Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
File:                     KmvwVK0j6tLbOVMbZGcmypRaxJI.mft (raw, json)
Hash identifier:          bIrJPAcCwr+jLk8sgslOISCR3e2+f2ZWZt9IG1CBiao=
Subject key identifier:   21:1F:5B:9C:ED:6A:CE:48:43:21:4D:DB:5D:C1:46:34:98:36:CD:18
Authority key identifier: 2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92
Certificate issuer:       /CN=A918AB7E/serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
Manifest number:          E9
Signing time:             Mon 15 Jun 2026 06:34:46 +0000
Manifest this update:     Mon 15 Jun 2026 06:34:45 +0000
Manifest next update:     Mon 22 Jun 2026 06:34:45 +0000
Files and hashes:         1: KmvwVK0j6tLbOVMbZGcmypRaxJI.crl (hash: AePP7i6qHZxEvSPVzDdVdIH58GknPifB0E2TIZAe+0g=)
                          2: 3E4E5610438B11F18B6C5738C9833773.roa (hash: 1P+X6qPkn0VdYt1Cmrpk5GJKo0+TU3IuJXvl0/kng8U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl
                          rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AB7E, serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492
        Validity
            Not Before: Jun 15 06:34:45 2026 GMT
            Not After : Jun 22 06:34:45 2026 GMT
        Subject: CN=6a2f9d06-8e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:de:95:71:53:bf:2f:d6:65:8b:44:e3:ba:62:
                    d2:86:9c:e7:a1:51:ef:cd:4d:b1:2e:b4:6a:58:e7:
                    d4:e2:ab:1d:be:0f:75:98:da:ac:96:d8:ec:14:8b:
                    a5:15:ba:06:4b:b7:98:d0:2a:38:d7:27:b9:39:a1:
                    4e:a7:46:90:06:59:e8:4b:eb:f7:16:e7:02:4b:c9:
                    eb:a2:50:ae:c1:58:bc:99:1b:15:ed:7d:18:5e:4d:
                    34:20:7a:20:7c:49:d2:d8:e8:48:c5:1c:67:c4:c4:
                    70:86:ee:ad:2a:e4:0a:4e:e0:b1:49:56:ca:c5:f4:
                    ef:4a:55:72:0f:84:b2:52:d1:2a:72:72:76:84:d5:
                    1c:d1:cf:1d:0f:08:4d:db:30:27:99:f2:8e:7a:81:
                    f7:36:5c:d4:dd:3d:af:6b:1e:6e:07:01:4e:27:e9:
                    59:9c:9b:21:65:f6:d0:6c:eb:e6:d1:97:4a:14:bf:
                    3b:b2:7d:9a:6e:53:77:a7:b3:fb:fb:2e:99:85:83:
                    f9:32:87:6e:73:e4:02:b9:3a:40:4a:2b:24:62:fe:
                    37:4d:43:52:46:66:fc:c4:b4:3a:b7:53:be:45:6f:
                    03:c3:c4:49:65:67:3d:54:a7:dd:56:fc:49:ee:a7:
                    1b:c2:e4:d4:37:82:ef:3b:66:0f:f2:5e:2a:d8:f2:
                    9f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1F:5B:9C:ED:6A:CE:48:43:21:4D:DB:5D:C1:46:34:98:36:CD:18
            X509v3 Authority Key Identifier:
                keyid:2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8d:d6:fc:72:ae:db:4f:0e:64:70:b0:67:e4:fb:69:93:96:
         af:46:3d:92:06:fb:29:17:12:2f:8a:ae:e0:95:10:8e:eb:5c:
         3b:1a:c6:e2:2f:17:a5:cb:d8:a8:f8:9d:9a:ca:ad:60:c9:cb:
         88:1d:de:f2:40:48:a6:a4:3f:39:7d:46:31:72:2d:94:5f:9f:
         21:1e:62:17:76:1b:da:64:54:2e:a0:2c:62:15:f2:47:ee:e2:
         0b:8e:69:26:ae:14:7e:be:e6:00:c6:79:06:5b:6e:d5:d8:22:
         c9:65:d3:6b:39:4f:a2:2a:a5:78:00:1d:07:91:19:a6:09:93:
         49:26:b4:b0:c9:31:b5:a7:c9:c3:fd:10:ff:ff:95:94:9e:5d:
         6f:f3:a4:26:a5:fa:f8:4a:8c:2c:0a:22:49:43:7a:57:57:ef:
         47:5f:65:c1:02:90:e4:93:c2:4e:7e:f3:d6:36:7e:40:74:28:
         61:2b:1d:8a:d0:f6:45:90:29:a6:6e:ae:45:f9:cc:32:3a:ac:
         88:5e:f2:a7:99:ca:99:a7:da:6a:d0:95:6c:91:6b:e2:52:e2:
         44:61:98:b8:89:a6:71:ac:3c:e5:17:12:fd:da:8a:07:39:3f:
         54:9a:8a:c1:78:19:c2:70:26:c9:4f:58:77:0a:9c:e5:56:a1:
         e9:a3:c8:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFCN0UxMTAvBgNVBAUTKDJBNkJGMDU0QUQyM0VBRDJEQjM5NTMxQjY0NjcyNkNB
OTQ1QUM0OTIwHhcNMjYwNjE1MDYzNDQ1WhcNMjYwNjIyMDYzNDQ1WjAYMRYwFAYD
VQQDEw02YTJmOWQwNi04ZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm96VcVO/L9Zli0TjumLShpznoVHvzU2xLrRqWOfU4qsdvg91mNqsltjsFIul
FboGS7eY0Co41ye5OaFOp0aQBlnoS+v3FucCS8nrolCuwVi8mRsV7X0YXk00IHog
fEnS2OhIxRxnxMRwhu6tKuQKTuCxSVbKxfTvSlVyD4SyUtEqcnJ2hNUc0c8dDwhN
2zAnmfKOeoH3NlzU3T2vax5uBwFOJ+lZnJshZfbQbOvm0ZdKFL87sn2ablN3p7P7
+y6ZhYP5Moduc+QCuTpASiskYv43TUNSRmb8xLQ6t1O+RW8Dw8RJZWc9VKfdVvxJ
7qcbwuTUN4LvO2YP8l4q2PKfTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCEfW5zt
as5IQyFN213BRjSYNs0YMB8GA1UdIwQYMBaAFCpr8FStI+rS2zlTG2RnJsqUWsSS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUI3RS9GNzU5Nzk2RTA4
ODExMUYwQkFDMzQxM0VDNEY5QUUwMi9LbXZ3VkswajZ0TGJPVk1iWkdjbXlwUmF4
SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ttdndWSzBqNnRMYk9WTWJaR2NteXBSYXhKSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QUI3RS9GNzU5Nzk2RTA4ODExMUYwQkFDMzQxM0VDNEY5QUUwMi9LbXZ3VkswajZ0
TGJPVk1iWkdjbXlwUmF4SkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbY3W/HKu208OZHCwZ+T7aZOWr0Y9kgb7KRcSL4qu4JUQjutcOxrG4i8XpcvY
qPidmsqtYMnLiB3e8kBIpqQ/OX1GMXItlF+fIR5iF3Yb2mRULqAsYhXyR+7iC45p
Jq4Ufr7mAMZ5Bltu1dgiyWXTazlPoiqleAAdB5EZpgmTSSa0sMkxtafJw/0Q//+V
lJ5db/OkJqX6+EqMLAoiSUN6V1fvR19lwQKQ5JPCTn7z1jZ+QHQoYSsditD2RZAp
pm6uRfnMMjqsiF7yp5nKmafaatCVbJFr4lLiRGGYuImmcaw85RcS/dqKBzk/VJqK
wXgZwnAmyU9Ydwqc5Vah6aPIbQ==
-----END CERTIFICATE-----
Generated at Tue Jun 16 23:53:01 2026 by rpki-client