Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
File:                     kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json)
Hash identifier:          Z3X2tINCpjXbO3rXXJKXkR5l2O9cCiuSH8GiRVd0+v0=
Subject key identifier:   E6:B4:17:BB:46:55:10:2D:91:37:8B:83:D5:B2:00:4E:76:78:34:F7
Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C
Certificate issuer:       /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
Manifest number:          B4
Signing time:             Sun 25 Oct 2026 07:22:51 +0000
Manifest this update:     Sun 25 Oct 2026 07:22:51 +0000
Manifest next update:     Sun 01 Nov 2026 07:22:51 +0000
Files and hashes:         1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: l9vFxR8s62mswoy+Gt3ErzAcwrBLxHjpkJm4HmsGqVE=)
                          2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: x6jH0YoExuPajTzRi1fsVZ3AaYHRKD72yw6/eXqhzss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl
                          rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
        Validity
            Not Before: Oct 25 07:22:51 2026 GMT
            Not After : Nov  1 07:22:51 2026 GMT
        Subject: CN=6addae4b-608a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:cc:b8:a7:0b:f6:7a:98:71:48:2f:59:05:
                    ad:f0:e2:77:49:8f:7b:bc:a1:8a:4d:1b:e4:cf:f0:
                    63:55:4f:bd:84:10:bd:05:8d:65:67:62:a5:26:78:
                    3c:98:05:58:d6:97:65:5b:05:0c:d7:1e:af:46:81:
                    63:9d:d1:c8:79:a0:1b:62:6a:c6:de:8b:c5:f7:00:
                    4c:b3:2a:ce:ed:5d:ac:08:90:f4:4d:d6:b2:d8:2d:
                    bf:2a:f8:dc:a2:8e:a4:88:c9:94:fe:3b:c0:a9:61:
                    e1:0f:27:f4:1e:24:5e:c4:29:88:05:6b:db:9e:9a:
                    54:8a:d8:18:6c:f3:da:7a:2d:da:62:11:f5:31:0f:
                    a4:42:59:94:11:95:3f:3e:17:1d:e0:03:bd:64:ce:
                    62:59:06:40:2b:f0:8b:21:29:a4:ad:ea:ea:5b:77:
                    74:c5:ed:47:7d:4a:49:3c:0e:35:8b:48:88:72:ae:
                    06:30:0a:0e:af:d8:e3:ca:23:c0:f4:a3:7e:f5:5a:
                    19:6b:58:ee:b2:0d:cb:8d:9a:1a:b1:46:57:b3:bb:
                    14:01:c7:88:bf:6e:e8:53:a1:48:e4:0c:70:b2:55:
                    b2:0d:5f:d1:46:49:90:70:6a:b2:5e:16:77:83:0d:
                    bd:83:c1:ba:dc:9f:26:2d:31:45:ed:1d:27:51:b4:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B4:17:BB:46:55:10:2D:91:37:8B:83:D5:B2:00:4E:76:78:34:F7
            X509v3 Authority Key Identifier:
                keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:82:a0:fc:8d:b0:a0:8f:03:5c:e5:03:a3:55:9e:4d:0c:e9:
         44:ff:7a:76:8a:6e:5e:40:a0:43:d8:94:20:a4:66:b8:cf:a3:
         42:70:1d:d1:6e:86:af:1c:8d:94:d4:dd:59:04:c9:bf:a2:15:
         6e:6c:5d:25:b0:57:98:6e:d1:28:e6:06:7f:0d:57:d7:6e:0b:
         72:27:3c:82:e1:85:c1:30:c1:88:25:f8:4d:b4:c0:ad:87:09:
         1a:fb:db:3c:83:89:94:64:8d:8c:44:7b:24:2e:36:cd:8f:41:
         9a:e8:9d:ee:e7:17:1f:8a:46:ad:90:5a:6c:d2:6f:21:c3:54:
         78:af:86:77:9e:c2:98:31:52:d8:f2:19:ae:8d:06:5e:2e:b3:
         d3:20:71:e0:e2:ef:a5:85:fb:58:c2:48:43:cc:08:3b:7a:69:
         7c:0b:e2:18:bf:58:80:1c:79:35:91:fc:96:3b:37:6e:16:f2:
         ba:6d:98:38:10:4b:cc:e2:4c:14:30:a4:4f:69:d6:10:8c:34:
         40:62:49:63:ed:d3:9e:20:4c:6d:39:5a:02:27:e5:f4:47:a7:
         06:0f:ae:e9:3a:01:8d:5b:bb:95:34:a3:3b:3f:44:25:2d:9c:
         ce:0e:81:97:da:1c:d9:19:a7:43:40:b7:46:36:b4:50:6d:3c:
         c5:4d:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 12:38:54 2026 by rpki-client