Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
File:                     Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json)
Hash identifier:          FOalGlTaWa3AQSZJWEnpmRfGhyHExfBGN1/qPNxyyxU=
Subject key identifier:   09:48:BA:EC:7A:23:B2:EB:30:47:59:40:2D:69:EC:63:4C:7F:A0:64
Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
Certificate issuer:       /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Certificate serial:       069A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
Manifest number:          0690
Signing time:             Tue 12 May 2026 22:33:30 +0000
Manifest this update:     Tue 12 May 2026 22:33:29 +0000
Manifest next update:     Tue 19 May 2026 22:33:29 +0000
Files and hashes:         1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: qdMybufmlFMPtQt4XaRn3KyAwK3v0lwmeY6kEGmMNUg=)
                          2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: S40NIyhP5u7/UlmLJYX9/RykdcdP5gu6OSoqCbZEohA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
                          rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:33:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
        Validity
            Not Before: May 12 22:33:29 2026 GMT
            Not After : May 19 22:33:29 2026 GMT
        Subject: CN=6a03aaba-17cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:46:62:53:b8:cd:7d:ff:b6:2e:a3:6b:b4:
                    80:50:53:46:c0:41:cb:38:f0:3f:6a:f3:2c:54:e2:
                    4d:8e:75:73:64:9e:2e:ae:c7:17:6d:92:e9:bf:9e:
                    1d:7a:4e:f6:53:74:36:19:80:1c:f8:cd:f4:49:f0:
                    3b:6b:20:fd:b1:ad:24:33:cd:61:fc:e3:e2:d0:29:
                    62:7a:76:b8:85:70:33:b5:77:ac:17:a2:5a:cf:23:
                    52:62:9c:59:d4:75:ef:4a:29:47:59:21:f4:1b:c2:
                    f5:fc:86:01:f1:aa:c3:5c:51:db:2d:dc:46:7f:39:
                    31:3f:9c:ac:89:fd:cf:e5:e4:e4:ee:e2:19:6f:82:
                    74:60:d6:1f:ad:8e:af:49:c9:16:33:f4:3d:f7:75:
                    b0:6b:6b:3b:db:64:46:73:a5:5d:e2:29:d3:d2:bc:
                    3d:68:8f:15:f5:15:91:73:46:c2:86:e0:78:83:90:
                    0d:18:45:55:de:bf:68:4a:6d:e1:38:7c:e1:87:19:
                    37:56:82:d2:25:21:b4:bd:1e:5a:07:3c:f5:28:10:
                    a5:cb:0d:a2:0f:fb:8b:bc:50:23:78:f0:1c:8d:82:
                    56:a2:ba:8a:a6:8e:e1:50:ab:ee:9e:aa:71:5b:e8:
                    37:d3:ff:a0:87:f4:c2:1e:79:cc:90:3e:6f:e7:ef:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:48:BA:EC:7A:23:B2:EB:30:47:59:40:2D:69:EC:63:4C:7F:A0:64
            X509v3 Authority Key Identifier:
                keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ab:57:9a:b9:4a:28:c0:f0:7a:29:06:1d:6e:5a:d6:af:37:
         13:1e:ea:90:92:1e:eb:da:0e:a9:d9:62:ad:0a:8e:db:ac:29:
         f1:e7:9f:8f:b7:95:2b:a7:b5:57:18:68:33:b2:5e:56:9b:86:
         da:19:20:74:0d:1c:95:db:bd:7c:42:ef:5e:fc:1b:c0:5b:1f:
         8e:80:ce:a0:e6:03:f2:79:d6:cb:58:98:cd:58:3b:d3:8e:40:
         da:a9:54:ef:6a:2e:8d:af:86:5e:6e:70:3b:cd:0c:34:4d:d2:
         30:b6:ed:28:9f:f9:2f:0f:f3:29:00:8b:51:33:0c:80:70:b4:
         5b:87:29:a4:15:53:44:10:e2:15:4d:31:b2:93:1e:4f:04:87:
         ef:e5:8b:3f:8f:c8:a1:c7:2d:5d:d1:3a:76:03:92:cf:81:57:
         e9:6d:30:e5:60:6f:fa:32:49:01:0a:be:53:a6:af:10:c9:13:
         58:12:15:a0:f5:bc:db:09:d9:f3:19:fd:49:96:1d:06:c9:6b:
         cf:c3:cf:17:33:d6:55:58:43:b0:ad:cb:56:06:c1:cf:7f:1a:
         8e:1f:91:18:3d:80:e8:89:72:18:83:38:11:38:fc:b9:e1:74:
         24:f0:34:a0:5a:84:2e:b6:24:c4:2e:07:88:fe:7a:2f:f9:69:
         7f:60:ca:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:00 2026 by rpki-client