Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
File:                     kTOsvs_e7PTaOiIigng09bc6-qc.mft (raw, json)
Hash identifier:          cptx9Ng0KyOZ4+M9LIJAKfQ8ZRbwsqX+KCLdAYolKHc=
Subject key identifier:   EE:D9:93:D2:50:E3:70:7D:B1:E3:19:17:86:BE:A6:D8:82:5A:84:A6
Authority key identifier: 91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7
Certificate issuer:       /CN=A91F79A2/serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
Manifest number:          0171
Signing time:             Mon 01 Jun 2026 05:26:41 +0000
Manifest this update:     Mon 01 Jun 2026 05:26:41 +0000
Manifest next update:     Mon 08 Jun 2026 05:26:41 +0000
Files and hashes:         1: kTOsvs_e7PTaOiIigng09bc6-qc.crl (hash: 12xpyOyVj256gK7S/7adVXZhfpOoL3NWgwbO66nDMzI=)
                          2: 6B9D491C379A11F0B3AC7740C4F9AE02.roa (hash: LMXTxM7l4JdcF/ON7Kkss11xFLRKbb61J2H/ZhTQ8eY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl
                          rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F79A2, serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
        Validity
            Not Before: Jun  1 05:26:41 2026 GMT
            Not After : Jun  8 05:26:41 2026 GMT
        Subject: CN=6a1d1811-c202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:df:b7:f3:0b:7d:6c:9c:e8:4d:e4:47:c0:41:
                    d1:4b:3e:87:ec:c3:f2:79:28:53:ba:dc:9f:c2:9c:
                    9a:9f:df:c4:0c:b7:94:cf:70:60:fe:9c:de:2b:0a:
                    4a:72:6e:c0:5e:c6:39:39:2f:d9:56:9d:fe:1d:9a:
                    21:34:fa:40:9c:56:cd:1c:2a:32:4f:8a:fe:df:d9:
                    5c:7a:e8:ff:97:a0:31:8f:eb:c8:08:69:92:44:2b:
                    2d:b2:cf:e7:70:af:87:cc:59:15:8b:dc:72:02:94:
                    73:d7:2b:8e:92:a0:89:b8:e6:89:89:fe:b0:9e:25:
                    11:f6:3d:5e:4e:f9:6d:78:f2:02:3b:dd:e6:1d:f3:
                    42:52:53:17:1d:8d:c3:e0:49:79:90:e2:8b:25:cb:
                    9f:89:49:87:52:cf:7b:02:df:e9:29:c1:4c:cc:14:
                    dc:4f:e1:25:24:f8:0d:0c:31:7d:66:d7:5a:ba:04:
                    49:b0:fc:94:d7:78:d0:ba:e9:94:4b:a7:1e:ef:8d:
                    2a:63:51:2e:0c:72:30:31:3e:5d:d7:21:9f:6d:a7:
                    d3:80:41:a2:e0:a8:24:f9:5b:89:6f:df:15:92:64:
                    26:eb:a6:d5:b7:5f:42:21:21:bb:2e:14:c9:cb:be:
                    a2:7c:cd:54:1d:a9:b7:f5:5f:fb:fe:ec:67:40:ac:
                    52:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D9:93:D2:50:E3:70:7D:B1:E3:19:17:86:BE:A6:D8:82:5A:84:A6
            X509v3 Authority Key Identifier:
                keyid:91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8f:4a:6f:c2:5d:5c:e4:8a:fe:00:44:cf:a3:c9:e2:10:2c:
         0d:d5:91:63:04:ae:e3:c1:81:83:2a:93:4a:e9:1f:80:d7:de:
         7a:1c:6d:c3:12:93:f0:90:07:8c:5b:0d:af:81:43:00:0a:37:
         2f:b5:3a:64:24:41:29:39:ad:90:c8:44:41:42:43:60:b0:51:
         12:ca:e4:80:75:d3:54:53:23:3b:e1:4a:b8:ab:39:f1:69:c1:
         61:5a:f3:9d:29:d4:5d:26:6a:66:4a:28:bd:2e:d4:e3:52:3b:
         2f:b4:a2:37:73:01:ba:24:0d:5a:e2:74:7c:27:20:0f:05:a4:
         5b:67:aa:ef:81:f2:df:18:e8:f8:3e:a3:9e:24:32:56:d4:a0:
         20:47:56:d4:15:5d:5f:4f:7c:b4:d8:b2:b8:99:01:34:3c:e6:
         00:3b:64:bc:52:18:62:d1:56:44:35:ee:bc:33:37:1e:03:9a:
         c3:d1:0a:4b:96:d7:99:33:ff:17:c2:27:75:ed:f3:1f:d6:e7:
         96:69:08:b5:38:4c:20:0a:2c:fb:82:fe:e5:c8:18:cb:ba:ef:
         d2:b6:82:0d:89:9d:0b:7f:f7:85:39:0d:bd:6a:9f:26:74:7c:
         e4:f5:bc:37:5a:81:2f:42:4c:a9:02:a6:15:ee:43:8c:b6:ab:
         9b:dd:d1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:47 2026 by rpki-client