Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
File:                     kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json)
Hash identifier:          WVWSF2N38cyM0xqlmRnnk9tA9g5ILoQw0hYcYunWujM=
Subject key identifier:   7B:5C:30:17:55:5B:45:1D:A1:2C:4B:2C:82:F7:E6:0B:D0:92:66:79
Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C
Certificate issuer:       /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
Manifest number:          9A
Signing time:             Thu 03 Sep 2026 07:31:55 +0000
Manifest this update:     Thu 03 Sep 2026 07:31:54 +0000
Manifest next update:     Thu 10 Sep 2026 07:31:54 +0000
Files and hashes:         1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: ZNzD5sQ1F9ARfnKyuFI2hVBiteIJR6vzQDDOvPFB0Yo=)
                          2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: x6jH0YoExuPajTzRi1fsVZ3AaYHRKD72yw6/eXqhzss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl
                          rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 07:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
        Validity
            Not Before: Sep  3 07:31:54 2026 GMT
            Not After : Sep 10 07:31:54 2026 GMT
        Subject: CN=6a99226b-b2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:66:58:42:b1:67:92:df:d4:c5:35:d6:7f:
                    ca:d4:a1:35:cf:35:0f:66:14:fb:37:c9:46:1a:28:
                    09:ab:5e:c8:52:fa:9e:47:3b:c1:cd:c1:63:d8:37:
                    31:cf:60:cb:82:8e:44:d1:db:23:35:90:35:c1:a4:
                    ed:3f:df:ce:cc:fa:f7:f8:93:f0:08:5f:0f:33:6e:
                    07:5c:51:30:a5:2f:c5:09:ed:0a:f2:27:26:47:31:
                    65:32:b2:25:7a:e8:80:c6:1e:30:94:38:07:60:1a:
                    1e:31:9c:68:c5:75:96:02:42:ae:15:6a:4e:d6:e6:
                    75:37:cb:99:e6:5d:49:ad:68:6b:03:a5:fb:74:d7:
                    64:75:bc:91:72:00:07:63:19:f6:0c:f0:f7:93:66:
                    e8:ff:c0:a3:58:d8:f1:e1:3d:c6:4e:6f:2c:09:92:
                    7b:0f:48:ae:9e:b2:e5:56:66:32:97:c2:e7:5d:0c:
                    bf:19:5e:21:27:c8:fb:8e:ae:ea:89:3c:26:0c:84:
                    b5:47:be:fb:d6:3e:23:b7:00:75:03:b0:95:cb:63:
                    3c:83:e5:1c:f3:25:af:b6:a1:cd:a2:7d:ab:06:4e:
                    8a:02:ab:d0:90:9e:f9:d2:e9:58:53:ab:14:89:5f:
                    7a:64:2a:a5:12:49:31:19:da:ad:6f:a1:e8:b0:02:
                    45:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5C:30:17:55:5B:45:1D:A1:2C:4B:2C:82:F7:E6:0B:D0:92:66:79
            X509v3 Authority Key Identifier:
                keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:29:4f:e5:b7:4c:e1:00:d3:2c:82:50:89:6a:a4:6a:68:92:
         ec:1d:cc:32:f2:e4:29:f8:f0:37:fc:92:19:a0:5f:38:55:a0:
         f3:64:f6:33:10:62:bc:96:ed:dd:78:42:40:1a:cd:4a:d3:6b:
         8b:eb:f7:04:27:24:2b:65:0b:39:2b:a8:8f:99:bf:eb:ca:49:
         e4:c2:0d:12:91:64:fc:f7:57:ff:81:e6:22:c3:53:a6:1c:ab:
         a2:28:31:85:fc:41:46:1c:ce:c5:31:04:7b:5e:d1:de:26:b9:
         10:8e:f5:cc:76:72:76:34:ed:0e:18:35:ce:71:b2:98:f7:34:
         05:62:15:e5:d0:03:32:ff:99:24:5f:9b:e3:5e:c4:fc:af:34:
         a3:07:cc:a9:73:05:d4:0f:46:75:22:0c:b9:2a:ef:1d:42:d3:
         36:5c:19:3e:03:c3:2a:d5:1b:c5:2a:f4:9a:6d:40:b4:e1:71:
         2c:5b:36:be:04:93:5f:dd:47:a5:a8:3c:fe:3d:c6:fa:25:a5:
         f7:59:35:79:4f:b2:af:99:0c:35:8a:90:d4:24:ee:0b:92:e2:
         fe:8c:6c:b2:d6:a8:51:28:ac:c4:85:36:57:cb:39:ba:bb:0e:
         79:93:71:99:01:ba:94:3a:85:df:ea:fb:d6:53:a3:7c:2e:0d:
         cc:bc:96:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNCODcxMTAvBgNVBAUTKDkyNDcwOTlBNjdCNjM4REM5MjUzQjAyRTI1M0RCM0JF
NzQ1QUE4NUMwHhcNMjYwOTAzMDczMTU0WhcNMjYwOTEwMDczMTU0WjAYMRYwFAYD
VQQDEw02YTk5MjI2Yi1iMmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmHFmWEKxZ5Lf1MU11n/K1KE1zzUPZhT7N8lGGigJq17IUvqeRzvBzcFj2Dcx
z2DLgo5E0dsjNZA1waTtP9/OzPr3+JPwCF8PM24HXFEwpS/FCe0K8icmRzFlMrIl
euiAxh4wlDgHYBoeMZxoxXWWAkKuFWpO1uZ1N8uZ5l1JrWhrA6X7dNdkdbyRcgAH
Yxn2DPD3k2bo/8CjWNjx4T3GTm8sCZJ7D0iunrLlVmYyl8LnXQy/GV4hJ8j7jq7q
iTwmDIS1R7771j4jtwB1A7CVy2M8g+Uc8yWvtqHNon2rBk6KAqvQkJ750ulYU6sU
iV96ZCqlEkkxGdqtb6HosAJFywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtcMBdV
W0UdoSxLLIL35gvQkmZ5MB8GA1UdIwQYMBaAFJJHCZpntjjcklOwLiU9s750Wqhc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0I4Ny8yM0QxNTI4QUJD
RTMxMUYwOUM1RjcwNDhDNEY5QUUwMi9ra2NKbW1lMk9OeVNVN0F1SlQyenZuUmFx
RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2trY0ptbWUyT055U1U3QXVKVDJ6dm5SYXFGdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
M0I4Ny8yM0QxNTI4QUJDRTMxMUYwOUM1RjcwNDhDNEY5QUUwMi9ra2NKbW1lMk9O
eVNVN0F1SlQyenZuUmFxRncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACilP5bdM4QDTLIJQiWqkamiS7B3MMvLkKfjwN/ySGaBfOFWg82T2MxBivJbt
3XhCQBrNStNri+v3BCckK2ULOSuoj5m/68pJ5MINEpFk/PdX/4HmIsNTphyroigx
hfxBRhzOxTEEe17R3ia5EI71zHZydjTtDhg1znGymPc0BWIV5dADMv+ZJF+b417E
/K80owfMqXMF1A9GdSIMuSrvHULTNlwZPgPDKtUbxSr0mm1AtOFxLFs2vgSTX91H
pag8/j3G+iWl91k1eU+yr5kMNYqQ1CTuC5Li/oxsstaoUSisxIU2V8s5ursOeZNx
mQG6lDqF3+r71lOjfC4NzLyWfw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 15:17:03 2026 by rpki-client