Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
File:                     kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft (raw, json)
Hash identifier:          CVUn6gE0GxJNKf55nTg80dpErcYae752yHK5Z+Dx6sk=
Subject key identifier:   8F:8D:38:D0:76:CD:E2:6E:30:FC:81:8C:2D:79:B9:2B:2B:99:4E:CF
Authority key identifier: 90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29
Certificate issuer:       /CN=A9149106/serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29
Certificate serial:       0517
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
Manifest number:          0517
Signing time:             Mon 22 Jun 2026 23:39:30 +0000
Manifest this update:     Mon 22 Jun 2026 23:39:29 +0000
Manifest next update:     Mon 29 Jun 2026 23:39:29 +0000
Files and hashes:         1: kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl (hash: PmfjxVnlXLUvYSRAS5JcEiH8dsJqkJL75jEcWJ3tEYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl
                          rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 23:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1303 (0x517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149106, serialNumber=90943EB8EAD44C36EDC991031BFF88B8AB655A29
        Validity
            Not Before: Jun 22 23:39:29 2026 GMT
            Not After : Jun 29 23:39:29 2026 GMT
        Subject: CN=6a39c7b2-0beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:56:34:24:4f:e3:fe:10:22:99:a7:87:f8:
                    6f:01:fb:80:fa:a3:6c:dc:8a:88:a8:7c:8a:ee:c7:
                    17:c7:83:c3:55:bd:00:c9:3a:21:76:d8:94:d0:c4:
                    a8:52:9b:a6:78:9d:e3:8e:08:ec:30:d7:56:74:b7:
                    65:6b:8d:31:04:4a:09:0c:6d:57:9f:5a:e4:4c:06:
                    6f:83:02:72:75:d7:39:2e:e9:8f:e2:17:99:d8:56:
                    61:dc:7f:5e:39:e6:ee:6b:d5:c1:51:9d:18:d4:d6:
                    42:58:65:28:18:57:29:3c:51:99:90:ae:3d:d5:88:
                    f0:72:7d:26:5a:96:6b:23:7d:41:62:33:26:86:c8:
                    d9:e5:03:9f:e2:e4:f7:de:15:22:95:fa:47:26:f7:
                    80:48:61:b8:30:53:64:b7:1d:e1:d8:bb:97:5f:7e:
                    4c:26:35:bb:89:1f:47:a5:c2:1a:da:de:ee:a0:04:
                    6d:0b:56:0a:12:1e:7c:fb:62:d6:af:ce:6c:56:92:
                    c3:57:6a:76:fa:7a:da:bb:01:3c:3b:3e:a0:51:ed:
                    5c:c9:0a:10:e0:ff:48:fe:4c:9b:ed:51:59:fb:c7:
                    6b:ec:7a:17:a5:bc:f7:c7:f5:cc:49:8f:a2:ae:01:
                    5c:c6:70:8d:f3:26:07:8e:65:37:77:ef:72:e4:1c:
                    ac:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8D:38:D0:76:CD:E2:6E:30:FC:81:8C:2D:79:B9:2B:2B:99:4E:CF
            X509v3 Authority Key Identifier:
                keyid:90:94:3E:B8:EA:D4:4C:36:ED:C9:91:03:1B:FF:88:B8:AB:65:5A:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kJQ-uOrUTDbtyZEDG_-IuKtlWik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149106/9617C06E536911ECA4A6BC78C4F9AE02/kJQ-uOrUTDbtyZEDG_-IuKtlWik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d7:c7:7c:af:f7:74:63:d4:cd:5f:52:6f:69:ee:a3:63:bb:
         0e:24:d9:ce:b8:39:ea:d9:a7:e1:58:9d:58:97:93:71:33:6f:
         56:4d:b0:3f:e2:38:ba:f9:94:84:ce:63:27:e5:b4:31:fb:a5:
         2e:6d:0d:60:a2:f3:2f:1c:11:0a:57:86:b3:84:36:a1:aa:ff:
         a5:a5:47:d9:c5:be:74:39:aa:1d:4b:07:94:41:b2:ae:b2:c0:
         4f:86:fc:95:75:98:21:b5:54:ae:6f:0b:25:62:15:f2:d8:bf:
         48:99:52:dc:33:80:6c:bb:2f:84:e9:b3:49:bb:0a:a9:23:0c:
         a9:51:dd:d8:d5:a0:8d:ff:96:3f:48:0b:f6:cd:ae:de:5e:81:
         64:2a:97:d3:8d:fb:7e:ac:e7:eb:90:f0:38:24:b9:3f:dd:9b:
         02:db:85:40:a3:64:65:fd:d8:b9:01:e5:b2:a4:f9:3a:df:a9:
         cb:e5:f9:18:f6:98:67:71:5b:2e:2a:41:ea:f1:2d:18:06:02:
         77:3b:d2:87:3b:4f:84:1c:b4:bc:8e:bc:a7:97:96:5b:7a:a4:
         52:b5:04:ee:f8:6e:5e:06:a7:91:01:3e:ee:35:50:ba:3c:3f:
         42:b2:0d:21:fb:02:3c:46:6a:7b:7f:d5:4c:ec:54:56:e1:85:
         4b:67:6d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:21 2026 by rpki-client