Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
File:                     kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json)
Hash identifier:          IVTzNPQtTGcsFzK4swm+Hv9Ysny2ZqsfZ0A9b1le7nc=
Subject key identifier:   30:54:A3:18:92:92:B2:D5:6D:F8:34:F5:F9:5C:E5:7A:DA:3B:07:21
Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
Certificate issuer:       /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
Manifest number:          018F
Signing time:             Fri 17 Apr 2026 04:08:15 +0000
Manifest this update:     Fri 17 Apr 2026 04:08:15 +0000
Manifest next update:     Fri 24 Apr 2026 04:08:15 +0000
Files and hashes:         1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: dVHzQfE2dW9cfFHDbkqivsPjm0Yve9+3ebPAssd1ieY=)
                          2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: vWnJyVtLSPDbnLnMtUfpOpsMizJZ3OX7bmaYpD3gaL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
                          rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
        Validity
            Not Before: Apr 17 04:08:15 2026 GMT
            Not After : Apr 24 04:08:15 2026 GMT
        Subject: CN=69e1b22f-e76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:28:29:46:2d:27:ec:c0:61:0a:40:f9:1e:
                    12:34:39:6b:b9:c8:a2:d2:b2:3e:c4:91:29:7f:da:
                    0d:76:d6:53:64:45:e3:90:f2:f5:41:09:8d:35:14:
                    f6:94:f4:c3:8c:c8:10:92:d8:1b:2e:9b:d2:87:7e:
                    88:82:35:91:ba:3e:17:6c:1f:9c:bf:b0:3f:08:04:
                    dc:4a:70:dd:0d:e3:5f:60:5c:f4:e4:d9:3a:25:20:
                    ed:6b:44:70:b3:8c:13:6c:0e:68:d8:90:dd:b0:21:
                    7c:65:da:ea:59:a3:02:dc:18:4e:10:51:7e:71:86:
                    b6:49:3f:19:d1:89:c6:f2:54:08:2a:24:55:af:e7:
                    1f:51:9f:96:07:20:da:7b:9e:7f:d6:60:98:8b:96:
                    ec:c5:b8:42:da:ef:d3:61:82:fd:31:d8:29:82:e9:
                    ae:e8:15:2a:34:9a:a6:51:d8:5d:4e:eb:88:1f:61:
                    01:37:f9:ce:06:46:c4:8e:19:87:fd:08:53:ab:ab:
                    21:a8:20:92:ab:7c:e3:10:26:9a:87:f8:4f:a5:9a:
                    93:13:d5:b0:66:c5:21:73:5b:da:04:4f:c2:48:23:
                    d2:10:f3:a6:95:c3:e0:df:f3:f2:5d:50:19:2d:2b:
                    27:42:02:bc:6e:da:92:aa:92:fe:ae:e4:6e:63:3f:
                    94:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:54:A3:18:92:92:B2:D5:6D:F8:34:F5:F9:5C:E5:7A:DA:3B:07:21
            X509v3 Authority Key Identifier:
                keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1f:af:8d:7d:c4:94:e1:a8:ab:dc:7c:eb:27:3f:6e:5e:50:
         f1:a7:2f:89:f5:65:dc:fd:48:dc:20:7e:56:50:15:b9:c9:58:
         3b:18:58:b2:4f:cd:37:d7:cd:2d:32:d8:72:a6:06:42:0d:58:
         21:07:41:f0:1e:a9:0e:ee:a6:ba:ac:4e:ee:14:fb:6c:05:b6:
         9b:44:0e:c5:08:20:a8:20:34:38:33:63:46:f5:9c:b6:c2:b4:
         e9:6b:ee:56:0b:0f:8d:47:c1:d1:cf:19:c2:fb:43:ff:f0:a4:
         c0:22:22:e3:1f:a0:13:b3:a6:92:ec:ca:6a:e4:2e:5d:24:d5:
         2f:22:7f:54:ae:83:d6:a7:62:53:95:c6:eb:69:fe:50:62:e8:
         db:2d:d9:5f:1f:ae:7e:a7:5d:c9:31:d0:23:ed:7e:6b:98:36:
         6e:aa:03:38:68:5d:03:17:e6:32:bd:a3:5e:ea:47:a5:09:b4:
         84:5d:82:d2:1e:21:51:27:80:0f:3a:c5:d8:a9:69:fc:71:24:
         cb:e1:7f:df:f0:87:67:c8:0b:ee:f1:3b:5f:25:da:94:13:b1:
         30:14:84:5c:79:f1:d7:1d:8d:63:31:4a:a6:ef:ae:14:de:d6:
         76:7e:82:e0:ca:4c:98:cc:ca:67:b5:01:27:3b:d9:6f:b6:e3:
         3c:8d:25:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:24:11 2026 by rpki-client