Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft
File:                     KQN7v5LysPTDMKHN1KdiVs16VCI.mft (raw, json)
Hash identifier:          t9R2p6kiQjEbtq71sL4Oui8l3Dc5L8ZTQG5tLyavWuY=
Subject key identifier:   F5:E5:27:9B:E8:B5:79:68:B9:E8:6A:C2:27:07:82:AF:A2:9A:2F:2F
Authority key identifier: 29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22
Certificate issuer:       /CN=A91E9B89/serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft
Manifest number:          014C
Signing time:             Thu 11 Jun 2026 07:30:13 +0000
Manifest this update:     Thu 11 Jun 2026 07:30:12 +0000
Manifest next update:     Thu 18 Jun 2026 07:30:12 +0000
Files and hashes:         1: KQN7v5LysPTDMKHN1KdiVs16VCI.crl (hash: LFUHd0oxQLvkbIH9nmBFPcEPN05k/d+10MhGetgMt7k=)
                          2: 2025BD6C6C3311EF99E0EF34C4F9AE02.roa (hash: 1xxchiebCxLNftly6au7Pkd2xXnWXWVrUcEG++FarVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl
                          rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 07:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9B89, serialNumber=29037BBF92F2B0F4C330A1CDD4A76256CD7A5422
        Validity
            Not Before: Jun 11 07:30:12 2026 GMT
            Not After : Jun 18 07:30:12 2026 GMT
        Subject: CN=6a2a6404-665e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:42:d4:b2:b0:a2:1b:e8:8a:88:08:d6:ea:2b:
                    c8:ec:40:9b:9a:00:42:b4:4b:39:6f:61:84:f7:7f:
                    f8:5c:ef:5b:74:3c:aa:2d:a4:e1:5c:6b:fe:da:37:
                    0b:69:07:4f:97:47:97:3a:25:98:62:34:e7:df:0c:
                    9a:c9:2e:7d:a1:25:2d:dc:94:cb:2f:e1:90:f2:b7:
                    c4:4a:51:26:47:9b:46:7e:1b:89:43:4f:66:30:fe:
                    6d:89:26:61:c8:e5:56:b6:6b:f3:86:37:08:85:3c:
                    75:ba:ec:2f:aa:f5:c6:c6:96:e2:52:e4:58:81:24:
                    a3:73:5f:7d:e4:35:19:6a:00:fe:ff:76:a4:a5:7e:
                    00:87:a3:18:8c:42:8b:48:15:b3:99:47:03:e5:d8:
                    08:cc:42:76:da:c6:be:6b:18:c5:d3:21:42:06:f3:
                    90:ed:cf:14:73:b8:2c:f4:1a:5e:b2:8b:c7:91:3c:
                    05:d5:4e:7c:74:9d:ec:c3:1d:ff:0c:e1:28:4f:8a:
                    e4:86:c3:18:78:fe:99:88:3a:94:aa:2f:13:a2:ed:
                    03:72:b8:78:5c:46:98:b0:09:ce:fa:2e:1f:f8:96:
                    d3:73:39:50:5f:9a:ec:e9:90:12:79:c3:2c:f9:ed:
                    c7:6c:77:6e:56:f9:85:cf:4c:54:62:21:95:49:ec:
                    b5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E5:27:9B:E8:B5:79:68:B9:E8:6A:C2:27:07:82:AF:A2:9A:2F:2F
            X509v3 Authority Key Identifier:
                keyid:29:03:7B:BF:92:F2:B0:F4:C3:30:A1:CD:D4:A7:62:56:CD:7A:54:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQN7v5LysPTDMKHN1KdiVs16VCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/4367C20E6C1811EFAB6B690CC4F9AE02/KQN7v5LysPTDMKHN1KdiVs16VCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:18:f9:85:4a:c6:ef:2c:aa:f1:dc:64:e8:52:00:6e:ff:b0:
         cc:de:f5:8e:80:dd:07:28:12:72:d8:95:45:b5:e3:a0:b1:52:
         32:c7:5b:ea:ce:27:df:3b:bf:f2:e2:3b:ca:5a:39:33:c1:a7:
         e4:65:40:fe:f1:10:07:3c:ad:fa:d7:6b:d8:66:b1:f9:bd:9e:
         9c:bc:9d:d5:46:22:5b:68:4e:35:33:f4:b4:9b:84:87:67:e7:
         e3:dd:dd:cc:5f:96:b8:31:ed:5f:04:d6:2c:9d:ba:a6:61:3c:
         4b:ac:4a:87:2a:27:1c:8e:7c:03:39:e9:28:a3:78:40:83:b5:
         7a:f3:24:34:56:ad:65:5d:ab:62:96:2d:6b:6d:d2:cf:37:fb:
         0a:5f:cb:0e:da:f5:a0:72:5a:66:f1:5e:43:3e:04:94:54:f5:
         1c:bb:41:93:3a:33:f7:11:2f:df:ac:de:a6:b2:74:03:54:ba:
         b2:b0:4a:11:d2:69:e6:9f:b1:b7:2a:ea:6d:bf:eb:a1:6e:72:
         fe:37:82:c2:e7:76:25:83:7a:5d:48:2b:01:b6:ab:67:dc:0f:
         70:60:ed:9d:e2:9d:08:68:fa:1e:21:71:b3:53:2f:fd:09:ed:
         be:d0:10:d6:bb:0a:56:dd:88:f0:64:7e:a0:93:af:00:cf:2e:
         e9:b5:e1:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlCODkxMTAvBgNVBAUTKDI5MDM3QkJGOTJGMkIwRjRDMzMwQTFDREQ0QTc2MjU2
Q0Q3QTU0MjIwHhcNMjYwNjExMDczMDEyWhcNMjYwNjE4MDczMDEyWjAYMRYwFAYD
VQQDEw02YTJhNjQwNC02NjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo0LUsrCiG+iKiAjW6ivI7ECbmgBCtEs5b2GE93/4XO9bdDyqLaThXGv+2jcL
aQdPl0eXOiWYYjTn3wyayS59oSUt3JTLL+GQ8rfESlEmR5tGfhuJQ09mMP5tiSZh
yOVWtmvzhjcIhTx1uuwvqvXGxpbiUuRYgSSjc1995DUZagD+/3akpX4Ah6MYjEKL
SBWzmUcD5dgIzEJ22sa+axjF0yFCBvOQ7c8Uc7gs9BpesovHkTwF1U58dJ3swx3/
DOEoT4rkhsMYeP6ZiDqUqi8Tou0Dcrh4XEaYsAnO+i4f+JbTczlQX5rs6ZASecMs
+e3HbHduVvmFz0xUYiGVSey14wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXlJ5vo
tXlouehqwicHgq+imi8vMB8GA1UdIwQYMBaAFCkDe7+S8rD0wzChzdSnYlbNelQi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUI4OS80MzY3QzIwRTZD
MTgxMUVGQUI2QjY5MENDNEY5QUUwMi9LUU43djVMeXNQVERNS0hOMUtkaVZzMTZW
Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tRTjd2NUx5c1BURE1LSE4xS2RpVnMxNlZDSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUI4OS80MzY3QzIwRTZDMTgxMUVGQUI2QjY5MENDNEY5QUUwMi9LUU43djVMeXNQ
VERNS0hOMUtkaVZzMTZWQ0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlBj5hUrG7yyq8dxk6FIAbv+wzN71joDdBygSctiVRbXjoLFSMsdb6s4n3zu/
8uI7ylo5M8Gn5GVA/vEQBzyt+tdr2Gax+b2enLyd1UYiW2hONTP0tJuEh2fn493d
zF+WuDHtXwTWLJ26pmE8S6xKhyonHI58AznpKKN4QIO1evMkNFatZV2rYpYta23S
zzf7Cl/LDtr1oHJaZvFeQz4ElFT1HLtBkzoz9xEv36zeprJ0A1S6srBKEdJp5p+x
tyrqbb/roW5y/jeCwud2JYN6XUgrAbarZ9wPcGDtneKdCGj6HiFxs1Mv/QntvtAQ
1rsKVt2I8GR+oJOvAM8u6bXhPw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 10:10:33 2026 by rpki-client