Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
File:                     Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json)
Hash identifier:          F1jSpz23RJVmMPg/ArMI+g+ortm577wVJoZ9qcL3wxQ=
Subject key identifier:   43:71:59:2C:47:4C:94:DD:4A:27:2D:24:86:18:B8:C9:6D:F1:24:7D
Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
Certificate issuer:       /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Certificate serial:       06C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
Manifest number:          06B7
Signing time:             Wed 22 Jul 2026 23:03:11 +0000
Manifest this update:     Wed 22 Jul 2026 23:03:10 +0000
Manifest next update:     Wed 29 Jul 2026 23:03:10 +0000
Files and hashes:         1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: Yi7a0G/dIG5+uuT4oEmthqxmlUmttkzMNdfOIovt2iI=)
                          2: B8E6481655AA11F1ABD37D4A9B833773.roa (hash: 8rIA49TPHJ0ZY3EFKpWm3baP6XZiOHgLCBv2FhYMWYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
                          rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730 (0x6c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
        Validity
            Not Before: Jul 22 23:03:10 2026 GMT
            Not After : Jul 29 23:03:10 2026 GMT
        Subject: CN=6a614c2f-c3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:62:e1:3e:3e:98:a2:50:1b:d5:99:00:25:b8:
                    0d:13:40:37:c9:4a:40:61:41:2f:2e:37:28:48:88:
                    23:2a:e7:0d:34:53:47:08:6e:7e:3b:38:98:bc:27:
                    03:b9:bb:05:34:a0:36:a4:06:86:27:d2:ad:db:85:
                    bb:1e:aa:db:12:78:02:18:ec:e0:9a:0d:15:65:67:
                    d9:7b:06:c7:cb:fb:4e:f1:ef:08:4b:f2:f1:7a:ab:
                    d5:43:85:e5:7e:eb:6f:f2:a0:cd:63:50:ab:39:5f:
                    80:be:d0:fb:7a:d2:6b:b6:74:53:d7:f2:32:5a:16:
                    65:46:2e:66:99:a8:e4:67:42:33:2f:ac:c0:61:7e:
                    f8:2c:f0:5e:64:01:31:cf:cd:e0:43:44:3e:ff:49:
                    34:23:0c:86:b1:a1:c3:67:2e:05:97:9c:56:9b:bc:
                    01:8e:94:0a:d1:77:2c:b0:53:4b:83:78:bb:d6:77:
                    e9:6a:15:e7:e2:bf:9a:b3:b5:fb:13:b9:a0:b9:07:
                    bc:8a:fa:8e:67:84:7b:e2:99:74:11:8f:19:3a:16:
                    87:c7:3a:f6:e1:66:a3:2e:68:43:90:95:11:64:41:
                    ee:39:8c:ea:54:89:fe:46:4d:0a:83:23:c6:23:22:
                    c7:a9:4c:72:10:db:ea:25:4a:36:d5:62:3a:7c:26:
                    84:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:71:59:2C:47:4C:94:DD:4A:27:2D:24:86:18:B8:C9:6D:F1:24:7D
            X509v3 Authority Key Identifier:
                keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a7:b0:eb:19:7e:2c:d7:9b:6d:74:84:04:96:f1:ff:4a:dd:
         3d:d7:fb:3c:6f:41:fe:67:fa:b2:19:ef:92:6f:0c:40:5d:3a:
         0b:b4:ad:80:84:1e:45:e5:d4:fd:8f:3d:a3:ea:1e:96:45:08:
         e4:05:55:58:5c:ff:64:31:19:78:eb:44:c2:ef:dc:8b:ee:0c:
         b3:dd:43:0b:ff:02:09:90:b3:43:ca:76:3f:4d:ad:80:20:e1:
         62:52:82:e2:1c:3e:1c:f4:f6:a7:41:d8:73:79:5a:58:08:20:
         bb:fe:70:7e:66:28:e1:4c:c2:be:31:16:fc:d6:e1:49:88:ff:
         bf:87:b1:a6:3b:fb:62:1f:ef:a9:32:53:c0:53:06:35:0e:60:
         28:7e:c8:bc:ad:e2:f5:fb:13:08:e5:e0:ba:bc:26:16:1c:c2:
         87:73:71:c5:a1:2a:d6:d2:cf:58:07:55:cf:bb:31:33:7f:8a:
         c3:b9:ce:99:fb:4c:02:dd:d4:0f:58:f7:72:04:da:73:d9:f6:
         6a:6d:b4:43:99:76:d2:57:63:2c:a4:bb:3b:5f:02:6c:62:e1:
         bc:3f:11:d4:b7:03:c5:bd:27:c0:f5:59:1a:4f:df:2a:88:d9:
         60:5e:b4:56:74:89:b2:df:5d:0d:22:c9:7e:38:9d:c2:da:d2:
         f9:f9:ff:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:57:19 2026 by rpki-client