Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
File:                     kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft (raw, json)
Hash identifier:          /yNfcqbDPn8aw3v6FonCqpIzvHSAN6Enz3YdVfh/S54=
Subject key identifier:   37:DB:32:2C:4F:F9:79:CB:46:4E:16:55:C3:9C:A0:32:D5:C0:0C:EE
Authority key identifier: 92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84
Certificate issuer:       /CN=A91B952E/serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
Certificate serial:       04FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
Manifest number:          04F8
Signing time:             Thu 11 Jun 2026 01:51:55 +0000
Manifest this update:     Thu 11 Jun 2026 01:51:54 +0000
Manifest next update:     Thu 18 Jun 2026 01:51:54 +0000
Files and hashes:         1: kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl (hash: ngC0rjHm/dTaTn+niG/jwkTOu1FEkINyBtD8wvyNl0w=)
                          2: 02D13C94D4B211F093413921C4F9AE02.roa (hash: 5S6cmEeP7M2EZTlTeoJaoR5wTUKBQoK3xjSaXGSNves=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 01:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1279 (0x4ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B952E, serialNumber=9229199535EBEE4472A22FC5195B0A7EFFCB6684
        Validity
            Not Before: Jun 11 01:51:54 2026 GMT
            Not After : Jun 18 01:51:54 2026 GMT
        Subject: CN=6a2a14bb-81e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:eb:fe:f6:45:eb:b1:97:cf:4b:85:8b:f5:
                    5c:18:9d:a3:26:14:8a:9c:5a:30:00:32:00:58:86:
                    dd:8a:0d:8e:e6:8c:e9:b4:55:52:b2:01:68:cf:9c:
                    2c:04:cd:b7:b2:b0:c2:47:13:6f:48:c1:0c:cd:56:
                    42:68:34:bb:24:83:09:fb:21:a4:dd:c5:91:b3:be:
                    0a:d6:6d:a7:05:1a:33:22:3e:43:cc:42:76:2a:43:
                    9d:e2:96:67:03:d4:42:5d:c3:43:6a:5b:1a:92:19:
                    85:f7:f0:c6:70:ef:ba:96:65:e2:cf:d5:e2:69:63:
                    b5:a9:ce:03:ef:84:e3:fc:d4:63:5e:45:9e:56:3f:
                    08:0e:28:03:3f:c3:b6:66:ed:8b:43:37:58:83:30:
                    59:e6:61:62:91:c3:d2:b4:ca:33:65:00:b9:30:e0:
                    b8:a7:67:fc:cf:a2:40:e6:28:5a:0a:63:bf:1e:c6:
                    ee:68:82:e2:59:50:6b:f0:ad:62:b8:cd:fc:1a:89:
                    e9:cf:5c:15:09:28:cf:bc:a0:4e:03:81:9e:bc:82:
                    f3:d0:b8:13:71:f6:8d:10:26:60:ca:91:46:d1:34:
                    e2:92:24:61:61:00:58:fb:54:39:e1:c6:77:65:8b:
                    9f:ac:54:73:f6:6e:b7:97:65:6d:e4:77:d1:36:fd:
                    a1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DB:32:2C:4F:F9:79:CB:46:4E:16:55:C3:9C:A0:32:D5:C0:0C:EE
            X509v3 Authority Key Identifier:
                keyid:92:29:19:95:35:EB:EE:44:72:A2:2F:C5:19:5B:0A:7E:FF:CB:66:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kikZlTXr7kRyoi_FGVsKfv_LZoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B952E/83CF811660E411ECAD188D34C4F9AE02/kikZlTXr7kRyoi_FGVsKfv_LZoQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:79:2b:dc:61:dd:8e:5d:cf:62:5e:85:61:ea:6a:6c:de:0e:
         01:4a:26:38:15:29:a6:0f:93:e1:62:cb:5d:1d:c5:79:b0:46:
         6a:bc:86:39:e0:9a:04:c3:5a:a2:ee:73:6d:24:24:5d:92:59:
         66:91:59:9f:46:fd:5b:20:ea:cc:5e:6c:cb:db:82:5c:fc:77:
         8f:31:f7:63:24:98:96:02:ff:eb:5f:cd:2e:12:f5:4a:1a:3e:
         20:ae:98:d0:52:68:f7:e3:ac:49:99:18:82:22:5e:26:9f:e8:
         78:8d:ce:c0:17:02:16:ed:94:fc:8d:66:3e:5b:83:4e:64:e9:
         22:a3:92:56:d4:53:d9:dd:98:99:11:56:3f:4d:66:5c:fa:d9:
         43:06:4a:d3:58:38:20:f7:f2:d1:d1:0e:6e:dc:04:6d:7a:21:
         41:f6:cb:ae:f0:21:3d:bc:4b:3b:a5:37:3d:4d:b6:5d:e0:02:
         1b:d5:ed:59:de:03:53:81:53:47:50:cb:90:e5:7b:6a:00:99:
         c0:71:21:05:9c:64:eb:49:63:67:a7:53:22:5f:f8:5d:ac:c8:
         6a:f5:c6:67:02:28:3f:e0:8a:2e:b1:f4:0c:98:5d:9b:1b:9e:
         9e:fe:31:8c:bc:9b:bf:d7:a0:26:fe:23:d5:7e:99:a4:68:03:
         18:8c:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 19:14:26 2026 by rpki-client