Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft
File:                     KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft (raw, json)
Hash identifier:          HGHF4G28qL9DsgLppqfxWpXZ4u4fUornjJzGZofnWDQ=
Subject key identifier:   AC:10:EC:42:B9:FA:80:1F:0A:83:4A:0F:84:F1:00:B9:9C:C5:CB:2A
Authority key identifier: 28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67
Certificate issuer:       /CN=A9194677/serialNumber=2876825F77C24A167DC41215350F688792981A67
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft
Manifest number:          01F2
Signing time:             Mon 11 May 2026 03:18:02 +0000
Manifest this update:     Mon 11 May 2026 03:18:02 +0000
Manifest next update:     Mon 18 May 2026 03:18:02 +0000
Files and hashes:         1: KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl (hash: ko65R22npsuyVe+/ePY1qHelAekfZV9DZCnKj7Pm9ho=)
                          2: 759C16DC577711EE96F5F775C4F9AE02.roa (hash: cTlf1NxuIouKXNPDJnnCsmUtnsb/nG3rM1WrAqOmy6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl
                          rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194677, serialNumber=2876825F77C24A167DC41215350F688792981A67
        Validity
            Not Before: May 11 03:18:02 2026 GMT
            Not After : May 18 03:18:02 2026 GMT
        Subject: CN=6a014a6a-1bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:c1:c8:d1:cb:23:90:71:b5:3d:4e:ac:8e:
                    f3:11:d1:95:69:4a:b4:95:b9:d8:92:73:8b:21:41:
                    e4:aa:f4:a4:a9:d8:64:23:87:05:d4:8a:c4:29:4d:
                    ad:cc:6e:2b:21:5c:f0:38:fa:c7:84:f8:e7:15:5f:
                    03:04:35:52:b3:51:4e:79:8b:f3:80:00:bb:4c:bf:
                    45:18:94:1b:fd:3d:fb:8b:09:79:f4:c4:3a:db:da:
                    a3:ec:1c:8d:d5:bf:8f:8c:56:13:ac:e1:f3:19:a5:
                    43:6d:57:c9:4b:4b:da:a5:bd:fa:da:0e:dd:7f:10:
                    d1:bd:59:06:dd:04:80:16:1b:a5:29:93:da:9a:b9:
                    5d:ff:7c:d7:e0:b9:ec:0f:31:17:42:7e:76:e3:e2:
                    28:eb:a9:76:11:72:c1:14:39:e9:aa:37:a7:e4:59:
                    f7:90:8a:ef:7e:6f:eb:59:1e:88:8b:cf:a7:af:28:
                    3f:14:85:7e:90:e6:f7:ac:9a:a6:6c:49:42:3a:19:
                    22:5b:08:80:a5:08:f8:13:f9:11:72:56:ed:bd:eb:
                    73:c8:b4:ab:dc:52:38:26:e4:e6:ee:6f:b9:9f:3e:
                    f0:72:25:3d:2b:bc:55:46:55:5a:62:fd:ce:92:23:
                    b9:8c:9b:2e:04:66:29:2a:63:2a:29:a6:e7:87:a3:
                    2b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:10:EC:42:B9:FA:80:1F:0A:83:4A:0F:84:F1:00:B9:9C:C5:CB:2A
            X509v3 Authority Key Identifier:
                keyid:28:76:82:5F:77:C2:4A:16:7D:C4:12:15:35:0F:68:87:92:98:1A:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194677/0227F786577511EE92ACA759C4F9AE02/KHaCX3fCShZ9xBIVNQ9oh5KYGmc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ce:b7:4d:71:09:36:b6:96:eb:b6:d9:f3:db:83:c3:16:6d:
         7b:ed:33:79:f9:27:a0:09:54:50:04:bd:68:6f:ba:d2:70:40:
         28:eb:8e:57:1c:19:96:53:00:58:e6:8a:32:14:c4:df:44:d1:
         ee:8b:8f:0d:ee:96:6b:84:51:73:06:46:86:d7:db:86:75:1c:
         e7:11:35:ec:25:a0:d2:50:c2:7e:0e:6e:29:63:bb:7c:40:80:
         39:bb:ef:31:e8:bc:90:0f:06:ad:8e:d9:bc:26:e1:1d:d0:a3:
         f8:c8:40:72:6d:2a:fa:6c:ec:5f:52:f3:05:82:fe:8f:4a:b5:
         d4:0c:fc:33:8f:b4:fd:50:d1:2c:68:9d:0b:50:d0:98:d4:4e:
         44:be:3b:16:db:be:16:31:73:13:a0:03:fe:25:2c:a8:2d:08:
         36:4a:ea:e8:fa:11:55:4c:10:e3:b2:34:d0:a0:de:32:26:72:
         70:cc:b7:32:02:94:f1:8f:b0:55:0e:90:50:d0:ff:63:3d:c2:
         a3:18:00:6e:9a:ac:9b:f2:d9:87:89:67:b5:90:c6:a9:93:23:
         f1:e9:a6:50:74:4d:51:7e:0a:4e:ba:da:f2:83:f7:67:5f:09:
         21:f2:20:84:01:ff:72:ef:d4:e1:cc:11:86:0a:c4:9d:52:4a:
         b5:79:6d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:19 2026 by rpki-client