Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
File:                     kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json)
Hash identifier:          Sm0hzoi0Q5gVp5R8J4U/1ojTvlU8+prBzGxu0XRzsLE=
Subject key identifier:   40:70:4A:9B:BF:7B:BD:A7:79:4D:58:0B:86:2B:B0:51:7E:3B:4B:92
Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
Certificate issuer:       /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
Manifest number:          019C
Signing time:             Wed 13 May 2026 04:20:31 +0000
Manifest this update:     Wed 13 May 2026 04:20:30 +0000
Manifest next update:     Wed 20 May 2026 04:20:30 +0000
Files and hashes:         1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: Nf0IZc4GRJnaK4B7yNkGIzYpspcQuPpZLlEdSxVrwgM=)
                          2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: vWnJyVtLSPDbnLnMtUfpOpsMizJZ3OX7bmaYpD3gaL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
                          rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
        Validity
            Not Before: May 13 04:20:30 2026 GMT
            Not After : May 20 04:20:30 2026 GMT
        Subject: CN=6a03fc0e-47ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:15:01:d8:2d:cf:91:5a:f0:f5:cd:a0:18:
                    36:0b:ca:15:ee:97:2e:92:6a:f5:87:dd:9b:82:fb:
                    37:43:87:88:15:31:77:03:dd:64:24:af:3b:eb:6b:
                    c2:6c:2a:6d:36:15:cb:60:5a:a2:2f:1d:6a:70:4f:
                    34:4f:72:91:6a:d2:1e:e6:e4:9d:20:79:f8:99:0f:
                    11:db:b4:03:88:f0:00:2f:b3:e9:17:ad:1d:37:64:
                    18:4b:7f:76:4b:c1:09:c2:5e:b5:ec:2d:78:cc:33:
                    1b:ba:80:55:fa:42:b5:2c:2d:31:88:20:99:8d:29:
                    af:77:f8:97:b9:45:6a:53:57:cd:22:56:19:5b:a6:
                    a3:71:9e:84:3d:a8:a3:ad:3a:b0:75:17:b1:e0:24:
                    5c:d8:45:35:1a:24:48:a8:4c:f5:2d:cf:b5:87:b4:
                    0d:ec:f9:97:fd:e9:3c:dc:24:53:ca:d4:4c:9c:4e:
                    d7:db:a1:f8:28:ce:8b:f4:f7:74:4f:87:ce:4c:5c:
                    fd:15:29:31:b1:69:78:7b:e9:a8:41:f6:db:93:17:
                    f0:16:a1:80:09:1e:e2:a0:bd:c0:8c:bf:4f:56:c3:
                    c1:d7:88:a2:2f:0a:89:00:01:b2:d6:9c:06:27:e3:
                    8f:ef:59:94:a4:c2:58:ce:a7:3b:04:76:73:9c:9f:
                    01:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:70:4A:9B:BF:7B:BD:A7:79:4D:58:0B:86:2B:B0:51:7E:3B:4B:92
            X509v3 Authority Key Identifier:
                keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:62:d8:5f:3f:f8:6d:02:16:15:9c:db:cc:12:0c:3a:e7:94:
         7a:e9:c1:a3:db:89:c6:15:84:30:7f:d3:e8:90:ae:0e:22:93:
         21:58:ec:af:86:35:51:6f:bb:1b:cc:58:ee:6c:26:f1:36:95:
         18:5a:de:b6:45:fd:f3:ac:cd:c6:3b:aa:e5:39:c3:86:57:fa:
         c8:92:12:cf:14:11:3e:b9:9e:3f:ac:8a:da:8e:3b:6b:e0:a4:
         02:c7:5e:c0:1e:21:f8:6c:1a:36:d6:c7:15:0a:20:aa:cb:f7:
         fe:8c:9a:ed:2d:e2:13:12:52:13:77:08:f4:cc:d1:02:6e:e8:
         3c:9a:91:e1:20:55:96:72:2c:de:f2:d5:fe:51:bb:4c:db:c1:
         ad:ca:3b:a2:50:96:69:b5:33:a8:42:3e:0a:31:bd:d4:44:9d:
         5d:12:98:4b:a3:70:19:e4:61:a4:74:4e:49:76:e1:7a:7f:52:
         b1:e5:ce:ff:cc:18:a7:1a:c5:2d:94:98:7a:41:54:72:93:07:
         e3:32:b9:82:ea:56:d5:c7:e6:a5:44:a3:c3:64:79:f5:8b:0b:
         cd:49:34:8a:02:a6:4a:e0:03:c5:78:2a:e7:ac:df:1f:61:6c:
         4d:86:94:23:55:df:93:c9:7c:85:cf:4f:74:3d:56:93:42:49:
         70:9c:26:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:43 2026 by rpki-client