Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
File:                     KO2nuV1ejUVip1l0xt19pkwqKoY.mft (raw, json)
Hash identifier:          pHvdXCKQZhJjiFHQQwYSX2zE/cFz10J2koKSwKevn+8=
Subject key identifier:   3A:3B:54:C0:47:A8:F3:67:15:F0:05:6B:25:EF:94:7A:E1:3D:A8:0C
Authority key identifier: 28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86
Certificate issuer:       /CN=A9142E1E/serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
Manifest number:          0105
Signing time:             Fri 05 Jun 2026 05:43:37 +0000
Manifest this update:     Fri 05 Jun 2026 05:43:37 +0000
Manifest next update:     Fri 12 Jun 2026 05:43:37 +0000
Files and hashes:         1: KO2nuV1ejUVip1l0xt19pkwqKoY.crl (hash: zgcrBnEubi0WHI5tfNdv0pHoMUIolLbWKFdpE4UzYZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl
                          rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 05:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142E1E, serialNumber=28EDA7B95D5E8D4562A75974C6DD7DA64C2A2A86
        Validity
            Not Before: Jun  5 05:43:37 2026 GMT
            Not After : Jun 12 05:43:37 2026 GMT
        Subject: CN=6a226209-efc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:20:c6:e1:65:38:64:df:a8:8b:36:d9:51:
                    8f:5f:8c:e0:b1:13:34:1d:74:a6:99:47:57:b5:dd:
                    1c:19:ae:5b:86:57:9e:dc:73:18:1d:88:fe:4a:97:
                    cb:24:2a:db:e9:04:f1:8a:f0:55:f3:57:e4:5c:f4:
                    b6:b6:c7:94:a9:d5:ac:0f:57:b4:08:c5:00:91:38:
                    a2:d6:0a:8d:bb:c0:3c:cb:93:6a:67:90:48:41:e1:
                    a6:6b:b2:4f:3d:6a:83:af:a7:a8:e5:40:74:98:c6:
                    c7:44:73:68:3c:76:69:54:59:2f:23:6d:90:14:e2:
                    01:f5:af:d2:4e:c0:95:51:be:88:29:d8:5e:25:1c:
                    1a:42:9d:d7:60:e2:a0:1a:7b:d8:f3:a6:c3:b8:70:
                    87:5d:2c:5f:45:76:fd:9c:8f:52:78:e3:3d:14:ba:
                    9c:94:d3:17:6a:b2:32:32:4c:71:90:ff:4e:50:9e:
                    b3:00:8d:99:88:4a:74:55:2b:80:61:1d:8c:bb:ee:
                    f1:b5:7c:92:21:c8:36:03:db:2e:13:9e:7a:98:92:
                    b1:c8:af:3a:f9:2e:66:36:7a:c4:a2:d7:ba:02:b1:
                    37:fb:bd:a5:81:f6:4e:4e:9c:b4:e2:8b:10:82:4d:
                    02:c2:dc:ec:9f:a0:19:26:31:b9:91:f2:7b:73:81:
                    33:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3B:54:C0:47:A8:F3:67:15:F0:05:6B:25:EF:94:7A:E1:3D:A8:0C
            X509v3 Authority Key Identifier:
                keyid:28:ED:A7:B9:5D:5E:8D:45:62:A7:59:74:C6:DD:7D:A6:4C:2A:2A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/KO2nuV1ejUVip1l0xt19pkwqKoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/D409F82AD16911EFB76FB520C4F9AE02/KO2nuV1ejUVip1l0xt19pkwqKoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:25:d5:35:99:f3:a4:67:40:09:4a:45:d4:f5:d3:01:dc:be:
         7b:bd:5e:ea:e1:a2:93:34:7a:88:59:2c:1f:08:7a:ae:56:26:
         20:b8:fb:ba:17:e3:a5:4b:53:a1:92:d2:64:30:b2:f1:48:71:
         83:81:31:e2:ed:a4:b9:3a:bd:8a:97:7a:65:5e:a6:2c:8a:85:
         8e:3c:a4:4b:fa:a5:b2:db:8f:ec:32:8c:e6:0d:f1:76:40:c8:
         37:4f:80:ba:d4:cd:a4:31:e7:8f:84:d8:6d:e7:22:ff:da:1b:
         83:83:d5:9e:f8:79:b0:d8:14:cc:8c:dd:a6:4a:b7:79:e7:6d:
         b6:f1:db:20:8d:be:c1:20:8f:31:70:23:61:45:44:61:e7:91:
         93:4f:5e:50:b3:fe:17:1b:b6:c3:e5:7c:bc:b4:b3:ef:5e:ec:
         d0:a3:0b:63:7e:4b:af:f2:22:56:ac:6b:c2:36:85:59:a6:f4:
         85:05:37:c0:a4:53:a5:9c:c0:e8:90:c9:07:88:5a:d5:0b:fe:
         f9:27:e8:8c:8b:ae:4e:4f:c7:ee:a9:a3:83:f2:7a:4a:0a:ed:
         72:2a:39:87:7d:6d:95:e4:24:1b:f2:64:da:87:79:3d:11:16:
         e5:eb:a1:cc:c6:b9:19:a2:5e:9e:6c:3b:7d:e2:2e:f2:b9:0c:
         5f:e9:f9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:12:26 2026 by rpki-client