Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
File:                     kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json)
Hash identifier:          eBAgJMjDfKF02OmcmCK/ZF1LnXiV8ndEQtXLCNI6bSQ=
Subject key identifier:   FA:30:39:E2:28:D0:BD:43:E1:6C:84:12:DD:95:E1:F8:20:67:28:6A
Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
Certificate issuer:       /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
Manifest number:          01E4
Signing time:             Tue 29 Sep 2026 03:57:09 +0000
Manifest this update:     Tue 29 Sep 2026 03:57:08 +0000
Manifest next update:     Tue 06 Oct 2026 03:57:08 +0000
Files and hashes:         1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: 37E1Q4HH/vnbDGEDWlo+Xx5xbnA+qMorRs15G+Zg27k=)
                          2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: VkTWZOhptlmUjpj+fKDaWZKr/by4lrIHVYy8lO2gJqI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
                          rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 03:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
        Validity
            Not Before: Sep 29 03:57:08 2026 GMT
            Not After : Oct  6 03:57:08 2026 GMT
        Subject: CN=6abb3714-4145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:da:f1:69:70:d3:a9:8b:fa:0e:c3:ae:41:4e:
                    32:04:b7:d4:cb:70:ff:0d:89:e4:bb:71:28:f4:28:
                    4d:fe:3f:13:01:13:2e:62:ab:e2:ee:e3:a0:38:a0:
                    d7:2b:97:69:4a:22:09:ce:19:88:1e:c5:e4:7a:1a:
                    b1:d8:5f:d2:b1:dd:d4:ae:85:82:f6:47:e7:db:dd:
                    52:de:43:6e:4e:b9:3d:0c:c3:af:b5:f1:1d:5e:c9:
                    79:e8:43:b5:5e:16:6a:95:71:80:48:7b:9b:19:fd:
                    48:78:53:f7:2f:4d:45:e7:15:b8:ed:b4:4b:f5:b2:
                    be:79:2d:48:20:6b:99:c5:08:7e:28:79:38:c0:0c:
                    d0:68:1e:88:12:0b:77:84:13:f9:c3:37:87:b9:e1:
                    88:5d:39:83:95:10:f4:33:de:b3:ff:d8:74:cb:23:
                    b0:f8:16:da:12:6b:dd:18:d8:74:16:95:6f:c8:95:
                    8e:23:d3:fe:a9:f1:6a:c6:4b:4b:52:92:42:ce:81:
                    3e:14:a5:17:d4:fb:66:24:75:50:8d:2a:88:e3:d9:
                    07:6f:e1:df:f7:0c:90:70:e4:a6:19:3e:00:84:10:
                    eb:a8:d4:06:f6:05:fe:0a:89:3d:48:cb:e1:24:98:
                    6f:70:d3:fb:cb:ee:9d:86:84:c0:ec:84:7e:9e:21:
                    92:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:30:39:E2:28:D0:BD:43:E1:6C:84:12:DD:95:E1:F8:20:67:28:6A
            X509v3 Authority Key Identifier:
                keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:07:27:80:0c:57:bc:5a:b8:c5:d1:44:62:12:22:88:19:c2:
         ee:9d:19:ef:a7:67:41:4d:06:f9:b3:24:24:88:6c:40:2e:9f:
         6c:07:9a:ec:ff:78:36:55:83:fa:15:e1:69:64:92:b5:79:e1:
         cf:69:68:8d:11:d5:dc:21:4b:2d:34:7e:1e:ff:59:0a:35:44:
         ba:42:03:3c:07:f5:b7:0b:ed:5a:79:d0:1a:69:4d:69:dc:6f:
         64:f2:a7:41:0a:a7:7b:fe:17:09:b2:8a:4f:d9:5d:79:3b:de:
         38:8d:59:6f:62:56:31:22:ea:de:4b:78:dc:c0:f6:35:86:f2:
         be:2f:a7:ae:f4:c9:15:89:d0:ac:1d:da:1c:75:26:0a:ff:e4:
         75:3c:29:2f:79:9a:aa:3f:22:48:d2:da:c9:2a:ed:ac:d7:c0:
         21:93:01:42:76:a3:78:91:95:66:c4:79:2e:c6:d2:81:5d:29:
         49:bc:1b:e1:2f:46:71:27:1b:56:36:28:3f:2e:c9:8c:15:b9:
         de:27:79:04:10:6e:91:80:46:cb:a1:ec:64:0e:88:48:46:68:
         45:da:c8:e9:88:78:28:6a:80:b3:a2:2b:0b:f4:fe:86:09:dc:
         93:d2:0c:be:b8:64:3f:c4:7b:24:c1:be:ee:be:ad:51:7f:ba:
         b4:b9:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:14:20 2026 by rpki-client