Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
File:                     Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json)
Hash identifier:          Pg328Dd3SqHwIbVH7lv7fghBOvvCusjEFUYbKOvpO1c=
Subject key identifier:   6A:38:C3:FA:92:04:F0:89:3D:D8:AB:93:D1:68:EC:35:FD:AE:14:0F
Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
Certificate issuer:       /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Certificate serial:       06DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
Manifest number:          06D1
Signing time:             Thu 10 Sep 2026 22:11:29 +0000
Manifest this update:     Thu 10 Sep 2026 22:11:28 +0000
Manifest next update:     Thu 17 Sep 2026 22:11:28 +0000
Files and hashes:         1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: M6kbXylMj2647zYB/JPqAeLIs97YJ3/8UYno+ft4YBs=)
                          2: B8E6481655AA11F1ABD37D4A9B833773.roa (hash: 8rIA49TPHJ0ZY3EFKpWm3baP6XZiOHgLCBv2FhYMWYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
                          rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 22:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1756 (0x6dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
        Validity
            Not Before: Sep 10 22:11:28 2026 GMT
            Not After : Sep 17 22:11:28 2026 GMT
        Subject: CN=6aa32b11-a10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:6e:7a:f2:63:e6:4d:ff:e3:f2:89:31:b7:
                    f9:2f:e0:32:9f:aa:4c:81:50:68:c3:e8:18:86:10:
                    e5:d4:41:ff:38:0e:ef:07:c4:29:58:c1:b4:a8:19:
                    8b:2d:d5:7a:13:cc:bd:96:78:12:39:af:2a:e6:48:
                    e8:e0:e8:10:4f:da:30:a2:6e:af:7a:dd:59:c0:b3:
                    44:57:bf:19:1d:4d:3e:d0:07:00:b7:41:52:99:96:
                    08:1a:00:c8:72:55:f3:13:f9:9e:34:da:2d:9c:2d:
                    19:2b:27:ad:eb:02:f9:74:c2:75:55:64:4e:8a:54:
                    29:a3:9e:e1:38:56:95:a1:ad:d5:ac:e1:b5:4f:fc:
                    ff:90:80:07:e9:25:1b:82:36:55:a2:1e:c9:bb:d8:
                    bf:a1:d2:b2:6f:16:40:8e:96:a7:2c:68:4d:1f:42:
                    f4:8e:95:8a:2d:35:23:c6:e8:dc:51:74:6a:d3:ab:
                    6f:9c:1f:2a:f3:56:78:f0:17:9b:5f:ce:fe:1e:bc:
                    1e:52:ee:69:8c:8f:a2:5e:1e:1a:85:95:2e:90:2b:
                    99:bf:a5:f4:c2:d5:66:09:ad:b0:4b:04:b8:45:d3:
                    ef:6b:0c:5f:87:b5:ed:dd:cf:63:ea:cb:20:82:ee:
                    dc:e1:3c:e2:20:6d:9b:08:d0:41:1d:41:99:a8:ab:
                    8a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:38:C3:FA:92:04:F0:89:3D:D8:AB:93:D1:68:EC:35:FD:AE:14:0F
            X509v3 Authority Key Identifier:
                keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:52:29:17:38:e0:3c:5b:90:08:15:a8:6a:83:21:2f:01:cc:
         12:91:da:01:ba:da:12:da:b3:c1:27:bd:5d:1f:ad:f3:0d:42:
         ed:9e:2b:17:43:7f:07:db:58:67:29:2f:ca:26:7b:df:cd:9d:
         be:6c:7f:5e:d0:07:11:8b:ee:6c:e3:ca:08:eb:ad:bf:f4:f1:
         dd:b9:d3:66:77:c0:56:21:2c:67:06:87:69:cd:72:f9:f6:48:
         e2:9b:2a:9d:6a:86:88:19:a9:ff:12:16:bd:94:b0:27:c3:66:
         5c:d6:f2:19:b3:da:7a:a8:58:65:a7:9d:19:54:66:db:17:e3:
         7c:d4:62:84:e0:6e:18:c9:84:db:db:b9:38:5a:89:af:49:00:
         50:38:d6:7f:87:33:3f:81:b9:9d:42:46:8d:07:26:41:1e:96:
         db:b8:6d:cf:60:49:9f:5f:a0:f7:5e:df:1c:e8:48:d7:81:d2:
         89:fc:ae:9b:09:f6:60:e2:af:50:e9:e0:e2:05:65:8e:27:d6:
         de:1f:40:a4:13:5d:da:fe:fd:70:d5:49:d1:c6:59:80:34:8a:
         f7:f9:b8:8d:d0:de:31:47:11:e2:5c:41:1e:73:c0:31:18:c9:
         50:cd:b7:fb:af:82:d6:80:2c:ca:97:8c:f1:a6:af:59:d0:0f:
         9a:f2:11:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:43:39 2026 by rpki-client