Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
File:                     KbaocCpK1kSocQZLZAet5JPmOo0.mft (raw, json)
Hash identifier:          O8uMvYVqWPLQyC/O7nTyCH925/p+CW3o9UjB4Zx7tuo=
Subject key identifier:   17:F3:24:37:D9:28:11:22:99:10:F4:76:8A:E0:A4:58:DB:00:59:70
Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D
Certificate issuer:       /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
Certificate serial:       1A6C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
Manifest number:          1A41
Signing time:             Tue 02 Jun 2026 16:20:20 +0000
Manifest this update:     Tue 02 Jun 2026 16:20:20 +0000
Manifest next update:     Tue 09 Jun 2026 16:20:20 +0000
Files and hashes:         1: KbaocCpK1kSocQZLZAet5JPmOo0.crl (hash: 1NqFKvKXv6+dH3KmOzpkM0hfuFXKy6/K3WsNdkmqeZw=)
                          2: 92AEE092378211EFAEB6B36DC4F9AE02.roa (hash: Sw7KRJ3Hz6dAXQ9/sIjAX/GFlM314WtidHFZ3x1gnFQ=)
                          3: E7729178378211EF822BAA6EC4F9AE02.roa (hash: FC6f6swDrytiXT9xRSCl2yrTExj3rPMVZ/X6aFbgLFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl
                          rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6764 (0x1a6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
        Validity
            Not Before: Jun  2 16:20:20 2026 GMT
            Not After : Jun  9 16:20:20 2026 GMT
        Subject: CN=6a1f02c4-a546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:a6:e8:d3:e5:08:cb:e3:4c:0e:d4:97:7b:
                    7e:0e:b2:53:00:36:5b:a4:c7:f3:e5:f9:05:38:57:
                    9b:27:db:c0:28:e0:79:9c:02:65:d6:b7:db:8c:77:
                    ca:b9:88:00:25:2f:fa:ba:fa:72:4e:d1:40:b0:ed:
                    7b:f6:9d:bb:4f:d0:58:52:3d:aa:50:f2:d9:97:7c:
                    3a:86:27:b3:59:b6:22:7d:06:07:21:62:d3:0f:27:
                    cd:b2:7f:1a:e3:fa:4e:c7:1b:b5:e7:24:c5:a4:a2:
                    6c:67:93:9e:e4:11:60:02:3a:38:ec:1e:1c:60:09:
                    bc:83:cd:13:f0:a7:27:86:22:d5:86:9b:69:8a:b3:
                    cd:86:d9:ef:a3:f7:f1:6f:99:f3:24:c1:db:ab:17:
                    78:9b:e9:6c:10:da:fe:94:1f:f8:f0:1e:5c:40:9a:
                    6b:75:71:54:1b:41:8f:8e:99:2c:75:a9:e5:f4:71:
                    44:d2:1b:78:2e:c3:1b:d1:bf:b1:26:88:3d:86:d3:
                    ac:96:59:a4:18:26:0a:4f:86:a6:80:18:4a:87:05:
                    f4:ba:78:ce:97:55:8b:b3:56:cb:26:ce:0d:b6:e2:
                    90:42:17:2f:a7:4b:ea:49:f9:91:92:9b:fc:96:af:
                    5b:e5:af:da:49:4a:0d:f5:53:e2:8b:4d:fa:6f:a5:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F3:24:37:D9:28:11:22:99:10:F4:76:8A:E0:A4:58:DB:00:59:70
            X509v3 Authority Key Identifier:
                keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:42:38:5b:06:61:ac:a3:3a:a6:1a:ef:40:b5:90:ea:f7:97:
         13:69:40:ee:27:c2:bd:bb:55:2b:27:12:b9:e7:1e:b2:87:80:
         55:4e:6f:f8:33:1a:47:66:37:cd:cc:74:95:a6:08:bd:a8:df:
         d6:a7:51:94:6c:f5:2c:25:67:38:cc:43:dc:a1:52:e8:86:03:
         68:6d:e2:05:2f:20:b3:8f:d3:7b:73:28:06:f2:bb:60:40:b1:
         77:c1:0e:3b:5e:50:76:84:37:ee:e0:db:2c:1d:7d:c0:26:04:
         f6:e1:5b:7c:cc:8e:cb:cf:00:a6:1a:b5:c9:b4:b9:7b:9c:24:
         80:46:63:9c:41:9e:80:88:b3:14:bd:35:62:a7:5b:f8:bd:ee:
         7c:d8:05:d4:cc:67:37:fc:36:59:74:41:4f:b6:b2:8f:4d:61:
         a5:28:05:b6:20:f2:4a:98:7f:d6:9d:7a:54:4b:bf:26:b3:37:
         b3:77:04:53:5b:28:5f:14:68:6e:28:ea:9c:6e:f6:47:b1:f2:
         1a:35:7b:d9:07:ee:39:f5:ec:e4:72:ee:87:cc:a2:c3:f3:98:
         d6:94:90:79:1a:c3:26:68:54:95:3b:24:46:6f:78:ea:45:94:
         0d:f2:ec:28:6d:90:c6:73:30:b3:51:1a:0f:7e:41:fa:9f:19:
         79:19:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:10 2026 by rpki-client