Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
File:                     K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json)
Hash identifier:          TByILcbmPFaTM+kVX8cffb9gzSIhW1M0HGjStDbDnMI=
Subject key identifier:   EE:B5:40:8F:36:44:EF:F2:D6:D5:34:14:6F:25:9B:6F:FA:0D:E5:2A
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Certificate issuer:       /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial:       048D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
Manifest number:          0477
Signing time:             Mon 29 Jun 2026 00:25:09 +0000
Manifest this update:     Mon 29 Jun 2026 00:25:09 +0000
Manifest next update:     Mon 06 Jul 2026 00:25:09 +0000
Files and hashes:         1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: tOWEmdfvBPaZBSPKi3jRTgZrgQd7IFalyaN5nH+Q42M=)
                          2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: aCuYK0mgowCd/JFxG2trGhyPvdOUhFVgYIy44ZAWkes=)
                          3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: Hk1kLc16bFyVSqCk3vaZyzmEpQAFNe8SSUO2IPtxM1U=)
                          4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: +Csg2HOJepirMsB8Vzghrd3DehAyOhqy3cud4l2RxN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
                          rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 00:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1165 (0x48d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
        Validity
            Not Before: Jun 29 00:25:09 2026 GMT
            Not After : Jul  6 00:25:09 2026 GMT
        Subject: CN=6a41bb65-9623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:af:5f:9c:61:f7:0d:3a:09:82:87:bf:fa:
                    81:43:f8:d0:72:33:ff:06:29:1a:40:ce:70:64:bd:
                    98:99:67:01:c9:e4:65:34:20:5f:b5:24:54:e6:6e:
                    39:d7:01:cd:26:48:f6:4d:af:d3:98:c4:f3:6f:a4:
                    81:61:64:08:4e:0b:e8:ef:27:bc:79:95:35:c0:84:
                    36:a8:50:4a:16:dd:7f:f1:c0:3c:4a:bb:4c:e7:a4:
                    df:09:74:f9:5c:4a:59:ff:24:39:95:b6:8c:01:01:
                    99:c7:42:10:b7:26:ec:5b:c8:f9:d9:d6:de:bd:fc:
                    d6:a5:81:47:af:ae:1e:60:51:a6:85:64:8a:f7:9b:
                    c2:22:b5:db:d2:0f:c3:68:ef:ba:49:17:03:ad:da:
                    43:2e:88:67:4d:56:3c:dd:18:74:70:7a:54:f4:4a:
                    a8:42:25:1b:6e:7c:b1:47:6f:8d:ea:06:47:4f:21:
                    27:56:b8:a9:ea:9f:8c:75:96:cb:f9:db:09:f3:e1:
                    6d:f1:21:80:fd:2f:84:06:bc:a0:74:b6:08:28:44:
                    d9:c1:96:72:fa:34:fb:b4:7f:23:bf:1f:e3:e3:63:
                    86:40:22:67:5f:6b:34:57:5f:34:d2:d2:86:2a:97:
                    0b:8f:2c:1e:9f:dc:ae:37:75:58:8d:b5:f1:46:cb:
                    1d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B5:40:8F:36:44:EF:F2:D6:D5:34:14:6F:25:9B:6F:FA:0D:E5:2A
            X509v3 Authority Key Identifier:
                keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:76:38:7d:eb:1d:f2:7c:5e:62:d3:1e:81:9b:63:49:a8:5b:
         ec:42:34:ea:af:68:8e:68:58:c3:6b:22:4f:36:81:b3:ad:6a:
         21:f1:aa:24:84:b5:7e:de:03:11:a4:17:a1:e6:57:ca:a1:b3:
         d3:f0:f9:c1:cf:d4:91:43:b3:8d:61:50:ca:95:13:7c:27:cb:
         06:0c:a9:21:15:18:a3:71:d1:65:55:57:7d:70:93:bc:e8:67:
         88:3e:ae:4d:8a:f2:db:88:77:1f:85:cf:86:6d:9c:e9:04:1d:
         5e:c6:d6:57:2a:26:54:69:15:9b:4f:5b:95:ef:81:cc:ca:50:
         18:2e:2c:26:34:db:2e:c3:41:57:72:54:9d:0d:9f:7d:93:5a:
         4b:51:d3:0a:07:97:b7:f7:09:d0:47:23:b5:c3:40:6e:de:0a:
         59:d4:d8:43:b4:d0:c5:7c:f1:90:48:01:fc:7b:e1:1b:5e:89:
         5e:98:5f:93:c8:e5:c1:b0:79:40:f2:3a:ff:29:b1:5b:27:a0:
         7c:d4:ea:c7:c9:bf:77:f4:49:d1:f3:af:e2:78:56:84:58:86:
         6a:c9:d6:1b:c1:51:7c:d9:9a:70:b5:6a:5a:5b:8c:41:a8:5d:
         52:d3:1b:35:2c:0e:e1:a2:24:c9:41:bc:ee:e6:41:d5:a1:84:
         c8:93:ad:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:24 2026 by rpki-client