Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
File:                     xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json)
Hash identifier:          1sJRCt5nAk2WB/yTpa4+AhiMjtlFH6Qz/FfKTi+PxAk=
Subject key identifier:   13:60:11:DD:4C:E5:63:06:24:AF:CF:CA:7A:26:6E:CC:43:B9:6A:00
Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57
Certificate issuer:       /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
Certificate serial:       0ADE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
Manifest number:          0AD2
Signing time:             Mon 22 Jun 2026 19:26:55 +0000
Manifest this update:     Mon 22 Jun 2026 19:26:55 +0000
Manifest next update:     Mon 29 Jun 2026 19:26:55 +0000
Files and hashes:         1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: skltdy+h+gb2sGkWY7tmOXqrSsB38NQ2M8tSJSgOgCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl
                          rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 19:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2782 (0xade)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
        Validity
            Not Before: Jun 22 19:26:55 2026 GMT
            Not After : Jun 29 19:26:55 2026 GMT
        Subject: CN=6a398c7f-d728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:ec:7e:67:b6:ac:9c:b2:60:b9:81:a4:9d:
                    f3:08:84:3e:3d:48:01:01:95:1f:7b:6a:bf:31:18:
                    70:37:fe:f8:32:c2:29:b5:9e:6d:43:c7:38:64:75:
                    8e:81:e8:87:81:ef:14:21:2d:3c:2a:94:81:b3:80:
                    74:66:86:9e:dd:b8:1f:81:3b:8a:a8:81:7d:42:d4:
                    3d:b9:b1:c8:f5:af:f6:d9:0f:e7:21:fa:8d:13:ac:
                    20:dc:07:8a:da:e0:ea:32:ae:8c:f8:a4:cd:95:3a:
                    09:68:a8:37:e2:fe:87:fa:94:9f:5a:02:1d:e4:b1:
                    12:a2:16:35:07:72:a2:b5:aa:06:9b:37:3a:d6:65:
                    46:5d:05:20:33:a7:b1:db:fe:89:76:4b:62:a5:de:
                    c1:ed:bf:9d:51:e0:e3:cc:63:15:17:a0:ae:0b:72:
                    04:70:61:9e:e1:1d:db:f2:c6:a0:97:0f:ae:b0:fa:
                    7b:3e:54:f4:79:7e:5f:44:1f:bd:1c:ae:22:92:7f:
                    1c:7c:34:d0:2a:e5:b6:72:ec:d8:c5:33:b8:75:f4:
                    78:2c:67:23:34:5b:d1:12:28:9e:3f:34:51:78:cb:
                    47:16:64:3f:32:53:68:ac:ea:27:0a:c5:fa:2b:5c:
                    60:9e:ed:dd:f8:e7:10:a1:17:d6:4f:b5:6a:ac:69:
                    2a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:60:11:DD:4C:E5:63:06:24:AF:CF:CA:7A:26:6E:CC:43:B9:6A:00
            X509v3 Authority Key Identifier:
                keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2c:5a:33:50:75:c8:7c:53:28:28:a6:e3:cf:44:0e:da:5f:
         91:09:d1:ca:63:24:54:d7:a2:4c:7f:92:af:8a:90:5c:95:2d:
         f4:84:25:2f:0a:d4:75:9d:b3:9b:4a:80:0a:a6:79:99:e7:9d:
         76:a9:eb:ae:aa:c9:5d:cb:37:45:b0:55:53:ee:19:e6:fa:d0:
         34:58:77:6b:1b:2b:ee:b0:2f:27:cd:33:81:83:40:e6:0f:eb:
         f0:67:4f:ef:fe:cc:4d:25:14:f1:04:1c:f7:77:07:9e:8a:fe:
         1c:b0:ca:25:4d:7e:2c:19:d7:1e:4b:94:bd:15:c9:69:3e:d5:
         38:62:c7:5e:66:3f:b0:c5:45:70:4a:22:04:fa:9d:c9:46:40:
         92:20:8f:ed:88:0c:8a:75:c0:82:3c:4b:3b:36:e9:45:af:c7:
         ee:42:f6:ca:de:20:68:1f:07:16:cf:4c:47:98:6a:95:7f:e9:
         6c:c8:61:c3:d3:5c:b7:83:5c:c3:03:9f:db:59:4f:58:9b:47:
         23:3c:a7:5c:3e:24:4e:e9:16:4b:a5:8b:0a:f7:08:b3:b4:09:
         fc:41:f4:b9:00:45:24:a9:98:ed:7d:e8:9a:58:1a:0c:81:db:
         2a:0e:88:2a:dc:b5:99:7b:5a:68:16:62:59:27:8f:13:8b:ab:
         4e:ea:0d:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG
MTQyRDYxNTcwHhcNMjYwNjIyMTkyNjU1WhcNMjYwNjI5MTkyNjU1WjAYMRYwFAYD
VQQDEw02YTM5OGM3Zi1kNzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu6Hsfme2rJyyYLmBpJ3zCIQ+PUgBAZUfe2q/MRhwN/74MsIptZ5tQ8c4ZHWO
geiHge8UIS08KpSBs4B0Zoae3bgfgTuKqIF9QtQ9ubHI9a/22Q/nIfqNE6wg3AeK
2uDqMq6M+KTNlToJaKg34v6H+pSfWgId5LESohY1B3KitaoGmzc61mVGXQUgM6ex
2/6Jdktipd7B7b+dUeDjzGMVF6CuC3IEcGGe4R3b8saglw+usPp7PlT0eX5fRB+9
HK4ikn8cfDTQKuW2cuzYxTO4dfR4LGcjNFvREiiePzRReMtHFmQ/MlNorOonCsX6
K1xgnu3d+OcQoRfWT7VqrGkq4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNgEd1M
5WMGJK/PynombsxDuWoAMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1
QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13
YWRVZGh0VmEzS3p4UXRZVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATCxaM1B1yHxTKCim489EDtpfkQnRymMkVNeiTH+Sr4qQXJUt9IQlLwrUdZ2z
m0qACqZ5meeddqnrrqrJXcs3RbBVU+4Z5vrQNFh3axsr7rAvJ80zgYNA5g/r8GdP
7/7MTSUU8QQc93cHnor+HLDKJU1+LBnXHkuUvRXJaT7VOGLHXmY/sMVFcEoiBPqd
yUZAkiCP7YgMinXAgjxLOzbpRa/H7kL2yt4gaB8HFs9MR5hqlX/pbMhhw9Nct4Nc
wwOf21lPWJtHIzynXD4kTukWS6WLCvcIs7QJ/EH0uQBFJKmY7X3omlgaDIHbKg6I
Kty1mXtaaBZiWSePE4urTuoNpA==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:36 2026 by rpki-client