Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
File:                     kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json)
Hash identifier:          YcPe8NnUgquMSQO+CwKSGM9QOCI0B7uxrKZX6LWXT78=
Subject key identifier:   75:47:CA:3B:F8:E0:5A:EA:DB:50:92:71:8E:A8:64:01:36:2C:84:94
Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
Certificate issuer:       /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Certificate serial:       01B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
Manifest number:          01AE
Signing time:             Tue 23 Jun 2026 04:16:54 +0000
Manifest this update:     Tue 23 Jun 2026 04:16:53 +0000
Manifest next update:     Tue 30 Jun 2026 04:16:53 +0000
Files and hashes:         1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: 3X44U4VAw3fbFfQmgpl6K6gM6AeqAPzUqxcFqJrOg+8=)
                          2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: DnFLfRNolDS9uaJNFyfTk6IoS5wsIvFbDILScGzhK3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
                          rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 04:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
        Validity
            Not Before: Jun 23 04:16:53 2026 GMT
            Not After : Jun 30 04:16:53 2026 GMT
        Subject: CN=6a3a08b6-0c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:72:6f:dc:ef:e6:ee:05:79:e6:f9:d3:f7:
                    70:93:fe:16:f2:97:f2:c1:b8:02:6f:73:9f:6f:75:
                    ff:e5:e1:55:0c:af:b6:04:c4:d5:a2:71:94:68:50:
                    c5:e6:7f:bb:48:e4:8e:d6:28:52:5e:ad:2e:9b:58:
                    13:f4:17:d1:79:b7:55:96:d9:de:2e:3f:64:c1:b7:
                    96:94:a2:3d:b3:99:f0:3a:c2:c8:ad:e5:56:3d:8d:
                    47:4d:8f:13:03:72:57:94:94:a3:4f:e9:a6:6f:67:
                    ca:3c:3d:17:dc:9c:30:ac:3c:22:ad:03:61:f0:95:
                    26:56:55:7c:70:7c:34:5e:d3:bf:58:02:66:41:b5:
                    4b:a6:50:ad:b9:5f:84:e1:4d:55:e6:01:7d:15:13:
                    70:d0:29:04:47:a4:31:78:50:5c:ca:63:6b:0d:65:
                    5e:f2:dc:92:b2:b9:40:a1:49:3f:ff:da:1c:38:4c:
                    76:39:61:95:aa:88:c7:e9:43:c6:e7:eb:32:04:4a:
                    d8:7d:de:f5:2d:6f:be:47:e9:2b:c6:90:2a:34:6f:
                    84:98:25:df:37:d6:99:ca:c9:f0:97:66:fb:38:18:
                    d3:65:71:1d:b2:00:28:9f:b7:55:2d:02:2f:e0:5c:
                    6b:2a:f2:ed:b5:17:13:d5:54:01:bd:e4:f0:64:00:
                    2c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:47:CA:3B:F8:E0:5A:EA:DB:50:92:71:8E:A8:64:01:36:2C:84:94
            X509v3 Authority Key Identifier:
                keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:cc:61:56:10:2e:55:21:0d:41:a7:4b:06:4c:b0:47:f5:c7:
         45:28:3c:bd:e3:f1:73:4c:ca:e8:62:12:1e:db:ed:da:23:56:
         9b:e9:58:8d:45:10:7a:7b:c5:c2:c8:0c:f1:cb:95:04:19:88:
         b7:02:43:93:7c:f6:2d:6f:3d:5c:6a:3e:94:33:79:2c:fc:66:
         09:6b:27:39:d1:98:21:14:2d:f3:42:cd:57:40:27:69:28:19:
         26:7c:f4:7b:a3:f2:f8:f4:be:3d:cf:e7:31:2f:63:fe:ab:e0:
         5f:e9:fc:6a:fb:25:2b:4b:9e:65:94:fe:94:9e:25:3f:fb:4a:
         24:55:19:81:e6:7f:c5:3f:ac:ed:ac:75:1b:d3:84:31:74:b1:
         b2:9a:5d:81:d9:21:8c:11:43:c0:38:36:ab:81:cc:c9:6d:c8:
         62:7a:37:2a:4d:60:82:a5:79:bf:66:db:a9:b8:a4:c7:b5:0a:
         b4:91:35:97:09:0d:a6:02:c1:23:fd:a8:8e:e4:a3:3e:bf:f8:
         57:61:0b:d8:d4:2c:a5:b8:15:56:86:1c:42:b5:ca:4d:07:de:
         cc:4f:ce:b4:47:14:f8:3e:e4:b4:d3:c1:3a:f2:65:51:15:cc:
         ff:24:30:8c:ec:e8:75:35:2a:af:0f:66:e9:3f:a8:c5:8f:24:
         bc:71:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:59 2026 by rpki-client