Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
File:                     KL7nBASyQwlkwwKSkNPqYEyRDrE.mft (raw, json)
Hash identifier:          ea3EkLBB5+2XuyqrG0HmdXQ4Yu9HQnPPhqqF7KpkE4k=
Subject key identifier:   DC:30:4B:89:79:97:3A:28:66:9A:BE:74:ED:9E:E6:2B:28:5E:C0:DB
Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1
Certificate issuer:       /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
Manifest number:          DF
Signing time:             Tue 23 Jun 2026 06:48:01 +0000
Manifest this update:     Tue 23 Jun 2026 06:48:00 +0000
Manifest next update:     Tue 30 Jun 2026 06:48:00 +0000
Files and hashes:         1: KL7nBASyQwlkwwKSkNPqYEyRDrE.crl (hash: ZM3gevt+46MO9snJyXgwKiIGXd8rv+IkaqV60TAiItM=)
                          2: C028C06E18E211F081A75558C4F9AE02.roa (hash: zKW/ra+nJQMWUbM8Pae8IdbHSNQ3IifmscVyx7k0qbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl
                          rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 06:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
        Validity
            Not Before: Jun 23 06:48:00 2026 GMT
            Not After : Jun 30 06:48:00 2026 GMT
        Subject: CN=6a3a2c21-63be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:fd:63:47:d4:cd:bc:c1:0d:7c:eb:a9:ed:
                    fd:87:b5:5f:2d:95:36:77:ab:73:77:45:4c:49:66:
                    ce:0d:c3:14:c3:ec:ce:80:5c:fc:5a:a0:3c:b3:58:
                    e4:3f:eb:e0:fb:33:74:62:4b:86:47:1e:93:b9:a5:
                    e0:29:84:94:78:5f:4d:cc:70:16:9c:79:23:8b:64:
                    16:d5:1c:fe:aa:73:53:04:b3:0d:d6:7c:8e:17:38:
                    61:b5:7b:49:4d:31:6e:0e:a4:e4:95:e9:1b:21:64:
                    18:89:9f:ee:16:e0:57:75:70:d3:f0:ac:6c:dd:57:
                    ad:ef:cc:3a:a4:20:c6:df:14:02:77:d1:49:5d:b0:
                    bc:03:b2:e6:d4:91:8a:ee:ca:5d:5f:97:b2:fd:4b:
                    e7:7c:bc:60:93:ca:35:36:2d:81:14:e7:07:1b:6b:
                    fb:c9:05:20:8e:eb:96:56:ab:38:e2:90:eb:d4:50:
                    ed:a4:cb:ed:a3:53:3f:22:7d:87:9c:ac:72:be:2e:
                    3e:d2:35:b3:70:ba:f4:28:00:e4:05:ae:19:b8:bc:
                    a5:e6:89:64:ab:44:3f:a2:a5:72:7f:7a:21:ce:06:
                    35:41:0c:89:66:f4:01:6a:b7:1d:11:ad:4c:50:5e:
                    04:3f:9f:31:bd:35:6f:29:5b:c2:9c:7c:83:8c:bc:
                    2f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:30:4B:89:79:97:3A:28:66:9A:BE:74:ED:9E:E6:2B:28:5E:C0:DB
            X509v3 Authority Key Identifier:
                keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a5:55:07:9a:5f:e1:9a:38:cd:3d:1a:3c:1f:ba:c4:8f:08:
         2c:fb:91:e4:6e:5d:c1:3c:ed:ab:cb:50:b2:58:8c:d0:2f:8b:
         a8:c3:e0:a6:a7:55:eb:32:4b:45:35:38:d5:ae:9d:37:4a:8d:
         fb:92:e8:d7:65:a1:67:0a:5c:81:dc:f2:09:d8:62:b8:c3:41:
         bd:b2:69:cc:c4:79:69:39:92:d3:30:7d:e8:5b:02:75:87:01:
         47:9e:73:d8:48:10:6a:ae:75:7a:38:29:dc:63:d9:15:27:d3:
         d3:c7:28:5d:b4:fc:12:79:6f:d0:97:61:62:d4:f0:ea:90:ef:
         bf:a5:d7:80:4b:d9:b7:90:69:6e:ed:37:35:33:bd:e8:16:ce:
         3f:99:10:f2:80:24:62:a7:cd:84:1e:ed:34:69:01:e3:55:b6:
         4f:37:1c:29:eb:f9:d6:f1:eb:ad:4f:9c:76:83:01:4f:34:99:
         df:5b:af:37:0a:8d:05:a4:53:9d:ae:b7:28:35:6a:cd:6c:b1:
         0a:71:52:9f:6b:b8:7b:1a:7f:dc:f0:65:5d:da:73:5a:ed:e5:
         6e:d1:fb:dd:9f:d0:a4:12:03:86:d8:4f:46:0f:1c:0e:f7:b9:
         b8:46:92:e6:5a:31:88:a4:17:04:d7:bb:db:9f:f0:51:26:ff:
         69:3f:75:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:22 2026 by rpki-client