Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
File:                     Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json)
Hash identifier:          9AHeoQUBMKBjJEeCMden5uodw5yd6diIsP7m1d2B+4M=
Subject key identifier:   3F:61:53:B1:8E:1C:CC:8E:9E:47:3E:41:97:BE:79:ED:4E:70:8D:7F
Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
Certificate issuer:       /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Certificate serial:       06E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
Manifest number:          06D6
Signing time:             Sun 20 Sep 2026 22:09:34 +0000
Manifest this update:     Sun 20 Sep 2026 22:09:34 +0000
Manifest next update:     Sun 27 Sep 2026 22:09:34 +0000
Files and hashes:         1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: ZYuH78kA9RLkPl58Ql3irnS4hTI1sgYqrKAC9vRy+k8=)
                          2: B8E6481655AA11F1ABD37D4A9B833773.roa (hash: 8rIA49TPHJ0ZY3EFKpWm3baP6XZiOHgLCBv2FhYMWYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
                          rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1761 (0x6e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
        Validity
            Not Before: Sep 20 22:09:34 2026 GMT
            Not After : Sep 27 22:09:34 2026 GMT
        Subject: CN=6ab0599e-a701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5c:65:f0:74:16:cd:f6:00:e0:3d:1f:72:e6:
                    96:c8:e8:57:bf:d8:e6:5a:39:ca:c1:0c:b7:81:bb:
                    b9:e9:dc:ab:8e:7a:55:24:78:77:a3:ce:72:f1:1d:
                    94:4c:98:58:a4:24:f4:b2:f0:69:20:0f:02:2e:e2:
                    7b:ca:34:80:ac:22:e9:0e:77:25:c5:d1:ee:fb:bd:
                    b8:06:f4:14:ca:1e:3e:26:1a:a1:2b:3b:b6:29:a6:
                    26:c5:04:23:27:b5:c6:74:22:59:5c:06:86:6c:6e:
                    29:73:0e:ea:0c:47:ef:6a:c5:56:10:aa:4d:69:04:
                    b1:f3:8b:8e:e6:aa:8e:be:e3:a8:13:9f:3f:10:9e:
                    c8:9e:c9:a8:13:97:87:54:b9:65:0b:d2:a0:2e:54:
                    8e:c2:7f:a1:20:df:d6:2d:9f:39:0e:6e:a9:7b:18:
                    eb:7c:73:ae:a7:ae:76:3f:7d:94:6a:d8:91:f2:43:
                    c7:f7:ef:5b:0b:2d:26:b2:62:68:0e:7b:54:f8:db:
                    18:18:de:74:97:0b:e0:ce:b8:af:c5:f3:32:86:5b:
                    38:53:f8:b1:48:ff:4d:8d:74:bd:55:ce:a0:20:2d:
                    60:24:a7:88:89:b8:74:03:16:8c:f4:2a:35:a6:39:
                    91:d3:ff:7a:2c:4f:ab:8f:36:0d:39:f5:29:05:3c:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:61:53:B1:8E:1C:CC:8E:9E:47:3E:41:97:BE:79:ED:4E:70:8D:7F
            X509v3 Authority Key Identifier:
                keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:78:05:7b:8b:ca:a9:93:3f:d9:d9:4a:c9:df:d8:75:61:69:
         8e:85:b6:50:14:e0:77:82:02:eb:34:42:6f:ad:e9:92:38:60:
         be:2d:72:f5:f7:b5:91:5f:c9:b5:1a:90:97:a2:8a:be:7c:51:
         20:fc:1e:81:87:ca:d8:00:1a:08:1c:3d:fe:03:fa:e6:46:57:
         af:4b:3c:d7:53:6c:f7:54:06:ed:94:b8:02:24:95:3a:1d:e4:
         0c:13:28:56:59:36:5f:0c:3f:b7:89:49:cf:26:fc:3d:9a:34:
         d3:ea:3f:02:ff:c3:35:09:b1:0c:74:64:2c:e3:4f:5d:65:e7:
         5f:f7:3a:3d:9e:a3:89:f3:10:76:1b:aa:db:35:8a:63:3b:69:
         a8:fa:ac:f1:ea:4e:5c:30:25:f7:44:a8:1f:61:62:aa:4a:ff:
         0d:1c:34:7f:04:56:e0:b3:9d:85:43:37:e0:9e:4e:07:a2:c9:
         3d:ef:a2:4f:67:e9:40:77:6a:0f:80:5c:e5:d9:c5:65:fc:e2:
         91:cc:d1:6c:f8:88:23:53:f4:c7:60:5c:39:3f:6d:91:df:85:
         0b:b3:39:c4:53:2b:83:2b:81:ed:cc:2f:dd:78:7b:68:41:19:
         02:0f:c3:9a:a2:5b:92:cb:38:c2:0a:34:57:79:d9:2d:e1:e8:
         57:b8:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:08:15 2026 by rpki-client