Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
File:                     KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json)
Hash identifier:          L6fMPNzp1thqZFOO9x9EYTlLp/SFBkYX6wDWMKapB0A=
Subject key identifier:   2B:33:F6:E6:98:F3:BE:F5:C0:7A:06:00:25:47:D9:63:39:86:80:79
Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC
Certificate issuer:       /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC
Certificate serial:       08E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
Manifest number:          1530
Signing time:             Tue 12 May 2026 19:07:26 +0000
Manifest this update:     Tue 12 May 2026 19:07:26 +0000
Manifest next update:     Tue 19 May 2026 19:07:26 +0000
Files and hashes:         1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: gI8B6z5PLm1bQ14Y2DJliEiR8vLYVk9PCQuSdLq1OZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2277 (0x8e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEA4D, serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC
        Validity
            Not Before: May 12 19:07:26 2026 GMT
            Not After : May 19 19:07:26 2026 GMT
        Subject: CN=6a037a6e-7e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:58:71:40:1a:36:92:b0:12:31:fb:9f:60:fe:
                    8c:5b:af:da:71:a2:b8:3e:8d:21:18:a1:4e:28:d7:
                    ec:16:97:98:fa:54:d7:38:d1:66:11:4d:4c:81:70:
                    b9:f4:2c:56:bc:4d:c9:08:9d:69:a7:f0:12:79:46:
                    73:95:a6:7f:00:a2:b5:03:97:35:e5:88:4d:4c:3f:
                    fd:07:ae:6a:15:80:43:5c:25:6f:77:b5:b9:80:d1:
                    f0:8e:64:ad:1e:ab:7d:33:98:49:15:fc:ec:e2:f4:
                    48:75:4f:32:d8:89:d9:0e:3f:ac:9c:3e:4a:6a:c2:
                    06:90:e4:8f:a8:c2:16:fc:cc:d4:a5:8f:39:d2:04:
                    47:4b:56:b0:d5:86:f5:20:ee:58:fe:84:b5:e2:21:
                    5a:63:5c:dd:e0:61:65:2e:9a:bc:07:e3:d9:7e:59:
                    79:a9:19:b4:40:d4:65:67:d4:47:f7:ce:85:c9:37:
                    3e:69:1b:4a:e5:07:17:d9:52:ec:12:33:23:ba:a0:
                    d0:ed:87:28:db:b8:96:1c:51:70:00:3f:7c:44:d3:
                    d6:29:f5:a4:43:96:34:de:4d:5c:bf:9e:00:73:1c:
                    79:10:63:a7:a4:42:80:8e:a0:26:68:fa:9b:38:38:
                    9b:e5:9c:fc:2d:b0:13:5a:49:78:31:43:f9:63:07:
                    65:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:33:F6:E6:98:F3:BE:F5:C0:7A:06:00:25:47:D9:63:39:86:80:79
            X509v3 Authority Key Identifier:
                keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4f:1b:f7:7c:33:c2:0c:6e:82:6c:7b:04:e4:94:c6:32:24:
         4b:76:7a:72:eb:42:8a:ce:27:6f:05:96:1a:70:95:37:74:68:
         b0:b6:93:ab:e8:e5:d6:2e:50:24:6d:d3:62:67:72:a9:94:da:
         0d:3a:84:d4:f1:6b:18:f9:8d:a2:8c:e8:c4:a8:9b:77:a1:c9:
         9e:c2:bf:42:a3:f4:cb:cc:3d:03:cf:4d:c0:86:dd:93:29:c4:
         63:98:6e:3a:0e:ef:02:17:76:db:43:9e:c3:42:a7:7d:a4:28:
         3e:63:f6:43:11:dd:48:a4:03:98:eb:a2:bf:ca:c2:01:c1:a4:
         81:5f:39:66:62:02:56:06:13:9f:4f:2e:e1:33:23:e8:fa:d9:
         02:02:c9:a6:16:34:f8:df:b9:e6:54:17:f6:08:18:f2:de:ae:
         a6:c7:bc:a2:9a:4b:7d:5e:2d:6c:06:eb:29:b8:c4:b7:7f:8c:
         5b:42:1a:8e:4a:41:67:00:30:71:29:c5:12:1e:a3:ea:ba:9f:
         61:05:ca:ff:2c:eb:2b:36:07:79:92:ec:ce:4c:61:06:b7:88:
         6c:53:ee:3d:e0:08:3b:f6:24:db:9c:0c:ad:1b:33:a9:b8:86:
         cc:ae:c0:c2:28:ed:12:dd:6f:f8:3b:35:79:19:46:6f:53:95:
         ac:93:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:14:11 2026 by rpki-client