Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
File:                     kkcJmme2ONySU7AuJT2zvnRaqFw.mft (raw, json)
Hash identifier:          FNBIu8Ktez2JeR5JgL6oPw8wSCmSAWRvxeYibcQjqNg=
Subject key identifier:   82:59:CA:6C:71:2B:6E:DF:D9:89:F1:67:66:D1:70:68:01:BB:B3:F6
Authority key identifier: 92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C
Certificate issuer:       /CN=A9143B87/serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
Manifest number:          A6
Signing time:             Sun 27 Sep 2026 07:42:33 +0000
Manifest this update:     Sun 27 Sep 2026 07:42:32 +0000
Manifest next update:     Sun 04 Oct 2026 07:42:32 +0000
Files and hashes:         1: kkcJmme2ONySU7AuJT2zvnRaqFw.crl (hash: 0hc4VbzFZqJ3/IUi+tYBhpw6sYQ+FZeWO3dyp7yH3hU=)
                          2: 22C0B5E8BD3811F0973F9752C4F9AE02.roa (hash: x6jH0YoExuPajTzRi1fsVZ3AaYHRKD72yw6/eXqhzss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl
                          rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B87, serialNumber=9247099A67B638DC9253B02E253DB3BE745AA85C
        Validity
            Not Before: Sep 27 07:42:32 2026 GMT
            Not After : Oct  4 07:42:32 2026 GMT
        Subject: CN=6ab8c8e9-63da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:fa:91:4c:d4:33:4c:06:3e:7c:23:d4:b7:
                    94:df:b3:8e:ee:13:12:a1:e4:d9:59:71:ce:d0:cd:
                    ba:e3:89:80:69:1d:cd:68:a7:c1:05:d7:08:07:bf:
                    32:e5:f5:25:87:41:0b:eb:b4:c5:1a:b8:3b:f5:4b:
                    82:8e:26:74:5c:1a:5e:83:c3:f6:9f:40:4f:ae:6e:
                    5a:5f:05:e8:a3:87:7d:d2:22:d7:77:c6:b8:a8:b9:
                    55:95:1c:95:56:37:5e:81:ac:5b:30:b1:84:65:45:
                    18:ec:7d:23:3f:30:6b:22:4a:fd:c4:b5:f3:67:6b:
                    40:af:08:e4:30:91:7b:28:dc:fa:35:7b:fe:53:8b:
                    c2:d7:44:11:b6:72:1b:9b:94:b2:7a:bd:e4:09:33:
                    0f:d1:4a:82:23:ae:21:1c:74:aa:7b:6d:d9:98:58:
                    e3:66:ee:f0:0d:05:6f:c7:34:85:1d:fb:d7:e5:a0:
                    72:6c:4d:64:9b:26:eb:5d:da:1c:3f:c8:ae:d5:2e:
                    ab:91:78:9e:a9:a2:67:20:b8:70:76:c8:30:95:3c:
                    c0:e5:e2:55:a9:a9:f6:a8:f6:ed:37:2d:5e:12:85:
                    94:85:d3:1c:f8:49:31:03:c0:37:82:a3:08:9e:31:
                    8f:32:32:d8:27:f3:3f:78:50:ad:f3:c9:1c:93:ed:
                    dc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:59:CA:6C:71:2B:6E:DF:D9:89:F1:67:66:D1:70:68:01:BB:B3:F6
            X509v3 Authority Key Identifier:
                keyid:92:47:09:9A:67:B6:38:DC:92:53:B0:2E:25:3D:B3:BE:74:5A:A8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkcJmme2ONySU7AuJT2zvnRaqFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/23D1528ABCE311F09C5F7048C4F9AE02/kkcJmme2ONySU7AuJT2zvnRaqFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:71:64:05:41:ff:cd:25:09:d0:3a:02:5a:fa:71:c1:86:a2:
         2b:92:26:7b:5e:db:73:96:37:45:ca:34:f9:55:b9:ed:74:d0:
         79:7f:b9:be:18:91:41:87:59:80:38:c7:99:f8:65:13:01:ee:
         94:66:66:6b:91:6e:22:84:0e:75:b3:47:a3:ae:7d:18:c2:80:
         0a:45:86:8c:07:2d:b6:47:f3:d8:16:f7:21:66:b5:e2:8a:34:
         63:7c:6a:03:9c:17:f5:e8:24:23:12:3c:9c:cd:fd:24:19:e6:
         00:07:f4:bc:2f:98:ea:32:ad:7b:fc:69:78:65:dc:a8:15:d6:
         c7:27:b7:46:bc:96:d6:0c:fb:ad:b6:95:5f:2e:63:b7:6d:10:
         95:33:08:92:a0:ea:55:28:19:ae:b7:ad:58:59:13:19:cd:77:
         0b:2d:3a:15:d5:bc:18:c5:08:cf:81:11:49:a3:25:a6:a1:b2:
         2d:80:0e:b6:13:77:39:61:25:3a:73:39:e3:54:8b:92:18:95:
         3d:bc:d4:7c:88:0c:97:c2:1e:0e:8a:83:0d:b1:91:15:01:02:
         d2:df:84:1e:54:65:6d:c2:c7:41:9e:08:a2:4f:a2:76:53:bf:
         05:1b:cf:04:e4:55:a5:0a:fb:70:f1:a2:a3:f1:43:14:31:8f:
         ae:2d:b7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:01:22 2026 by rpki-client