Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
File:                     kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json)
Hash identifier:          rjHawrawtbLGJb/vpZA3cWB+8B2Eb5ZRxyPv0RrP/3Y=
Subject key identifier:   D0:57:4F:E6:B2:A8:F0:E9:0D:14:34:3F:6D:42:9D:6C:DA:41:F0:7C
Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C
Certificate issuer:       /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
Manifest number:          84
Signing time:             Thu 23 Jul 2026 09:28:45 +0000
Manifest this update:     Thu 23 Jul 2026 09:28:45 +0000
Manifest next update:     Thu 30 Jul 2026 09:28:45 +0000
Files and hashes:         1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: 7jNwPnC7P03GDAj/wrFoHEcZMBkzxrUZlMD+3V6wfXs=)
                          2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: x6jH0YoExuPajTzRi1fsVZ3AaYHRKD72yw6/eXqhzss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl
                          rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
        Validity
            Not Before: Jul 23 09:28:45 2026 GMT
            Not After : Jul 30 09:28:45 2026 GMT
        Subject: CN=6a61decd-cf96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:6c:40:98:3b:e3:b7:97:4f:a4:dd:bb:69:
                    67:e3:e5:dd:56:54:5b:e2:82:d5:76:5a:e1:01:21:
                    6f:05:65:dc:e5:41:9e:39:91:01:b8:15:54:57:aa:
                    f2:96:88:6d:82:ed:ff:d0:25:d4:31:66:3c:e1:fc:
                    03:5b:9c:91:0d:d1:a5:07:56:9c:85:38:57:59:1d:
                    30:7b:a0:f3:56:2a:fa:04:18:c0:2d:7d:1a:22:d5:
                    66:69:b9:02:80:a7:d4:72:01:0b:60:47:3e:65:cf:
                    16:60:0e:24:b2:60:76:f5:ec:83:14:11:5e:36:94:
                    8b:78:f7:41:cb:ae:50:4c:4d:47:c2:9a:b9:bd:90:
                    e4:0f:46:d8:0d:2c:8e:d7:be:4e:71:fa:ae:ff:98:
                    ec:4d:27:89:ae:bd:99:a9:ee:c4:69:41:91:90:99:
                    26:60:21:38:69:08:4d:4e:b3:5b:dc:26:8f:93:ed:
                    2e:f0:f4:98:df:f9:8a:2b:c7:16:9d:3a:84:22:92:
                    4f:81:de:e7:a8:c4:f6:9c:a8:d1:ff:1e:85:f1:7c:
                    ab:4e:ca:d9:1e:12:dc:c2:22:c2:86:f1:9b:cb:f0:
                    10:35:0e:ca:43:74:af:a7:80:f6:fc:8f:20:18:f2:
                    d1:e1:53:b4:4f:44:f7:62:58:1b:73:4e:a3:30:a7:
                    48:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:57:4F:E6:B2:A8:F0:E9:0D:14:34:3F:6D:42:9D:6C:DA:41:F0:7C
            X509v3 Authority Key Identifier:
                keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:76:89:11:70:b5:d6:f2:33:e2:ad:8e:8e:05:d9:6a:cc:28:
         41:5c:a0:16:0f:4f:40:7b:34:39:9d:a2:32:fb:bc:6a:fe:dd:
         e6:33:14:e7:2d:32:e4:88:d3:93:3a:a6:b0:2d:fe:c3:79:03:
         e0:a3:cb:71:1a:8b:b2:36:31:5d:d0:df:b5:e6:db:0a:35:71:
         08:63:ed:70:80:4f:16:e0:a8:b8:e4:cf:89:d1:dd:60:68:fe:
         21:60:a4:a0:32:fd:43:90:6d:dd:b5:95:f6:6a:06:bb:95:04:
         ed:d3:a2:ac:bb:ce:e0:18:71:fa:60:cb:07:da:e0:21:c5:e6:
         5e:9d:9b:ea:36:4f:8d:bc:14:98:d8:5e:17:53:8a:65:5c:4f:
         cb:3c:50:d3:7b:a1:7d:d7:86:a8:e5:b0:63:cd:e9:70:c0:f1:
         ae:8d:68:0f:dd:f5:54:58:0f:67:9c:cd:8b:3f:ef:99:93:cf:
         a9:97:48:a8:6c:d3:32:2b:7e:51:5b:fb:f9:aa:c0:5f:e6:62:
         69:e0:bd:61:af:aa:c2:7c:9f:8c:8a:14:51:46:80:da:58:3b:
         1e:e9:ab:68:2e:a8:6c:8f:94:c1:82:91:6f:76:ea:7a:c7:45:
         50:e4:db:b7:17:46:81:9f:59:f3:ed:3a:53:78:df:b0:a8:15:
         c8:6b:76:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:29 2026 by rpki-client