Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
File:                     Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json)
Hash identifier:          aW+yfEB/HvQO6HgoXcQfjGvElHZSnZE7oKT05N9fzkY=
Subject key identifier:   D1:B7:38:2E:94:C1:C0:C2:51:4F:38:74:A2:EB:60:49:DA:18:18:89
Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
Certificate issuer:       /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
Manifest number:          0113
Signing time:             Mon 01 Jun 2026 06:43:47 +0000
Manifest this update:     Mon 01 Jun 2026 06:43:47 +0000
Manifest next update:     Mon 08 Jun 2026 06:43:47 +0000
Files and hashes:         1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: 0YdeTpMHloi2TaYpYKzPjEeiz+U0HdW+qpt+KhZpHSw=)
                          2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: fMdXJV+1ucniyu3k/11VAI6qy/FxoiJSc5x07sN7B60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
                          rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
        Validity
            Not Before: Jun  1 06:43:47 2026 GMT
            Not After : Jun  8 06:43:47 2026 GMT
        Subject: CN=6a1d2a23-114f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:9c:df:fe:ba:8d:83:69:b3:0a:26:8c:4b:
                    10:ab:c8:22:f2:8e:65:9a:44:91:a8:34:6a:33:90:
                    aa:60:64:7b:22:30:0e:56:7a:68:f5:02:1e:3b:7d:
                    13:5b:87:dc:22:17:95:76:93:bf:81:a1:0f:8c:e4:
                    1f:2b:ae:f7:ce:e9:12:78:b8:bd:3f:48:e2:0b:9f:
                    53:e4:cd:0d:af:2d:dd:15:81:dd:ca:5e:59:45:d0:
                    43:d3:8f:cb:57:01:46:0a:e3:bd:37:9c:ff:a6:df:
                    3f:3a:d1:bc:fc:b7:ae:2a:a4:b3:37:ef:d3:27:7d:
                    10:cc:98:77:5a:49:99:5b:da:c0:1a:6a:44:e4:b0:
                    0b:c8:ba:c0:6b:5b:03:1f:27:6f:e8:72:c3:97:2b:
                    a9:6e:ed:4a:50:f4:05:48:c6:83:6c:ee:ef:9e:b2:
                    a9:3d:bb:13:47:e7:01:9c:90:5e:12:3c:26:3b:e3:
                    90:56:32:4f:ab:5e:2d:db:59:f3:95:bc:eb:b3:b1:
                    4e:e6:ca:99:dc:6a:f9:14:61:48:00:5c:18:0c:91:
                    2c:d6:9b:13:a6:e5:de:1c:18:95:e3:ca:29:9a:95:
                    70:b3:86:32:4f:37:02:aa:2b:2b:02:f9:d2:51:8c:
                    ae:71:20:14:5a:63:14:62:49:fd:8a:d4:94:24:55:
                    5e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B7:38:2E:94:C1:C0:C2:51:4F:38:74:A2:EB:60:49:DA:18:18:89
            X509v3 Authority Key Identifier:
                keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:65:cc:6b:ac:9f:0e:9f:1f:2b:82:4f:77:41:1d:fa:70:e3:
         16:01:99:f1:6d:2a:91:d5:05:60:59:d1:73:b1:e1:68:22:64:
         68:0c:77:2f:f4:14:1c:d0:fa:4c:30:4e:a5:8c:06:ce:c2:29:
         01:8a:cf:46:ab:b1:1e:37:1f:47:93:74:3b:21:70:96:ed:40:
         09:35:47:e3:c5:69:b0:9d:24:ed:dd:46:69:f9:8d:55:42:85:
         63:0e:e9:18:b4:ec:6a:76:da:45:a3:55:b9:0d:8f:5b:df:bc:
         bd:39:72:c7:57:df:89:4c:93:ae:15:01:d1:cd:db:3c:04:b2:
         7b:69:ff:72:1c:e6:57:5a:98:ff:f8:be:b6:4e:b8:ed:bc:dc:
         de:bb:02:6f:52:2d:90:28:2c:51:5a:a4:d7:5f:dc:e2:37:52:
         26:fd:35:74:fd:e7:df:a9:f8:9c:b0:99:0e:a9:b9:12:b1:37:
         56:4f:f4:38:3e:f2:cd:41:fc:12:01:27:e9:9a:f8:42:a3:c0:
         eb:42:f9:fb:dc:96:ce:69:14:6f:d6:70:c5:c3:bb:72:64:83:
         69:29:e2:32:3b:aa:f8:92:14:dd:9a:95:3f:7c:91:18:76:e2:
         7d:a4:1e:06:a3:38:2e:f6:70:e8:e4:cc:25:0f:21:4e:10:dd:
         5b:03:e3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:11 2026 by rpki-client