Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft
File:                     KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft (raw, json)
Hash identifier:          TbjfxvI+EN2qz80ApZU/COCRAxDN/QS1U4/C6AvARSU=
Subject key identifier:   2C:95:63:EC:71:05:A6:8F:8F:CB:5B:4C:4A:09:33:52:DA:F0:2E:D6
Authority key identifier: 2A:45:A4:1D:60:E2:F1:04:D3:DD:39:C8:6F:14:BC:59:00:88:3F:4B
Certificate issuer:       /CN=A91A4287/serialNumber=2A45A41D60E2F104D3DD39C86F14BC5900883F4B
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft
Manifest number:          E9
Signing time:             Sat 13 Jun 2026 06:33:47 +0000
Manifest this update:     Sat 13 Jun 2026 06:33:46 +0000
Manifest next update:     Sat 20 Jun 2026 06:33:46 +0000
Files and hashes:         1: KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl (hash: M5K0CO3FotpgrRCuIbSXwynH0ASmAbYmhtX81qG6WxY=)
                          2: 8CC07FC0047211F0A6541526C4F9AE02.roa (hash: xg+5Kz8DfP64v+0K6uLKgS3hlywm1P1UwcX/Q9P2caM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl
                          rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4287, serialNumber=2A45A41D60E2F104D3DD39C86F14BC5900883F4B
        Validity
            Not Before: Jun 13 06:33:46 2026 GMT
            Not After : Jun 20 06:33:46 2026 GMT
        Subject: CN=6a2cf9cb-4d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:fc:eb:5a:ca:1f:94:92:3a:35:b6:50:7f:
                    17:1e:bd:5d:6f:d2:e2:1d:b5:d9:91:63:ff:35:ac:
                    ce:58:d4:1d:a0:47:7c:22:45:3c:b8:ed:57:3b:46:
                    41:14:9a:ac:97:c1:ca:52:54:2f:82:0b:3b:84:68:
                    10:58:0d:73:12:86:7b:d5:a8:f3:94:82:ae:bf:44:
                    3e:fb:45:60:52:78:c2:ff:e0:b1:6c:ea:f6:a8:8b:
                    91:6b:da:0f:0d:94:66:d6:e1:73:78:53:58:5f:be:
                    46:db:69:26:23:68:e3:cb:03:6c:07:22:54:b5:a2:
                    f0:41:79:4f:74:16:18:f5:b3:db:73:37:3c:f3:e3:
                    b4:7f:fd:fb:3f:55:dd:42:dc:e7:5e:93:47:22:63:
                    7e:b6:62:52:72:08:42:97:7c:13:81:56:f8:89:5a:
                    5b:81:ab:c5:ed:30:5f:61:90:fb:2e:7b:78:73:d2:
                    92:ce:50:85:a8:35:21:3f:91:90:49:df:3a:c0:15:
                    37:26:14:f0:d4:0a:d8:d7:8c:a2:c7:7f:ba:59:f3:
                    a5:ff:47:15:1a:25:52:a3:2d:cb:a5:b3:58:c1:df:
                    77:87:64:d0:83:62:7d:e9:a6:a7:02:f6:41:7b:25:
                    82:a4:00:62:98:5f:f3:c1:70:6d:ff:2c:09:fc:30:
                    c6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:95:63:EC:71:05:A6:8F:8F:CB:5B:4C:4A:09:33:52:DA:F0:2E:D6
            X509v3 Authority Key Identifier:
                keyid:2A:45:A4:1D:60:E2:F1:04:D3:DD:39:C8:6F:14:BC:59:00:88:3F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e1:7b:b9:52:3b:b0:61:84:38:6c:50:93:48:a6:5d:02:aa:
         78:3e:99:ce:4e:79:f8:b7:9e:69:0e:76:81:01:d0:4c:2e:13:
         4c:de:ed:fe:99:bd:41:4b:b9:d2:22:c5:d3:9e:8c:ad:e2:45:
         57:8c:62:45:71:2f:e4:f8:12:85:e4:7d:4f:1f:28:a4:a3:5b:
         3f:fe:c6:c1:88:0b:a9:cf:53:eb:13:9f:7f:36:5c:58:b9:18:
         c8:b2:0e:07:39:e1:7a:83:15:a3:8e:36:00:2e:d7:f2:43:f4:
         58:66:a1:03:57:29:cb:fc:e7:32:98:26:3c:31:c2:9e:11:19:
         6c:63:48:47:91:cb:48:18:18:46:79:6a:85:97:3c:db:d7:91:
         6a:73:24:4e:4c:79:7b:6d:e7:d1:a5:0c:86:1a:3d:0e:a9:84:
         dc:9c:c6:e2:39:97:c4:d2:d2:9d:fd:7b:67:ca:98:c2:79:c0:
         0d:e2:ff:6b:56:8d:1a:72:64:48:52:df:84:65:15:e5:46:85:
         c1:cb:18:96:56:7f:0d:69:94:71:83:3f:94:74:7d:f7:aa:df:
         da:7a:10:f3:0c:fa:4a:f6:8e:2f:6b:de:18:54:8b:06:23:24:
         37:f1:53:32:4a:fd:d6:b7:dd:cf:1c:be:66:43:67:ab:c7:d5:
         0b:d5:7d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:02:03 2026 by rpki-client