Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
File:                     kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json)
Hash identifier:          RnJJAR9NTfeEDrSAGtJmzcQaDkLynz05DYegBgbohN4=
Subject key identifier:   D2:E0:97:A4:BF:F5:A1:59:FB:FD:4D:45:4C:4F:7A:E9:22:2B:6A:59
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Certificate issuer:       /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial:       0C5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
Manifest number:          0BCF
Signing time:             Thu 04 Jun 2026 19:15:22 +0000
Manifest this update:     Thu 04 Jun 2026 19:15:21 +0000
Manifest next update:     Thu 11 Jun 2026 19:15:21 +0000
Files and hashes:         1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: TnA+zK8d0WGklLTXJjoQCFn4sCQmiV8uW6xtX/oXA+o=)
                          2: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: ROZc9LLExxAKSmBJDb4gQXjvPcIeYOybm5faBsQ7IsY=)
                          3: 5180A6FE1CD811F196994CA9363D8C67.roa (hash: SWKDhCz2E/CT6y8saxZMqLsBGiJ4AZkgU/gomKXe6eo=)
                          4: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: Ajj1+XIv2lN+bJkfK3jiIAMbBKfMDrx1rrpjChWFrTw=)
                          5: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: 6nAz8JDLRXZpp0YQMDx9IUtnZhPPPPFT4QGkXVk5rN0=)
                          6: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: Ty4ZYwQyvMEEFSGfaZFvWi2WTAO0bLvXbSZDNMOJw/s=)
                          7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: l19IcHrq3/s7bkVZYJxzqFC2aowTPUonke4uOMcPczc=)
                          8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: +GV9xhTlFORtjXxee7C6hBiagIilBpwJ2zPhAY4Q/SY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
                          rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3163 (0xc5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A2, serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
        Validity
            Not Before: Jun  4 19:15:21 2026 GMT
            Not After : Jun 11 19:15:21 2026 GMT
        Subject: CN=6a21ceca-6e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:53:21:a8:07:3d:78:a2:33:63:80:bc:2d:
                    88:a1:f7:89:47:9f:b7:cb:16:a7:71:ba:54:b0:b5:
                    8d:bc:4a:03:60:fd:55:cb:d2:1b:6d:3c:cb:20:f1:
                    9e:dd:a7:e3:b6:a8:58:93:b0:a8:16:14:f6:5b:92:
                    11:2b:04:df:f5:0c:52:bb:37:0d:17:7d:02:32:a9:
                    04:52:bd:94:1b:35:27:7b:ee:c6:ff:86:db:f7:55:
                    2e:69:d4:07:06:1a:64:cf:03:10:6b:7d:1f:26:df:
                    ae:2b:78:3c:50:99:4f:59:4b:d2:42:07:dd:50:8c:
                    13:f1:55:90:94:aa:87:bc:8e:37:49:53:74:5e:9a:
                    1d:8e:6a:c5:32:51:82:fe:45:bc:af:ed:cf:47:ec:
                    d6:20:38:9c:e4:5f:08:11:ee:19:80:5b:9c:90:89:
                    0e:b4:18:26:cb:ee:40:27:e1:76:2e:b7:03:aa:87:
                    b5:c8:75:70:93:df:f4:bc:b8:e4:dd:22:01:26:65:
                    f8:c6:92:3f:6c:11:10:da:91:c7:e3:73:fb:50:08:
                    5e:84:d0:e1:92:b7:f3:02:75:78:bc:a0:84:4a:60:
                    ca:dc:97:14:16:03:c3:40:d8:6d:4f:1c:63:57:7d:
                    84:3d:51:47:b7:82:5a:88:ff:d1:f0:ca:32:f7:63:
                    5e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E0:97:A4:BF:F5:A1:59:FB:FD:4D:45:4C:4F:7A:E9:22:2B:6A:59
            X509v3 Authority Key Identifier:
                keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5e:32:07:ec:1e:8c:64:20:0c:4f:c4:cb:a9:4f:b7:bd:fd:
         52:a2:d2:d2:d2:74:d1:57:ff:ca:61:43:dd:bc:e0:42:89:8d:
         02:58:79:0a:c5:ea:39:61:e9:80:b4:5b:a7:50:ac:ea:86:ee:
         c6:37:36:f9:5d:15:a1:64:ca:26:57:21:54:ee:31:fa:15:6e:
         a6:cd:6a:3c:7d:5e:d9:cd:f4:0b:d7:c1:b5:b9:f1:0e:39:d7:
         52:7b:4d:52:c5:f1:f3:ad:47:55:d3:a5:f3:81:6a:6f:13:25:
         8a:3a:ef:01:86:a2:4f:d0:c6:52:ae:dd:53:d4:fc:a5:d9:ab:
         e0:dd:92:ff:1e:15:38:c7:2e:5a:6a:1c:b7:5e:b3:bc:f4:c4:
         8c:c1:ca:9e:b2:d8:74:e1:ef:00:13:e2:aa:ea:50:1e:d7:82:
         51:72:ce:27:2e:e2:67:c5:05:02:ed:59:94:d8:76:b9:03:40:
         0d:a2:89:76:34:38:e5:cd:b8:b8:2f:74:e2:20:0b:39:98:4e:
         05:ac:03:c4:ea:9c:9b:2d:ed:e3:62:21:c7:4d:49:c0:e2:9c:
         17:ec:b5:3e:37:3f:cf:f2:18:1c:58:3b:16:c9:a9:6e:12:4f:
         3f:7d:56:d2:71:3d:5e:64:81:d6:97:7c:34:2d:88:73:3e:46:
         90:56:7d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:53:16 2026 by rpki-client