Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
File:                     kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json)
Hash identifier:          qzzwafmiX25Tk7aaEl5Tbw/pN9m5pm14eITm/RhvvYE=
Subject key identifier:   F7:25:97:BD:5F:68:B0:FC:A0:BE:79:07:91:AD:57:65:01:D6:2E:CC
Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
Certificate issuer:       /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
Manifest number:          010C
Signing time:             Sat 13 Jun 2026 06:11:06 +0000
Manifest this update:     Sat 13 Jun 2026 06:11:06 +0000
Manifest next update:     Sat 20 Jun 2026 06:11:06 +0000
Files and hashes:         1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: U+jSDdoSnbSE0THKj4oVTFDOCfKb9d9SI2pBamV4GcI=)
                          2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: Tk6XuHe+UOcO0wAYL78ZhK/3o/y93kH+Qpt8b1oatZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8
        Validity
            Not Before: Jun 13 06:11:06 2026 GMT
            Not After : Jun 20 06:11:06 2026 GMT
        Subject: CN=6a2cf47a-4046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:22:4d:ac:75:53:3d:15:a9:07:99:d3:77:
                    ea:ae:ca:f7:91:a7:c1:d6:1c:97:4f:68:ff:46:28:
                    76:94:b8:41:c5:47:d5:07:65:6c:5b:f6:ce:2f:b6:
                    38:d9:35:6c:4c:86:eb:39:79:f5:b3:58:03:6f:f6:
                    59:1f:e2:de:83:bb:1a:27:e2:70:51:e8:8e:36:18:
                    4e:b6:48:19:30:dc:92:1c:3b:e9:1f:24:3d:ec:b0:
                    8e:0c:1e:73:6a:36:6b:39:6e:bc:b4:e9:6a:e1:c7:
                    ae:15:f1:d6:5d:b4:dd:fa:04:78:9d:88:7d:11:ff:
                    b8:4b:27:3b:56:14:e9:3f:6e:34:92:38:f6:65:66:
                    9d:bb:af:52:5f:67:4f:30:b8:b9:b1:1f:49:5e:22:
                    1a:14:4c:46:89:8a:3c:15:16:d8:93:51:47:a5:e2:
                    c1:be:01:90:4e:d4:14:d4:8b:cb:8b:83:90:c5:68:
                    b8:b3:dc:c1:e5:77:29:b6:e8:4b:cc:14:87:5c:55:
                    b3:58:6f:be:52:f9:90:69:ab:e1:d0:fc:23:c8:a3:
                    1e:4f:45:e5:1a:16:e6:ca:c1:18:ab:76:f8:cc:4a:
                    9c:87:b1:34:33:09:2a:62:f8:24:ed:c3:78:fe:9c:
                    fa:d3:ac:c1:c6:ef:fe:0d:00:ae:51:ce:0e:7d:06:
                    c7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:25:97:BD:5F:68:B0:FC:A0:BE:79:07:91:AD:57:65:01:D6:2E:CC
            X509v3 Authority Key Identifier:
                keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d6:2d:f6:52:62:2f:e2:f8:96:d5:ad:24:ab:50:3f:9c:25:
         d6:10:9e:16:02:74:08:7d:3e:2a:60:4f:3a:28:0e:d5:6a:cd:
         1f:02:e4:6c:f7:80:b4:33:74:01:ad:26:c1:da:73:f1:1c:58:
         e1:71:92:6a:25:00:0e:4f:1f:98:18:01:e8:67:c7:9d:01:7b:
         88:a4:bb:fc:c5:d2:3e:32:c7:24:1c:87:68:7d:5a:20:51:6b:
         c3:59:cd:18:e5:be:12:01:a7:f4:d6:54:58:da:ad:74:54:49:
         ca:12:7a:90:8a:dd:c1:4f:e1:94:09:69:ad:ad:83:f1:cb:0a:
         f4:7f:cb:13:7b:dc:f3:fa:c9:4f:00:06:ee:06:d5:cd:79:f0:
         de:cf:1d:1d:1c:87:c8:85:68:32:86:49:d5:11:1f:33:9f:f3:
         f0:f6:57:04:03:93:ed:16:ca:25:2e:6f:f7:fc:14:44:ae:1c:
         de:8c:f2:b0:24:74:af:6d:bc:95:01:90:dc:c5:37:12:ee:3f:
         1d:23:6f:bc:0c:78:2f:07:56:10:95:2a:a5:3b:4a:f0:0f:2b:
         0e:27:9d:ec:11:f1:32:8e:ec:26:e7:24:1e:83:fe:ba:45:34:
         f8:dd:fd:d5:18:04:a3:3c:29:29:ce:7a:72:86:b9:42:5d:c1:
         47:39:cd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:36:28 2026 by rpki-client