Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
File:                     KUr5pNDtlrY5KVxYc9z-KJ8no20.mft (raw, json)
Hash identifier:          P0AYbptOXNcp/XPbKIWNeLFvvzXFYnU3kyhbuZ+AJvQ=
Subject key identifier:   CF:47:F9:74:97:0E:1D:19:18:5F:98:44:80:56:12:2F:F4:DB:32:FF
Authority key identifier: 29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D
Certificate issuer:       /CN=A9199095/serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
Manifest number:          0C
Signing time:             Mon 11 May 2026 09:19:04 +0000
Manifest this update:     Mon 11 May 2026 09:19:03 +0000
Manifest next update:     Mon 18 May 2026 09:19:03 +0000
Files and hashes:         1: KUr5pNDtlrY5KVxYc9z-KJ8no20.crl (hash: gR4JjIQrrwEw06W8Hfc3EFGmsTvOg+dvJkUchMjcwto=)
                          2: 80748E243E2C11F19772AA47B7833773.roa (hash: Fqt65Ri8QxT4z8UcB0FESkTvkgkkiyej9qdzbK9DTVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl
                          rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:19:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199095, serialNumber=294AF9A4D0ED96B639295C5873DCFE289F27A36D
        Validity
            Not Before: May 11 09:19:03 2026 GMT
            Not After : May 18 09:19:03 2026 GMT
        Subject: CN=6a019f08-2b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:86:48:24:57:8f:9b:3e:c3:5c:45:e0:3f:
                    8d:2c:4e:95:ed:14:c6:e1:70:e9:c6:d8:47:06:b5:
                    66:ce:59:27:ee:bb:5e:67:7d:06:00:d3:5e:1e:c8:
                    ad:af:33:77:5e:91:9b:fd:81:db:04:cb:1b:05:88:
                    0e:80:02:45:8e:63:58:5c:fd:80:8d:3b:f1:71:18:
                    f6:b2:51:b8:da:d7:37:f5:69:cb:00:10:c5:67:f0:
                    3a:1f:a5:51:61:19:80:f4:a5:b2:3a:e8:93:4c:fb:
                    ef:2a:46:cb:62:e4:92:1f:d3:13:3d:6f:f9:e9:49:
                    89:8b:a6:75:8b:ad:f9:2c:97:68:93:c8:7c:f9:25:
                    f3:14:f2:e7:c9:49:25:66:03:cb:c3:90:4c:6a:ca:
                    34:9e:57:26:a0:8f:31:2c:22:32:d3:ef:a6:0b:d1:
                    d5:44:4a:4f:af:fa:df:34:68:b9:48:d7:38:c3:c4:
                    49:fa:b8:89:71:51:c8:fd:9e:fa:dd:86:04:6b:e8:
                    2b:ef:52:97:3e:1a:14:d1:78:ca:4c:b7:79:2f:f6:
                    9c:e4:17:cb:36:30:e4:c2:43:e0:50:c9:92:ce:d2:
                    b4:9d:ea:2f:63:f5:f5:33:d3:51:dc:ca:bd:d4:be:
                    63:8b:c1:0d:bc:3f:84:7c:ef:8e:4a:23:bd:01:f7:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:47:F9:74:97:0E:1D:19:18:5F:98:44:80:56:12:2F:F4:DB:32:FF
            X509v3 Authority Key Identifier:
                keyid:29:4A:F9:A4:D0:ED:96:B6:39:29:5C:58:73:DC:FE:28:9F:27:A3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KUr5pNDtlrY5KVxYc9z-KJ8no20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199095/6BA6F1163E2811F1B8F8FEA5B5833773/KUr5pNDtlrY5KVxYc9z-KJ8no20.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ef:57:49:b2:f8:58:0f:c7:aa:e9:6b:bd:ed:88:50:5a:f6:
         5f:b7:78:d8:58:d8:cc:a4:c6:25:c5:15:b0:74:83:a5:5b:28:
         0e:38:73:c8:74:58:4a:25:ea:0e:95:87:36:3a:3e:c7:46:1b:
         94:6e:4d:f8:bb:5d:d0:51:a8:ad:8e:60:66:be:43:0d:14:33:
         28:b8:8d:86:24:29:f6:61:42:4c:72:8f:37:ba:dc:d4:8a:9c:
         07:e6:39:06:86:d5:8a:6b:42:9e:f0:36:52:e6:48:3a:03:20:
         bd:1d:aa:63:fa:1a:b0:a3:7a:f7:f5:a0:99:fd:e4:c0:eb:9d:
         da:b3:c9:79:f3:be:09:9c:8e:40:63:1a:b1:be:a7:05:67:74:
         7f:52:ad:62:9d:e9:9a:16:f9:29:9c:3b:59:ed:8c:3f:6f:33:
         63:eb:79:42:5e:ac:be:0e:e2:1b:2d:ef:11:f4:ed:f6:4d:22:
         a6:8b:a1:60:be:19:16:e3:07:bc:99:b5:55:d6:d4:ea:22:63:
         0a:88:bd:41:4a:98:13:4a:62:df:01:87:eb:f7:1b:75:63:f1:
         c5:58:92:67:66:61:18:57:5d:50:19:1e:13:26:59:eb:41:7e:
         e6:0a:7f:68:ae:86:18:fb:cc:c6:56:b6:f7:bd:ae:ac:03:f8:
         00:83:7d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:51:36 2026 by rpki-client