Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
File:                     koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft (raw, json)
Hash identifier:          fIuOH2Ay9QbiFFCZuVFhH4A/puVPBfnw4C3WxF72kD8=
Subject key identifier:   8D:8C:DA:1B:FC:84:6D:C5:B6:19:9F:0D:D6:60:CC:87:2C:3A:D6:D3
Authority key identifier: 92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1
Certificate issuer:       /CN=A9138679/serialNumber=9280F070747753387B6BA65732D6DD7992B350C1
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
Manifest number:          EA
Signing time:             Wed 13 May 2026 06:34:13 +0000
Manifest this update:     Wed 13 May 2026 06:34:12 +0000
Manifest next update:     Wed 20 May 2026 06:34:12 +0000
Files and hashes:         1: koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl (hash: H4yScPl2Ukx+EvXy71GRrEDlmwL2Tx19exIGO7EuAR0=)
                          2: 2CD223FCEA7811EF92D8DC39C4F9AE02.roa (hash: 9Odwd+Tnh1umFLR0TM5Ak3v8LLc0vsp9acB6OkgzFHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl
                          rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138679, serialNumber=9280F070747753387B6BA65732D6DD7992B350C1
        Validity
            Not Before: May 13 06:34:12 2026 GMT
            Not After : May 20 06:34:12 2026 GMT
        Subject: CN=6a041b65-bc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5c:cc:6c:8d:4f:ba:01:d1:41:6a:fc:d4:2f:
                    07:43:7c:94:03:4f:04:be:45:f0:d7:bf:bd:da:e9:
                    38:18:2d:bd:5f:f6:c0:93:24:26:6d:76:e4:26:cf:
                    a2:4a:54:e7:09:b6:7a:4b:4e:13:b8:ac:e5:4e:f0:
                    0b:24:7e:7a:8a:19:f2:ec:a3:42:9e:43:0a:bf:65:
                    17:07:a1:2e:f3:7d:8a:d9:ef:6a:e1:91:1b:77:5b:
                    ad:61:ac:70:13:21:14:81:0c:ff:7a:b5:78:66:26:
                    77:cc:10:0d:c4:f7:ef:1d:6b:f5:d8:c0:f7:9c:05:
                    22:75:f9:b0:76:49:41:4f:55:12:76:d8:fb:44:5e:
                    9f:0f:77:c2:24:dc:bc:07:3a:ee:ab:bb:d7:ae:31:
                    8d:94:fb:d3:47:1b:fa:b9:0e:6b:93:54:ae:fe:aa:
                    4d:af:4b:f0:8f:61:84:ff:dc:9d:ea:84:a6:f1:14:
                    00:3e:4d:3c:8d:f3:b5:fb:37:22:a7:4c:e0:41:6a:
                    28:2f:a1:77:3c:77:89:45:3a:08:a5:96:ad:b9:0f:
                    b8:99:2c:92:95:f0:9b:da:76:8f:cb:7c:76:c1:bc:
                    ef:03:d2:a6:9d:88:4c:f9:18:17:53:b5:41:ae:04:
                    97:49:5b:f0:52:4b:01:a6:72:30:08:a3:0b:39:20:
                    1a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8C:DA:1B:FC:84:6D:C5:B6:19:9F:0D:D6:60:CC:87:2C:3A:D6:D3
            X509v3 Authority Key Identifier:
                keyid:92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5d:3e:f2:10:90:8c:35:1c:f1:76:c5:eb:45:59:e6:0c:3a:
         7a:8b:1c:1f:2f:9a:91:08:9f:6e:3a:09:f7:ba:35:f1:aa:37:
         6e:4a:37:ab:ba:c4:01:e8:8e:59:91:0c:a2:b6:2c:a2:1e:f6:
         49:da:f5:c7:48:b2:25:8a:4a:a9:e4:aa:bd:6f:66:3a:e8:d3:
         74:a3:c3:6f:ad:12:bd:8e:c9:cc:f1:f0:12:ce:ea:7e:24:23:
         e5:16:14:59:03:79:a3:e3:f0:d2:02:7d:86:53:22:37:ef:f9:
         d9:24:23:4d:87:cf:dc:c9:ac:5c:ec:0c:d9:13:07:04:9e:5f:
         99:24:18:80:31:5e:e6:02:3a:4c:0b:f1:88:73:77:ad:fe:67:
         5f:b9:1b:dc:45:a3:90:f4:05:20:09:1b:15:4c:47:c7:34:14:
         35:8b:a7:47:2d:c3:fd:6a:c5:f5:c6:50:40:78:76:dc:87:89:
         0e:01:5d:87:38:13:53:b0:01:91:e5:0b:32:3b:80:67:e9:47:
         3d:bd:56:d3:21:be:35:1a:80:48:68:fc:96:11:d2:3c:4c:85:
         b0:49:4c:44:6a:ec:f1:cd:4d:40:19:a4:59:36:20:f4:f9:f9:
         6d:13:bc:14:0f:83:30:33:39:bd:43:db:b5:50:f7:51:f0:74:
         f9:9a:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:55:38 2026 by rpki-client