Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
File:                     kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json)
Hash identifier:          pjGGdJ3T/qsCloXYawz//WH6l06SIakdIANshjiGLoE=
Subject key identifier:   49:41:FA:22:21:59:D8:AA:FE:B6:C3:62:2C:C8:22:D1:F5:54:14:A7
Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
Certificate issuer:       /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
Manifest number:          011D
Signing time:             Fri 17 Jul 2026 07:02:25 +0000
Manifest this update:     Fri 17 Jul 2026 07:02:25 +0000
Manifest next update:     Fri 24 Jul 2026 07:02:25 +0000
Files and hashes:         1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: Xmo6lGYQervUd+TlX7/wzhuCKo3IUzi7yombWDhdmDU=)
                          2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: Tk6XuHe+UOcO0wAYL78ZhK/3o/y93kH+Qpt8b1oatZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8
        Validity
            Not Before: Jul 17 07:02:25 2026 GMT
            Not After : Jul 24 07:02:25 2026 GMT
        Subject: CN=6a59d381-050f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:32:55:d7:a0:6d:b9:d3:90:b7:9c:0c:01:17:
                    f0:2d:40:1c:8b:86:6f:d5:09:0b:46:3b:2d:02:91:
                    7a:b4:a9:c7:ea:a0:81:51:4c:d1:0e:d1:f1:a9:33:
                    da:19:63:d7:cc:d6:22:b9:f0:72:94:df:68:1d:5f:
                    65:ec:9f:b2:7d:5c:76:0a:eb:d7:e7:9b:70:de:26:
                    fe:72:3b:9a:40:dd:52:5d:a2:29:ac:99:1b:77:69:
                    f6:f0:31:7e:36:e6:68:a6:72:d4:50:f8:71:ee:56:
                    aa:4a:32:48:2e:a8:34:c2:90:6c:0b:c1:be:1e:98:
                    96:2e:8d:ea:37:71:74:71:4c:49:0c:b5:3b:99:29:
                    43:d2:5d:b5:a2:7f:5f:79:41:72:67:30:db:ec:d9:
                    21:c2:db:32:56:43:3f:fb:ef:23:dc:e8:93:f6:8b:
                    32:ab:6c:b5:34:69:56:2a:1d:ac:10:cf:50:fa:72:
                    05:d6:8a:bf:99:a9:9e:bf:8f:72:61:3c:e3:c8:1a:
                    b2:99:d5:8c:15:66:6e:fe:c2:c3:0a:09:82:9f:2d:
                    54:58:df:96:7c:f7:21:58:48:89:68:55:a6:6c:59:
                    56:e7:27:e8:60:ee:d6:28:df:c0:45:31:64:b2:c7:
                    88:f4:4e:4c:a7:69:f3:cf:61:5f:37:3d:14:9f:c0:
                    fa:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:41:FA:22:21:59:D8:AA:FE:B6:C3:62:2C:C8:22:D1:F5:54:14:A7
            X509v3 Authority Key Identifier:
                keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:41:ec:f6:7c:f0:a4:d3:9d:25:07:98:4f:7c:a7:53:90:55:
         0d:15:44:ee:c7:d5:16:40:83:12:58:b7:6b:97:9e:1c:6f:91:
         aa:f0:bb:eb:43:c0:b3:f0:47:b8:27:f4:2f:95:a1:80:70:18:
         88:c2:97:b4:45:4b:36:d8:44:52:95:dc:19:e1:06:2b:c7:f5:
         66:dc:14:89:cb:24:b6:99:d7:6e:20:ab:3d:a8:3b:b7:db:3a:
         cc:c8:5b:aa:e4:76:d5:07:f3:cc:b9:54:f0:ba:5e:b7:50:35:
         a6:02:4d:9f:87:96:ab:35:e1:f1:c5:fc:10:76:cc:fa:6f:44:
         f2:27:54:3a:df:b5:24:eb:19:82:06:d9:5b:90:a5:e1:2a:ff:
         1d:89:8f:72:60:79:3f:39:50:cf:2f:1c:2d:2f:ef:b5:89:e9:
         ee:2d:c0:14:7e:32:e3:63:52:a3:be:b1:3c:39:2e:87:b4:a4:
         49:a2:24:16:cb:96:d0:12:a7:17:89:b1:ec:2e:10:d0:2a:8f:
         4d:1a:42:07:e2:32:d0:c3:70:76:be:01:e5:a6:03:d3:0c:50:
         c1:26:f3:6f:1f:1d:58:24:8b:81:28:69:5b:6e:ba:cd:e5:52:
         0f:c0:8e:1f:e9:a3:71:ee:30:2a:5f:40:a6:4a:ed:f4:2f:26:
         10:3b:7a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:06 2026 by rpki-client