f3:9b:e4:99:3d:3c:ce:79:ac:5b:9c:ea:
                    d9:57:f1:fb:f3:ce:2c:92:b4:51:c7:d5:33:8f:af:
                    37:00:9b:f4:c0:0a:c8:0c:62:21:1b:8d:d6:30:0f:
                    fb:fb:00:4d:2c:96:12:31:64:7e:29:f2:3b:a2:f6:
                    ca:09:44:da:cb:79:9a:37:1e:51:f7:ad:0c:ef:c5:
                    6b:c8:33:3e:21:f3:9a:c5:49:39:0d:88:34:1b:5b:
                    9c:f5:22:89:16:f7:81:eb:1c:37:e4:6b:62:cd:e1:
                    28:fc:c7:ed:df:41:73:cd:93:85:df:44:ef:53:6f:
                    b8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BA:70:32:49:B4:66:BB:48:70:3F:43:08:2B:DC:F6:87:99:80:78
            X509v3 Authority Key Identifier:
                keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:99:8b:84:59:db:79:5d:c0:da:f0:46:af:4b:76:eb:bf:de:
         78:d6:e8:12:79:d6:11:0e:68:af:00:2a:24:5a:d8:cf:4c:dc:
         bf:25:37:16:52:ff:f7:40:34:5d:5b:ee:1e:d1:c1:6c:dd:14:
         db:5d:0f:47:71:19:d1:7d:c4:9b:42:cf:40:49:a5:37:0b:ac:
         8c:c3:3b:06:95:2f:63:8b:19:da:26:77:6b:89:08:bd:94:8f:
         1d:23:76:5c:a8:d3:95:00:c3:37:25:d2:66:6d:84:fa:3b:d6:
         8e:15:13:ef:b7:63:03:43:47:1c:d7:45:35:84:32:72:4f:02:
         7a:5b:54:f2:89:5a:13:f9:25:34:97:18:6f:24:a0:a3:8c:32:
         19:67:10:45:b3:f3:27:2b:e1:29:fe:2c:8c:be:69:78:b4:a2:
         86:19:64:3c:df:58:de:0b:3b:ef:63:07:91:84:a9:96:dd:69:
         bd:db:06:52:27:3f:5f:ff:94:76:ee:58:b9:29:c9:d2:da:23:
         01:fe:7a:b1:4a:11:c2:d7:e2:61:a1:24:c4:4e:92:44:79:cd:
         56:14:12:39:79:74:29:58:66:e7:85:d2:e1:84:e4:27:0d:bd:
         65:d6:fc:37:88:74:88:c6:60:20:3a:e6:bb:a8:d2:d5:3c:f8:
         50:96:5b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:30 2026 by rpki-client