Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
File:                     rKkepAl9np8x9W76xr1I8Ba-mNM.mft (raw, json)
Hash identifier:          8JSFepJCt2FRBvjhbL0vC66Wjjlh1G9cOTLLBYV1Sjc=
Subject key identifier:   C6:06:BC:FB:B9:60:2D:C3:65:BD:B4:76:D6:B0:33:93:5E:E6:34:77
Authority key identifier: AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3
Certificate issuer:       /CN=A919905B/serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
Certificate serial:       0651
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
Manifest number:          064A
Signing time:             Wed 20 May 2026 22:43:44 +0000
Manifest this update:     Wed 20 May 2026 22:43:43 +0000
Manifest next update:     Wed 27 May 2026 22:43:43 +0000
Files and hashes:         1: rKkepAl9np8x9W76xr1I8Ba-mNM.crl (hash: uGA65sRS6+x7QBLFgYrKha72nALA37UgTs+IC2puvmk=)
                          2: 7B16F590D3EA11EB99BAC229C4F9AE02.roa (hash: pIzlQIo1teMnXltG2bbIgb5DMh87y0gd2JDDDBIFb8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl
                          rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919905B, serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
        Validity
            Not Before: May 20 22:43:43 2026 GMT
            Not After : May 27 22:43:43 2026 GMT
        Subject: CN=6a0e3920-ab0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:1f:d3:33:67:40:4e:8c:6b:8d:68:5e:8a:
                    8f:34:3c:c1:68:bb:10:27:4d:bb:4a:ed:e8:d2:09:
                    cd:fa:db:7a:a8:e0:97:3f:ce:08:02:07:2a:96:a9:
                    86:fe:ec:bf:9b:88:7d:47:d9:f2:40:8e:e5:30:41:
                    ee:9f:4f:69:c4:b1:9c:d0:e9:19:bd:b2:df:21:84:
                    bd:8c:88:c9:b0:d8:f1:8d:d6:59:82:77:cc:3d:e0:
                    aa:35:5a:84:ec:01:f7:c3:bd:e3:fd:ff:2a:2a:2f:
                    7d:9c:1d:7e:4c:f7:34:00:8b:e9:4e:a7:81:c2:61:
                    42:fc:21:d1:05:3e:ca:7b:e0:cb:36:ec:ca:4d:c1:
                    4d:4d:0b:24:71:84:bc:8d:f4:b1:0b:65:bc:0c:a0:
                    bf:a2:0d:23:ab:cd:63:65:23:71:98:ec:04:f1:31:
                    bd:5a:15:8f:e0:db:67:81:21:55:df:58:97:26:e8:
                    82:f0:99:38:10:f0:2c:3f:74:ff:1a:88:e9:8c:9b:
                    0d:f8:e6:b0:a3:8b:fb:bd:70:af:87:c1:ed:ce:1a:
                    d0:db:b0:9c:bc:8b:93:b9:f6:43:9d:b2:02:7b:cf:
                    ff:7a:70:ea:f8:ad:c0:17:b7:36:16:6c:b1:e9:e2:
                    c0:72:b3:5c:99:2c:e9:2a:7e:50:f5:b4:b3:67:55:
                    cf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:06:BC:FB:B9:60:2D:C3:65:BD:B4:76:D6:B0:33:93:5E:E6:34:77
            X509v3 Authority Key Identifier:
                keyid:AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d8:c9:03:33:2c:39:39:75:e4:6d:f9:f2:85:9c:04:3e:7e:
         45:05:1f:68:b6:30:b5:5f:aa:e2:80:e2:d3:8f:8c:d0:08:e0:
         e6:4f:f1:0d:46:77:a9:f5:01:69:31:ff:23:d8:82:48:7d:49:
         22:31:4c:65:ca:69:0b:b1:4a:5d:03:d9:ad:be:01:df:a2:da:
         4d:27:fe:64:9c:3f:7b:9a:8f:4a:f9:49:93:60:fa:52:fe:f4:
         d7:62:d9:14:6d:7a:8f:59:e3:6d:8b:7f:e5:53:8c:a3:ae:df:
         a5:9f:c5:03:7d:98:ac:0c:d4:e8:f4:3f:e0:ee:db:53:86:0b:
         92:73:44:7b:0a:f7:c0:f0:55:fb:0e:69:a2:51:f0:3e:2e:73:
         77:6f:1d:5d:01:0a:ff:36:b2:e0:84:f2:99:9e:8d:ea:cc:35:
         0f:2a:78:a6:06:3e:1a:f3:c3:92:ae:56:a9:ee:93:71:11:75:
         66:23:6a:56:54:54:2e:cd:e4:16:36:5a:43:e7:a5:7d:86:e1:
         40:9a:18:62:78:c1:59:79:a5:38:a2:17:f8:44:50:d6:e0:6a:
         fb:ad:3f:9c:e1:41:92:fb:2c:73:68:6d:28:d8:dd:13:f1:e2:
         2f:2d:d0:9d:4f:36:27:6b:7d:ca:96:1e:03:03:fe:fe:be:72:
         fa:7e:40:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:23:07 2026 by rpki-client