Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
File:                     kpiJu1006GCsv3CJQzekYsHWrC4.mft (raw, json)
Hash identifier:          RiFABdp9pvoXER2gOJzs1RMq5RyXxmI4616WCWah3H8=
Subject key identifier:   DE:3D:F5:F2:76:E3:46:F7:F6:98:E4:29:AA:0C:4C:D3:BE:8B:1A:A8
Authority key identifier: 92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E
Certificate issuer:       /CN=A91CF83F/serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E
Certificate serial:       0DA8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
Manifest number:          0D95
Signing time:             Mon 22 Jun 2026 17:55:14 +0000
Manifest this update:     Mon 22 Jun 2026 17:55:14 +0000
Manifest next update:     Mon 29 Jun 2026 17:55:14 +0000
Files and hashes:         1: kpiJu1006GCsv3CJQzekYsHWrC4.crl (hash: mCZ3/fku9kFIezxiW5QqUmMxCPULMn3YrZ3Mt9elVgg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl
                          rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 17:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3496 (0xda8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF83F, serialNumber=929889BB5D34E860ACBF70894337A462C1D6AC2E
        Validity
            Not Before: Jun 22 17:55:14 2026 GMT
            Not After : Jun 29 17:55:14 2026 GMT
        Subject: CN=6a397702-ceec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:0a:13:42:45:b0:9e:f4:cd:ba:b6:0b:a9:
                    2a:6f:74:f2:36:cd:6b:47:6c:6d:fd:ec:2f:46:d7:
                    42:de:af:79:99:0c:4b:10:11:50:78:cb:5e:99:71:
                    d4:e4:13:c8:33:21:31:f9:07:07:e1:d1:9b:ba:c3:
                    9a:a1:26:0c:13:92:f8:9c:5e:67:2c:9a:8f:26:5d:
                    e2:95:2c:fd:23:9f:92:7d:68:ea:4d:26:b7:66:b6:
                    18:30:62:42:54:af:2d:b9:62:6e:86:64:bc:ea:33:
                    a9:ea:e8:9f:b6:d0:d1:88:80:a3:45:1c:3a:12:c8:
                    82:2c:e7:f5:b4:12:cd:5b:5c:00:8f:42:84:41:17:
                    7a:d5:e6:96:00:fd:24:d1:38:75:cd:78:ad:57:1e:
                    11:2b:ca:8d:34:ff:d0:fc:f5:a9:78:ae:ef:45:20:
                    a3:e2:60:d9:4b:6e:ef:20:67:3b:af:ba:a5:0c:52:
                    e7:86:aa:bf:92:3e:1e:56:f5:59:bf:43:a3:66:21:
                    fe:9c:2e:be:5a:d9:ec:14:e0:13:91:33:a4:f5:4a:
                    a8:4d:19:f6:19:81:3b:d3:1d:c6:c2:8a:07:2c:2a:
                    6a:23:48:30:44:98:6d:bc:84:32:94:df:55:6c:b3:
                    b6:9b:5e:26:94:0d:7f:d3:20:a5:c9:aa:31:7c:07:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3D:F5:F2:76:E3:46:F7:F6:98:E4:29:AA:0C:4C:D3:BE:8B:1A:A8
            X509v3 Authority Key Identifier:
                keyid:92:98:89:BB:5D:34:E8:60:AC:BF:70:89:43:37:A4:62:C1:D6:AC:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpiJu1006GCsv3CJQzekYsHWrC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF83F/89238ECCEF4F11E99DE47F0CC4F9AE02/kpiJu1006GCsv3CJQzekYsHWrC4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b8:94:74:1b:bb:60:4b:5d:60:07:ee:7f:0d:60:b9:30:8c:
         a6:96:8b:66:18:83:d1:3f:1e:2c:ce:4c:70:b3:55:73:4a:df:
         13:95:b8:a3:02:00:af:0e:c0:02:fc:c6:13:83:0a:9f:72:a2:
         e6:a9:81:ba:34:e7:01:5f:3c:2c:de:d1:4f:34:cd:98:e2:5a:
         f9:d1:1b:80:f1:77:1d:3e:e6:3f:e0:d3:3e:8b:49:6e:88:de:
         f6:5b:b0:69:a0:ff:09:11:35:d5:22:fe:09:e1:91:c4:e0:88:
         7c:ca:32:36:47:f5:8f:c2:4b:7e:3c:12:24:ab:c7:ef:1d:fd:
         35:e6:f5:3c:28:6f:33:f7:eb:a1:7c:fb:5e:9e:94:b2:66:81:
         b4:1c:a2:0f:a6:32:4e:15:55:d2:a4:dd:91:66:b1:42:14:0c:
         33:b8:69:ec:ad:eb:e5:93:e6:46:68:17:ec:00:57:f6:86:7e:
         ee:83:a3:1c:f4:3c:14:f2:dd:64:30:8d:28:ee:c8:4c:08:fb:
         1f:e3:66:d6:11:89:8f:17:76:a3:bd:52:e1:e6:6e:01:d2:7f:
         f9:62:82:66:1c:a7:6a:5c:cd:a6:3d:13:38:26:31:af:cc:46:
         a6:32:5f:e7:08:a4:98:46:64:22:bc:14:d2:9e:75:7a:01:ff:
         17:0d:80:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:17:13 2026 by rpki-client