Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
File:                     K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json)
Hash identifier:          r2eDpuv4neo6lcYLjhRQ3Esk5y+OnTNQF7rooakhm9k=
Subject key identifier:   E8:B6:07:01:F9:FA:3B:B4:D3:71:65:A9:CD:F8:CD:02:E3:1E:51:7A
Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
Certificate issuer:       /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
Certificate serial:       052A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
Manifest number:          0523
Signing time:             Mon 01 Jun 2026 00:13:19 +0000
Manifest this update:     Mon 01 Jun 2026 00:13:19 +0000
Manifest next update:     Mon 08 Jun 2026 00:13:19 +0000
Files and hashes:         1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: 5lFA/SvEOGDUkDPsDRmv7W2r+XIet3hIDtP1vgWcTcw=)
                          2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: ecqh96rlJZPd66W+GRhUvcvW/439i3jELOA0IH7jsks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl
                          rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 00:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1322 (0x52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BBBA, serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
        Validity
            Not Before: Jun  1 00:13:19 2026 GMT
            Not After : Jun  8 00:13:19 2026 GMT
        Subject: CN=6a1cce9f-8036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:90:cb:d5:c8:d7:28:35:73:4d:30:3b:28:d8:
                    43:21:f8:01:51:80:f8:63:f5:3c:10:e4:8b:bd:e5:
                    b9:26:7e:a1:39:bf:d3:80:df:ad:37:8b:84:b9:b9:
                    6c:82:75:9a:77:e3:37:c0:d5:2d:80:3e:5f:55:e6:
                    94:d2:5d:57:af:aa:da:f8:02:d6:51:b5:4f:5a:14:
                    e6:95:5e:c1:d3:5b:3c:13:a4:3f:5b:85:5e:a0:ac:
                    b5:54:ff:f9:b1:2d:52:e7:ee:0e:37:65:ad:fc:b1:
                    38:ac:88:3f:5b:78:9f:f9:af:4c:8b:4f:b4:cf:8f:
                    77:77:9f:a7:0a:a1:de:cc:10:b6:55:8f:a2:a6:cf:
                    6c:78:6f:74:8b:b6:be:21:9f:8d:c4:44:4c:94:28:
                    31:d4:ad:3b:38:3c:a0:4c:ff:35:0d:03:77:07:26:
                    d1:13:39:98:ca:f4:59:b2:df:85:0e:40:bb:16:7d:
                    07:7e:d5:23:e2:da:4b:5a:41:e5:1b:e8:2e:82:b6:
                    3a:08:e1:b4:ef:6c:c8:e0:a0:dd:62:89:69:f8:88:
                    c0:5a:22:03:16:33:ce:1e:07:e1:4d:2d:41:9e:78:
                    46:20:d8:df:b2:24:84:7a:fd:94:74:08:e1:92:dd:
                    2c:60:b1:54:b1:4a:e1:ec:e6:2e:fb:81:03:94:76:
                    d7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B6:07:01:F9:FA:3B:B4:D3:71:65:A9:CD:F8:CD:02:E3:1E:51:7A
            X509v3 Authority Key Identifier:
                keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:aa:82:f7:59:00:52:b2:63:4d:a8:e4:14:6a:a6:02:a5:06:
         aa:18:3c:a0:2b:15:f0:da:9c:3f:f6:3b:11:cc:f8:c6:94:48:
         7f:45:93:25:9f:01:d7:89:fd:76:87:7f:e3:e2:41:c2:ae:47:
         e7:cd:d0:86:1d:99:10:3d:f2:c1:b0:3f:e0:43:3e:9e:44:dc:
         e9:b1:f5:72:d2:89:c5:5d:22:cd:42:0d:52:ac:c7:10:31:81:
         3a:7f:40:5e:5e:9f:77:26:a5:c3:71:ff:6b:dc:b3:94:b9:b0:
         c6:02:91:d9:95:7c:2e:ba:b4:ee:b8:42:cb:c6:22:db:49:cb:
         d5:13:56:d5:a9:f2:14:ec:5e:d5:0b:5f:83:e8:29:64:95:a1:
         8c:f5:55:21:6c:6a:5b:d6:4c:b6:7d:2a:cd:f8:af:c5:b9:b0:
         5e:b5:8c:f0:b9:4d:f0:55:31:a1:14:7b:cd:d0:61:b3:98:87:
         8b:06:b3:44:6e:c1:1b:5f:c8:24:a6:3c:d3:ba:6b:e8:6f:09:
         86:7e:5c:7c:eb:74:ed:27:ee:2c:f9:5d:6b:58:3f:2e:8b:f0:
         cc:20:a0:a9:60:6a:14:22:3d:6c:7d:25:a9:db:8f:be:9f:d1:
         d8:80:be:9d:db:f4:4b:30:e2:2a:f5:2e:6c:cc:32:ac:a6:1f:
         13:75:63:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:17:19 2026 by rpki-client