Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
File:                     KncXIyWXseQO6_FQ58uUIvRdim0.mft (raw, json)
Hash identifier:          /EgXbUJgaloGLpiU+yCDrSihU7hEd3109ZnID+20gNk=
Subject key identifier:   C5:38:0B:D8:BA:91:14:AD:0B:5F:57:A0:CC:FB:99:60:CF:68:6E:73
Authority key identifier: 2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D
Certificate issuer:       /CN=A913E5F9/serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
Manifest number:          3C
Signing time:             Mon 11 May 2026 08:41:53 +0000
Manifest this update:     Mon 11 May 2026 08:41:53 +0000
Manifest next update:     Mon 18 May 2026 08:41:53 +0000
Files and hashes:         1: KncXIyWXseQO6_FQ58uUIvRdim0.crl (hash: JLemjg4YdMy75dmvAZ9jnBNHSc5AF1HTCIMAKq7JfQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl
                          rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E5F9, serialNumber=2A7717232597B1E40EEBF150E7CB9422F45D8A6D
        Validity
            Not Before: May 11 08:41:53 2026 GMT
            Not After : May 18 08:41:53 2026 GMT
        Subject: CN=6a019651-be38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:32:cc:33:7c:32:be:c0:ed:b4:6a:3b:ec:
                    2c:d7:5e:12:17:f0:4c:6c:0b:5c:fa:98:48:08:fd:
                    59:a7:56:1f:02:24:6a:e2:20:9e:db:fb:ef:10:16:
                    18:90:43:b5:94:9c:df:af:c9:e7:2b:1b:27:8c:6b:
                    ce:b6:92:1c:2b:52:d4:4d:23:d4:2d:a9:6c:b1:b1:
                    ef:88:d3:66:b0:53:37:3b:e3:cc:fb:7d:f4:23:55:
                    f3:65:23:44:a5:25:42:99:bd:55:63:32:c8:67:67:
                    df:ed:7c:86:e5:33:52:60:a4:58:11:57:5c:3d:c1:
                    f7:6e:ce:2e:ed:0a:59:1b:90:18:88:e1:36:98:bc:
                    ef:ca:5b:39:c9:4e:40:9d:6f:d8:20:b4:96:be:95:
                    aa:9d:8c:0a:4d:72:2f:6d:26:30:25:a2:bc:5d:1f:
                    e4:bc:15:18:5f:81:f9:92:9c:38:15:43:d0:88:43:
                    70:3a:24:25:c0:6d:6c:3c:b8:1c:c8:99:47:5f:cf:
                    fc:03:0a:f7:27:dd:82:83:0d:14:9e:c2:d6:f4:75:
                    7a:97:a8:13:47:da:21:fa:48:da:75:c1:34:3b:aa:
                    03:c5:d4:49:a8:05:52:b1:63:68:42:c8:cb:63:7a:
                    ec:78:e4:96:fd:9f:81:a7:e4:ee:30:e5:66:9e:aa:
                    a0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:38:0B:D8:BA:91:14:AD:0B:5F:57:A0:CC:FB:99:60:CF:68:6E:73
            X509v3 Authority Key Identifier:
                keyid:2A:77:17:23:25:97:B1:E4:0E:EB:F1:50:E7:CB:94:22:F4:5D:8A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KncXIyWXseQO6_FQ58uUIvRdim0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/006BA344F69111F0AE2788523A6F56BC/KncXIyWXseQO6_FQ58uUIvRdim0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:45:e4:a3:76:cb:1d:f8:e8:20:ad:eb:e3:e6:fe:b1:75:67:
         4b:92:74:3c:4d:c9:62:08:67:56:6b:ff:38:0f:1a:03:74:a1:
         d0:22:23:99:48:89:29:db:40:fd:4f:51:b7:5f:67:11:c3:a5:
         34:af:78:63:04:32:02:68:08:eb:d4:3f:46:c7:df:2c:af:96:
         e2:e6:b8:3c:f2:42:67:d1:59:32:b1:8a:fb:e3:e3:b6:56:24:
         2f:b3:f7:75:b1:ce:49:24:4c:46:74:f8:22:f8:5d:d2:b4:7e:
         20:1f:30:6e:34:9e:60:30:37:55:f8:63:ee:6c:94:3a:62:86:
         a4:20:ad:93:6d:7c:a0:8f:02:74:81:36:28:b7:63:dd:2a:2b:
         f0:e4:96:1a:3d:18:46:d0:71:e8:e8:00:e5:21:c9:29:2f:1c:
         30:88:0b:9a:9e:dc:08:17:e8:bc:8b:43:62:b3:88:fd:51:41:
         4a:2b:ac:4f:b3:3b:41:01:f4:bd:b2:ad:50:51:15:84:bf:02:
         4a:eb:22:c4:54:63:22:77:fb:5b:34:ad:3c:ee:a8:10:ec:b1:
         2e:b3:b5:59:5c:fc:05:04:d5:d8:67:4c:9e:a6:42:fe:69:88:
         5e:70:45:a8:ff:2e:63:7f:1f:42:53:57:a2:17:04:87:bf:58:
         a3:ef:6f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:34 2026 by rpki-client