Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
File:                     KUr5pNDtlrY5KVxYc9z-KJ8no20.mft (raw, json)
Hash identifier:          RW/Vob+0+gtMEMr9uy6tmDyopkKU6/80UiW1mjgY3+Y=
Subject key identifier:   12:0A:8C:6F:98:AF:55:6C:6E:F7:16:FC:4D:63:03:41:1F:64:20:FF
Authority key identifier: 29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D
Certificate issuer:       /CN=A9199095/serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
Manifest number:          23
Signing time:             Tue 23 Jun 2026 09:07:20 +0000
Manifest this update:     Tue 23 Jun 2026 09:07:20 +0000
Manifest next update:     Tue 30 Jun 2026 09:07:20 +0000
Files and hashes:         1: KUr5pNDtlrY5KVxYc9z-KJ8no20.crl (hash: lLnp6ZY4R3iGH7vEDw1Y2qbZww6QiEl0f78a8Cyy9i8=)
                          2: 80748E243E2C11F19772AA47B7833773.roa (hash: dDD9Ne2VF73KrNd/l166hkPzmv6wE6K5s6s/cWNJHfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl
                          rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 09:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199095, serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D
        Validity
            Not Before: Jun 23 09:07:20 2026 GMT
            Not After : Jun 30 09:07:20 2026 GMT
        Subject: CN=6a3a4cc8-c1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:20:80:78:63:c5:4a:9a:30:36:a1:40:e0:f3:
                    ff:aa:df:de:3a:bc:db:13:80:42:da:f7:7a:0a:81:
                    08:53:78:b9:81:eb:21:17:0f:a1:7a:2b:5c:fb:e7:
                    57:a8:b5:81:2a:fc:54:ac:be:4c:e8:4c:b9:91:d3:
                    88:36:4e:f7:5a:53:b8:19:db:a6:c8:fe:a0:2f:9d:
                    ce:be:08:2f:9a:98:d4:7e:14:16:3a:80:e0:33:5e:
                    18:6b:75:84:49:51:d2:3d:e0:10:f4:30:7e:c3:2d:
                    af:ff:e0:4c:d1:5c:49:88:04:a1:9f:2d:33:01:34:
                    52:52:77:33:ee:47:68:0a:01:25:5a:c5:59:f1:a7:
                    02:4e:a6:f3:25:a6:f6:ce:c4:76:91:8f:53:ba:5c:
                    1d:97:4e:fd:37:e8:b0:22:b7:3b:13:1b:39:fa:c3:
                    05:bd:b1:05:05:ae:00:be:d4:1a:9e:a1:61:60:70:
                    be:f6:f7:29:64:09:c4:55:67:14:7d:59:8d:a8:57:
                    65:f1:9c:5f:da:6c:5a:d3:9e:bd:43:06:5b:95:22:
                    7c:eb:c8:ab:25:2b:14:dd:ac:a1:bf:93:cc:4c:df:
                    fc:71:55:54:a6:3b:52:e6:d2:b2:77:a9:ba:56:5e:
                    cd:92:d5:92:ca:94:84:11:d1:7c:76:6b:2d:c8:45:
                    65:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0A:8C:6F:98:AF:55:6C:6E:F7:16:FC:4D:63:03:41:1F:64:20:FF
            X509v3 Authority Key Identifier:
                keyid:29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:61:1f:ef:e6:f3:6b:bc:63:0e:16:90:f6:7b:47:ca:79:60:
         fb:e0:30:e7:fe:6e:76:22:8e:a0:8e:51:64:ad:34:d4:88:a4:
         9a:7a:ad:ef:3b:fc:e8:f0:b1:62:8e:0b:f3:3c:f5:91:fd:36:
         1b:f8:33:71:e6:ca:29:1f:3f:35:9b:ae:54:78:26:24:09:bc:
         f2:a6:b7:b8:6e:55:fe:d2:d4:7b:82:35:55:0f:76:2e:43:95:
         bf:20:f3:29:5f:7c:19:29:bf:a3:00:78:c3:52:58:7e:96:7c:
         22:55:f1:c7:dd:82:74:33:a3:f8:2b:da:da:2d:2d:44:fb:28:
         91:d1:83:24:27:d9:8b:f2:a0:95:ac:a5:b6:26:d6:d8:31:8d:
         3a:48:bb:56:3f:ca:c5:52:08:a6:66:2b:0a:03:fd:db:c7:53:
         58:7a:1b:85:77:53:7e:60:fc:5f:8c:b0:4f:7e:e5:ad:de:d2:
         2e:83:e8:23:81:ce:68:f5:81:fd:4b:7d:b7:94:2e:0e:ff:ec:
         48:c1:65:c8:e9:a8:50:63:91:3f:86:1b:f9:25:bb:37:18:36:
         53:0c:dd:a5:eb:a6:f7:80:4f:f3:8f:04:fe:59:fe:74:5c:80:
         dd:c3:03:11:30:6c:e7:e6:2f:4c:35:03:00:69:3f:33:75:45:
         68:3e:17:8d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OTA5NTExMC8GA1UEBRMoMjk0QUY5QTREMEVEOTZCNjM5Mjk1QzU4NzNEQ0ZFMjg5
RjI3QTM2RDAeFw0yNjA2MjMwOTA3MjBaFw0yNjA2MzAwOTA3MjBaMBgxFjAUBgNV
BAMTDTZhM2E0Y2M4LWMxZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNIIB4Y8VKmjA2oUDg8/+q3946vNsTgELa93oKgQhTeLmB6yEXD6F6K1z751eo
tYEq/FSsvkzoTLmR04g2TvdaU7gZ26bI/qAvnc6+CC+amNR+FBY6gOAzXhhrdYRJ
UdI94BD0MH7DLa//4EzRXEmIBKGfLTMBNFJSdzPuR2gKASVaxVnxpwJOpvMlpvbO
xHaRj1O6XB2XTv036LAitzsTGzn6wwW9sQUFrgC+1BqeoWFgcL729ylkCcRVZxR9
WY2oV2XxnF/abFrTnr1DBluVInzryKslKxTdrKG/k8xM3/xxVVSmO1Lm0rJ3qbpW
Xs2S1ZLKlIQR0Xx2ay3IRWVvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEgqMb5iv
VWxu9xb8TWMDQR9kIP8wHwYDVR0jBBgwFoAUKUr5pNDtlrY5KVxYc9z+KJ8no20w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5MDk1LzZCQTZGMTE2M0Uy
ODExRjFCOEY4RkVBNUI1ODMzNzczL0tVcjVwTkR0bHJZNUtWeFljOXotS0o4bm8y
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvS1VyNXBORHRsclk1S1Z4WWM5ei1LSjhubzIwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5
MDk1LzZCQTZGMTE2M0UyODExRjFCOEY4RkVBNUI1ODMzNzczL0tVcjVwTkR0bHJZ
NUtWeFljOXotS0o4bm8yMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB9YR/v5vNrvGMOFpD2e0fKeWD74DDn/m52Io6gjlFkrTTUiKSaeq3vO/zo8LFi
jgvzPPWR/TYb+DNx5sopHz81m65UeCYkCbzypre4blX+0tR7gjVVD3YuQ5W/IPMp
X3wZKb+jAHjDUlh+lnwiVfHH3YJ0M6P4K9raLS1E+yiR0YMkJ9mL8qCVrKW2JtbY
MY06SLtWP8rFUgimZisKA/3bx1NYehuFd1N+YPxfjLBPfuWt3tIug+gjgc5o9YH9
S323lC4O/+xIwWXI6ahQY5E/hhv5Jbs3GDZTDN2l66b3gE/zjwT+Wf50XIDdwwMR
MGzn5i9MNQMAaT8zdUVoPheN
-----END CERTIFICATE-----
Generated at Wed Jun 24 15:04:39 2026 by rpki-client