Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
File:                     KBiMFu7JB0JxcnjCic-C9QTyWqk.mft (raw, json)
Hash identifier:          betpbWjjgu1BBtSfHwO7gM7kmSlW8aL+5KniXXS5rEo=
Subject key identifier:   69:9A:20:D6:02:53:02:40:C2:20:83:65:E9:23:4A:7E:2A:AC:DE:0A
Authority key identifier: 28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9
Certificate issuer:       /CN=A912F387/serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
Certificate serial:       01E8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
Manifest number:          01DF
Signing time:             Thu 23 Jul 2026 04:32:14 +0000
Manifest this update:     Thu 23 Jul 2026 04:32:13 +0000
Manifest next update:     Thu 30 Jul 2026 04:32:13 +0000
Files and hashes:         1: KBiMFu7JB0JxcnjCic-C9QTyWqk.crl (hash: OMofG1gvcz/9E7g3TMzdiEPFpmAiec2bOHlKtJitDzw=)
                          2: FCA046066C8611EFBF35D221C4F9AE02.roa (hash: E6IYFtcpZ/59YvDx9G0yLx/SsKVSGs49+4dsMVqOHBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl
                          rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F387, serialNumber=28188C16EEC90742717278C289CF82F504F25AA9
        Validity
            Not Before: Jul 23 04:32:13 2026 GMT
            Not After : Jul 30 04:32:13 2026 GMT
        Subject: CN=6a61994e-9051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a6:46:52:d3:42:95:eb:d4:18:bc:b0:18:a7:
                    14:ff:60:24:16:b9:a8:a5:f1:6b:f7:b4:ff:a8:5c:
                    20:1a:be:3a:73:26:85:f2:48:b9:bc:91:c5:38:99:
                    e2:51:b8:09:f2:85:7e:f3:bb:c9:f2:5f:af:7f:63:
                    38:f2:fa:34:28:c5:e6:f5:fe:2d:8f:51:f1:80:bf:
                    a3:9c:1e:6f:a2:73:da:00:87:19:28:85:66:f8:e1:
                    83:9a:0c:d9:5b:3b:9a:19:29:6e:82:d2:1e:11:55:
                    30:69:a9:09:ba:2a:2a:5a:9e:ff:0e:4d:54:bd:0d:
                    2a:0f:bd:e7:8d:64:4b:7b:96:1e:e2:57:5d:ff:2d:
                    0e:e9:f6:0b:f3:e6:b2:e5:2d:b1:ad:62:3f:19:ee:
                    b2:aa:0d:85:54:6c:6b:d3:14:a7:36:73:6e:3e:81:
                    c7:86:45:29:bf:e1:cf:d8:ff:c7:04:c7:04:f4:bd:
                    08:79:97:3d:7b:c4:65:af:65:8a:17:c4:c3:4e:77:
                    2e:60:d2:82:14:5d:e8:99:f4:f3:23:aa:8c:89:fd:
                    d3:81:99:1a:ef:20:16:b5:be:bd:81:84:c6:cf:37:
                    ee:33:b9:cc:36:45:a4:33:a4:87:b8:da:7b:74:c4:
                    cf:09:a2:c9:f7:7f:f1:07:fe:3f:cd:d2:78:7f:c8:
                    dc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9A:20:D6:02:53:02:40:C2:20:83:65:E9:23:4A:7E:2A:AC:DE:0A
            X509v3 Authority Key Identifier:
                keyid:28:18:8C:16:EE:C9:07:42:71:72:78:C2:89:CF:82:F5:04:F2:5A:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KBiMFu7JB0JxcnjCic-C9QTyWqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/FE4D78E2B5C111EE95B58341C4F9AE02/KBiMFu7JB0JxcnjCic-C9QTyWqk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:12:24:8b:1b:8e:ba:dc:7b:74:0c:46:3b:d5:b4:b8:bf:e0:
         50:5b:3a:58:3c:0e:1d:12:2e:07:41:18:ec:3b:28:a8:ab:55:
         d4:d0:b5:d7:a3:42:e3:97:2d:7b:4e:cb:d3:da:de:a6:da:e7:
         ed:40:75:5e:62:b1:6f:13:57:fc:f0:eb:32:2e:6b:e7:7c:10:
         41:61:2f:2a:d7:66:77:0e:2c:20:17:fe:e6:4d:4a:8e:25:e0:
         cf:db:f9:e7:2c:a6:4d:b9:23:dc:9a:d7:51:37:c4:f2:5c:95:
         4b:c0:af:c2:aa:1d:e2:8c:99:89:2d:eb:4e:81:ec:ea:8a:bf:
         57:39:6d:1c:16:e0:fb:8c:d5:2e:d4:92:a0:3f:ad:db:e1:ef:
         c0:74:4f:76:f7:41:bc:10:27:ac:ee:2c:d1:ea:85:49:cd:73:
         b0:95:e1:68:74:2c:3d:c9:9b:c7:32:ea:bc:62:d7:10:8f:9a:
         03:33:dd:6d:90:ed:5e:9b:92:7e:82:8c:42:17:08:6d:a1:50:
         49:24:33:a8:71:8e:72:1e:5d:0a:14:57:7e:f6:41:96:e4:b3:
         86:9c:50:68:e3:a6:55:95:a7:42:11:3c:5a:f8:08:f9:da:e6:
         ad:74:1c:58:4b:e3:81:bf:b9:12:67:60:bd:30:fa:5d:ec:45:
         88:11:64:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:16:54 2026 by rpki-client