Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
File:                     kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json)
Hash identifier:          UjbMuJwiyXBicxsulhSRcVO1n0w9eoiwD6H8tWC5yiY=
Subject key identifier:   77:71:22:41:E8:1E:F8:B4:0D:AA:72:0B:01:37:40:37:25:85:F0:8F
Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
Certificate issuer:       /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
Manifest number:          0139
Signing time:             Wed 09 Sep 2026 05:57:40 +0000
Manifest this update:     Wed 09 Sep 2026 05:57:39 +0000
Manifest next update:     Wed 16 Sep 2026 05:57:39 +0000
Files and hashes:         1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: 1wh0NdT2PTjDy4DBZtM+dYDSfjFkVh2lVIHB3kSV6Os=)
                          2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: Tk6XuHe+UOcO0wAYL78ZhK/3o/y93kH+Qpt8b1oatZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 05:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8
        Validity
            Not Before: Sep  9 05:57:39 2026 GMT
            Not After : Sep 16 05:57:39 2026 GMT
        Subject: CN=6aa0f554-8ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:af:72:8c:54:eb:e6:cf:a3:71:98:f1:02:
                    e3:18:2e:27:5f:43:36:44:78:36:b2:72:ea:8f:ea:
                    89:ef:f3:1e:be:4a:21:14:d9:19:7e:47:94:ac:7e:
                    8f:72:a8:60:8e:dd:79:78:c0:2c:b5:2e:67:49:88:
                    18:16:11:22:dd:83:e7:3d:c9:d8:01:d8:98:8f:aa:
                    2d:1b:e9:4e:83:f1:ae:ee:e8:28:be:c1:e0:f3:63:
                    6e:7b:20:f5:0c:5a:2d:44:e1:db:00:8f:b4:b4:22:
                    2d:92:dd:2e:df:26:1e:c8:bc:09:c9:10:7f:f0:94:
                    54:cc:6f:de:a7:87:a5:24:80:e3:68:79:4f:69:fa:
                    d7:81:5f:1a:90:78:81:77:d7:39:5c:ad:d6:32:8d:
                    68:e6:a8:59:46:9e:b7:2d:68:8e:60:85:9a:81:7c:
                    57:56:fe:81:a8:83:c2:e7:52:83:9c:07:cf:1e:95:
                    8c:3c:6f:20:6e:e1:cc:1b:34:3e:e3:1b:80:ee:d5:
                    4b:4d:3f:8b:34:9e:a0:88:44:b5:15:26:59:fd:2a:
                    46:c0:19:51:47:db:e1:b3:c5:fd:44:46:d3:89:22:
                    d1:70:d4:76:f0:94:28:87:fb:bf:59:ea:76:80:fa:
                    7a:33:a6:f2:8e:84:48:fa:a0:ae:7e:17:7a:b8:d9:
                    8b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:71:22:41:E8:1E:F8:B4:0D:AA:72:0B:01:37:40:37:25:85:F0:8F
            X509v3 Authority Key Identifier:
                keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fb:33:66:50:0e:24:69:ba:71:80:7a:f5:a6:d4:b7:1d:e8:
         25:dc:b8:91:ae:fe:c7:42:b5:7e:34:e2:db:e8:b7:35:7c:8b:
         d1:10:25:c8:9a:a7:a4:9d:3d:8b:84:83:91:6a:5c:43:bf:2a:
         b8:c5:f9:b8:47:82:97:e7:5d:6e:dc:3a:ec:01:00:63:da:ba:
         7e:de:d3:80:55:2d:ba:b6:ce:e7:9b:40:1f:8e:6e:82:97:c1:
         b1:77:d7:65:50:7c:7e:ee:b1:c3:d5:4d:24:87:4f:42:ee:10:
         c3:af:de:aa:ba:07:dc:80:21:9c:2c:57:da:e9:c3:fc:78:72:
         71:e2:bb:8d:93:6a:d4:cd:59:e3:b6:72:69:47:96:5e:c8:49:
         7d:8a:3d:91:d1:26:e9:e9:c6:2e:81:c8:3a:ec:22:af:35:35:
         e0:8c:36:cf:36:53:08:00:11:4a:e8:7d:d9:a4:9e:a1:4d:ea:
         49:e9:89:78:2b:0b:97:ae:7e:c4:92:09:bc:b9:45:37:73:34:
         c0:54:db:c6:ac:71:5d:2a:43:4e:bf:6b:5e:aa:83:fd:03:d6:
         b1:e0:68:9d:43:8a:4c:09:a9:66:87:3a:bd:36:68:5e:a8:b8:
         2a:62:bb:e2:f4:f3:5b:96:26:a9:74:ac:d5:d0:04:c7:19:29:
         36:d8:9b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:34:24 2026 by rpki-client