Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
File:                     KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft (raw, json)
Hash identifier:          dtp+vbmdJmzlE1/BNhnOtdnTMPcrNRgMR4kCrbiONMA=
Subject key identifier:   30:D7:9F:A7:6E:A4:85:38:B0:3F:DD:98:2C:99:A1:0E:8F:4C:6F:00
Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38
Certificate issuer:       /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
Manifest number:          015E
Signing time:             Fri 17 Apr 2026 04:38:12 +0000
Manifest this update:     Fri 17 Apr 2026 04:38:11 +0000
Manifest next update:     Fri 24 Apr 2026 04:38:11 +0000
Files and hashes:         1: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl (hash: E6EpOkhLPnV316H8O9gH6SI9OsciVq16o5+1Zw4h6zA=)
                          2: 4394064223D511EF9AB13E4FC4F9AE02.roa (hash: m9PVqT0U37yXO4ZBkmsSwAW86j+V8m+FgHiO1R6bfj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl
                          rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
        Validity
            Not Before: Apr 17 04:38:11 2026 GMT
            Not After : Apr 24 04:38:11 2026 GMT
        Subject: CN=69e1b934-5892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0e:34:ef:f6:28:00:e3:94:8b:3d:8c:50:08:
                    35:89:b0:0b:cf:d0:df:3a:cb:e9:43:f6:50:9f:60:
                    02:d1:a9:50:f2:85:19:42:84:4b:5d:9f:28:45:f4:
                    05:a1:eb:bf:3b:fd:49:57:c8:48:1b:46:4e:39:e0:
                    80:e3:b5:99:9e:69:f3:29:0e:54:2d:fe:ed:b7:67:
                    5f:f1:fd:dc:9d:0f:79:94:f6:53:2b:0d:61:92:a9:
                    c7:da:9d:df:d3:3f:9a:af:bc:e8:fd:4f:62:91:a8:
                    4e:35:2e:d7:ad:e4:dc:77:8b:d6:a7:44:95:2f:a1:
                    37:25:87:d6:55:76:82:f8:ec:2f:4f:1c:11:17:9f:
                    b2:2d:95:55:a8:e1:fb:c2:96:79:35:f1:1f:88:ce:
                    8a:ea:09:98:39:91:0a:a3:a4:bb:dd:0c:88:dd:ea:
                    3a:5c:83:2b:d5:bd:a4:57:8b:e4:d6:e7:3f:b9:51:
                    29:ff:58:4a:9d:f7:2e:ba:1c:4d:e1:3e:29:b3:65:
                    0a:94:3a:23:10:0a:3e:8f:5c:ae:ce:93:d6:9c:7f:
                    7e:84:7a:42:64:66:0f:a4:da:09:26:80:09:28:5f:
                    35:12:e3:8b:81:ef:bf:97:11:88:c2:13:4d:aa:fd:
                    fb:94:67:b7:dd:2e:36:ff:c9:1c:65:96:00:72:e4:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D7:9F:A7:6E:A4:85:38:B0:3F:DD:98:2C:99:A1:0E:8F:4C:6F:00
            X509v3 Authority Key Identifier:
                keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:89:7f:db:45:aa:78:a4:bb:41:33:65:75:a4:ca:93:b6:77:
         61:42:33:8b:82:69:61:7d:58:10:15:39:a5:3b:cd:7b:ac:7d:
         7c:64:df:f3:f6:3e:10:e5:04:7e:88:bd:25:76:db:61:e6:c6:
         69:df:25:2d:5c:b2:a4:63:29:70:70:d7:0f:d3:31:33:e1:06:
         b1:6b:ca:8a:90:aa:d0:b9:c0:d8:cb:6f:33:2b:d8:ff:a9:0a:
         f7:fb:65:ee:46:24:b5:ae:8f:3c:89:bc:c9:3f:ec:cc:e3:33:
         13:e2:d9:2c:d3:d6:fd:9b:8b:e5:a7:9a:bf:00:8a:fa:37:ac:
         ee:e8:11:c0:c8:54:3c:70:45:c1:fc:99:19:93:b4:09:f9:bb:
         3a:b1:29:ea:4e:0e:1c:67:68:dd:12:35:53:9f:5f:48:a5:09:
         8c:eb:0d:89:93:d8:d9:2b:4e:6b:dc:4c:fb:d9:5a:f9:51:9f:
         29:22:b8:5e:52:d7:cc:71:02:cc:d7:4d:34:6e:04:aa:85:e0:
         87:89:7a:6b:08:60:ad:39:cb:01:31:7f:42:f3:11:46:a8:9e:
         c5:77:fd:38:9d:b9:7e:c3:a8:ef:a1:35:bd:3e:cb:3a:02:ca:
         d6:d8:33:19:86:c8:f7:9a:31:8e:3c:3a:24:6e:84:eb:aa:f8:
         48:0c:29:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:23 2026 by rpki-client