Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
File:                     kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json)
Hash identifier:          zjrKOqgybMH3CSja6pv/O3U1i6+MGjUgbUgrCb6kXH4=
Subject key identifier:   76:34:E6:01:19:AF:57:DB:A3:87:6A:2B:78:C9:BC:D1:1B:3C:AB:68
Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
Certificate issuer:       /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Certificate serial:       0100
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
Manifest number:          F0
Signing time:             Fri 17 Apr 2026 06:07:26 +0000
Manifest this update:     Fri 17 Apr 2026 06:07:26 +0000
Manifest next update:     Fri 24 Apr 2026 06:07:26 +0000
Files and hashes:         1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: I+bqCg7lag13efLwxzwKAeS6SQsg7rsaZbp2JnuoXhU=)
                          2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: Tk6XuHe+UOcO0wAYL78ZhK/3o/y93kH+Qpt8b1oatZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8
        Validity
            Not Before: Apr 17 06:07:26 2026 GMT
            Not After : Apr 24 06:07:26 2026 GMT
        Subject: CN=69e1ce1e-c6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:b6:1f:5b:99:22:7b:00:3f:85:63:85:13:
                    c2:3d:fd:35:06:ad:63:1b:f8:ea:40:04:88:3a:14:
                    25:af:4f:c6:1f:8a:12:86:a3:d8:d5:1e:44:01:e7:
                    83:9f:e5:c9:9c:01:39:87:19:38:67:62:15:08:cc:
                    4c:45:c1:a6:be:34:7a:2a:76:5a:a2:62:2e:09:c0:
                    45:ba:d1:e7:43:0b:7f:99:04:71:1b:82:d6:0c:91:
                    27:3b:a8:cb:b6:a4:5a:74:da:b1:03:3a:12:66:15:
                    28:05:40:d2:7f:c2:91:5b:b0:71:c4:13:6f:e5:a2:
                    e8:76:42:f2:6d:29:9b:a4:81:42:44:8f:57:ed:cb:
                    8d:0f:0e:9a:a3:ac:7e:7d:a4:36:cc:ce:63:0c:7c:
                    a3:69:88:f0:36:3a:87:64:fa:02:22:62:9c:3e:f4:
                    53:2f:68:33:d0:2f:ee:a0:1d:b7:b7:91:30:b9:37:
                    0b:e7:73:8d:42:1c:45:00:63:70:b9:89:c9:47:e0:
                    03:f4:30:09:27:40:31:76:e4:fe:68:e9:43:18:b6:
                    b5:d3:63:d2:c3:68:4a:04:68:f4:8c:02:d7:99:3a:
                    7b:7d:14:d5:fc:0f:17:3c:5d:ce:d6:76:1e:87:ce:
                    74:d0:0f:ff:5b:5f:25:43:b6:e8:01:16:1a:48:c7:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:34:E6:01:19:AF:57:DB:A3:87:6A:2B:78:C9:BC:D1:1B:3C:AB:68
            X509v3 Authority Key Identifier:
                keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:64:ce:40:57:c6:0b:7c:a1:01:9f:59:d7:ab:ed:8c:24:a5:
         b8:e8:63:67:fa:e5:ce:3c:1c:72:38:7b:24:ce:43:7e:31:f7:
         ae:67:fa:85:9a:22:c9:e9:e7:81:3e:f2:41:18:b1:6e:c5:b7:
         85:89:0b:3a:ef:60:37:66:21:62:ce:86:43:b9:70:3c:7e:21:
         e8:0a:d6:d3:a8:2c:c4:c7:98:71:df:a2:57:75:f1:4c:51:d0:
         6d:b1:ff:78:ed:69:e6:9e:6d:a9:18:54:a8:49:9b:38:5c:19:
         4d:70:98:63:69:d3:58:50:7f:01:50:17:53:34:3a:fc:a3:45:
         9b:f2:f8:c7:a6:a6:0c:64:bd:d9:6b:72:7e:37:37:ce:6f:8b:
         09:e4:5a:16:18:41:23:63:c4:4e:40:35:d0:08:4e:ee:2a:05:
         ec:3e:80:be:4f:e3:43:3c:8f:47:d2:27:44:f2:18:4a:7f:0f:
         4f:46:d8:6b:74:39:b4:b9:47:9c:72:e8:49:54:9b:05:59:81:
         4d:73:29:68:57:14:15:d8:b6:0a:55:51:5a:28:59:49:07:d8:
         4c:56:ad:d8:23:59:72:f2:2c:dd:88:3e:bb:2b:ff:66:65:8f:
         56:ad:bb:7d:3b:a2:6f:5c:24:05:14:75:2f:f1:f5:8e:a0:46:
         d6:c7:e1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:15 2026 by rpki-client