Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
File:                     kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json)
Hash identifier:          /1i6iUfR43FcGBycRp3+BkbnYrajqto2H1A7Z9t3ocU=
Subject key identifier:   F7:E5:AB:80:6D:4B:08:7B:18:3A:FF:56:FB:46:F6:EF:36:D4:CA:EA
Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C
Certificate issuer:       /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
Manifest number:          6B
Signing time:             Mon 01 Jun 2026 08:39:41 +0000
Manifest this update:     Mon 01 Jun 2026 08:39:40 +0000
Manifest next update:     Mon 08 Jun 2026 08:39:40 +0000
Files and hashes:         1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: 5vhSi8k3fFy4fdXpsXYtXqEu9jcAbgQ/0lAdkIJtRgk=)
                          2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: x6jH0YoExuPajTzRi1fsVZ3AaYHRKD72yw6/eXqhzss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl
                          rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
        Validity
            Not Before: Jun  1 08:39:40 2026 GMT
            Not After : Jun  8 08:39:40 2026 GMT
        Subject: CN=6a1d454c-58d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:4b:3a:a3:72:3e:16:b3:6f:94:6a:bb:74:
                    c6:c3:4f:8f:fc:af:f5:88:8f:17:19:90:17:f7:7a:
                    b4:90:c9:f9:21:be:3f:e5:23:7f:f3:73:7f:a5:26:
                    7b:6d:cc:ae:d5:be:87:7c:7e:55:85:0e:86:5f:e3:
                    cd:fe:17:16:d9:8a:b8:97:b4:38:3c:dd:2e:76:81:
                    76:9c:a7:7c:56:83:18:d4:4b:3b:81:13:0e:b5:05:
                    aa:06:ff:ed:91:29:42:c9:88:0c:07:32:39:f8:cb:
                    d5:f3:73:e2:76:a0:ba:c0:f7:43:21:af:63:67:59:
                    83:85:38:af:0c:7e:99:a9:89:53:fa:2f:2f:81:ca:
                    fc:38:01:50:78:14:8c:af:d1:09:0c:7b:e9:d1:80:
                    68:ca:b4:80:22:d1:7f:a6:ed:65:25:69:1f:35:c6:
                    31:75:1c:e6:0b:ff:1f:3a:0a:82:b9:30:4c:b7:94:
                    fe:75:1c:80:b7:ec:77:ba:36:9a:70:55:68:a9:9b:
                    f6:dc:c1:1f:e9:8b:c3:80:7c:74:e4:4b:83:7a:fe:
                    63:da:0a:65:7b:d1:94:0e:ea:cd:37:ef:aa:d4:d8:
                    5c:27:cd:54:ea:e1:ba:41:0b:23:58:0b:28:de:29:
                    f6:a7:15:2a:29:89:59:f9:32:fb:1a:57:ed:26:24:
                    c3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E5:AB:80:6D:4B:08:7B:18:3A:FF:56:FB:46:F6:EF:36:D4:CA:EA
            X509v3 Authority Key Identifier:
                keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ef:66:ec:6f:b0:5a:6c:9a:10:d7:92:67:76:38:d2:d8:81:
         dd:80:d8:44:95:a5:b3:b3:a4:00:a2:35:32:20:90:9e:60:99:
         0c:fa:84:77:2b:90:f8:06:03:76:74:61:aa:83:2c:b0:7b:ab:
         3d:af:26:f4:4d:95:15:5e:93:26:f8:37:03:78:d1:22:15:8f:
         b8:da:64:b1:71:0b:e9:08:53:02:15:07:97:1f:d2:f1:4e:43:
         0e:95:ac:6d:f5:8d:34:2b:cd:e7:e4:67:9f:e7:c4:a2:76:e6:
         48:85:33:d0:47:22:c9:e7:b9:47:a1:84:23:eb:1c:c3:31:9c:
         2b:0a:c7:72:7e:88:f5:45:e5:f0:f4:79:34:fe:00:20:67:30:
         7e:74:33:e7:9b:36:c7:47:be:b7:77:00:bd:e5:bc:8f:80:cc:
         63:0b:3f:d6:70:fe:16:1d:58:53:a9:63:67:5b:5a:29:60:88:
         e1:84:99:2d:8e:0e:a0:f4:12:80:1e:0c:0a:d9:ac:7e:8c:25:
         1f:1e:99:70:06:0e:d7:e8:74:25:0a:91:92:5a:73:19:a6:c5:
         7e:01:9a:21:f9:f3:c8:b2:b3:ec:af:80:ad:d5:63:bc:ef:12:
         12:55:74:5f:0b:de:6a:ca:4d:81:56:04:c6:02:a5:a5:ad:26:
         e7:6e:e8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:57 2026 by rpki-client