Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
File:                     KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft (raw, json)
Hash identifier:          uk4C+gU8ZTfmsV3o7xFuv91G5XXszevXgc/G8TiO40k=
Subject key identifier:   62:A2:5F:F5:31:FA:3B:02:6D:98:06:C0:F0:04:B6:CE:0D:70:39:A6
Authority key identifier: 2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38
Certificate issuer:       /CN=A918424C/serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
Certificate serial:       0193
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
Manifest number:          018E
Signing time:             Thu 23 Jul 2026 05:49:05 +0000
Manifest this update:     Thu 23 Jul 2026 05:49:04 +0000
Manifest next update:     Thu 30 Jul 2026 05:49:04 +0000
Files and hashes:         1: KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl (hash: jcVfHAcoQpjngCE3BWZfkcAdxxuFCwa1vG9EstUx1Q4=)
                          2: 4394064223D511EF9AB13E4FC4F9AE02.roa (hash: m9PVqT0U37yXO4ZBkmsSwAW86j+V8m+FgHiO1R6bfj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl
                          rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918424C, serialNumber=2A4456D172B2B86DCDA712E661F6D9F2FF192038
        Validity
            Not Before: Jul 23 05:49:04 2026 GMT
            Not After : Jul 30 05:49:04 2026 GMT
        Subject: CN=6a61ab51-1ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:15:44:e4:0b:76:2c:29:5b:e1:92:61:83:
                    2c:71:3e:29:d5:a5:77:5c:c1:b5:65:ea:54:ad:96:
                    ea:05:5e:6d:aa:88:18:a8:91:bd:27:5b:e3:fe:71:
                    93:fa:15:a4:5f:09:eb:4c:14:15:15:8a:7f:04:7b:
                    0b:c7:06:e0:06:98:bf:e5:92:81:94:13:01:03:de:
                    ee:d8:15:4d:e5:3c:46:5d:66:59:b4:5c:87:e3:92:
                    ab:7e:57:29:41:82:01:74:4a:36:1a:8b:b9:fe:e0:
                    17:3c:91:30:c6:37:bf:f8:bc:a9:3d:58:2e:69:44:
                    23:ad:c3:01:ee:c1:58:68:8c:d1:fc:27:2f:d8:58:
                    40:9c:78:99:7d:6b:0b:67:b7:51:26:f8:66:c9:39:
                    2c:a6:7c:0d:7f:bd:85:97:4b:3a:06:55:fa:9f:d0:
                    e7:30:3b:da:28:2d:4a:8f:ef:63:a8:f2:14:44:a6:
                    31:32:8f:f0:73:f2:ed:7b:44:df:18:97:11:d1:33:
                    ec:ec:be:c5:6b:7b:9c:68:8d:5d:d6:77:e1:4f:fb:
                    0c:2a:7f:76:ef:a7:15:81:ca:20:9b:dd:fe:81:96:
                    4a:8f:5f:45:3e:84:f8:88:40:b8:cd:50:82:d3:64:
                    6d:10:a0:62:bf:e1:65:7a:d2:d4:85:d2:e0:d9:8c:
                    aa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A2:5F:F5:31:FA:3B:02:6D:98:06:C0:F0:04:B6:CE:0D:70:39:A6
            X509v3 Authority Key Identifier:
                keyid:2A:44:56:D1:72:B2:B8:6D:CD:A7:12:E6:61:F6:D9:F2:FF:19:20:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918424C/ABCBEBD623D411EF9575324EC4F9AE02/KkRW0XKyuG3NpxLmYfbZ8v8ZIDg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c7:f3:5d:4a:6f:26:21:3e:50:34:cd:35:91:99:d3:38:17:
         2b:f7:eb:db:fa:37:2b:6c:ed:76:d5:10:2e:29:12:73:37:b7:
         e3:06:86:cf:1e:75:3e:49:84:0d:b7:92:a6:13:8e:4d:54:77:
         66:3c:b4:13:56:e7:b3:9f:1a:76:58:d2:37:21:a6:89:11:e3:
         9c:27:d8:e1:7b:e4:85:dd:5a:22:17:54:28:00:19:33:2a:8b:
         88:b8:68:1e:e9:74:9d:23:41:1c:95:21:82:c1:7e:97:1a:ac:
         2d:a8:c6:9c:e2:72:95:f8:ea:c8:0f:84:3e:1f:56:f7:23:b0:
         9b:dd:f3:9d:5c:f0:2e:a7:83:94:b2:cf:98:98:af:84:eb:b2:
         7d:48:23:0a:99:e6:91:e0:c0:c0:7d:06:b2:2d:59:f7:49:99:
         40:fe:7b:c2:da:c2:58:f3:b1:a2:87:22:ec:f9:53:16:b7:55:
         a5:f8:6c:bb:7f:8b:56:2a:f0:13:2d:2e:ab:d3:c6:7e:e3:af:
         0e:5f:34:0f:30:8f:17:65:23:61:c3:0d:f8:df:b7:42:11:49:
         8e:07:a4:3e:34:6c:e4:b1:fa:44:66:b8:58:b0:79:19:89:76:
         44:0e:51:29:5f:b2:77:74:12:c2:ef:41:9e:f8:fd:13:29:3a:
         ae:e7:45:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQyNEMxMTAvBgNVBAUTKDJBNDQ1NkQxNzJCMkI4NkRDREE3MTJFNjYxRjZEOUYy
RkYxOTIwMzgwHhcNMjYwNzIzMDU0OTA0WhcNMjYwNzMwMDU0OTA0WjAYMRYwFAYD
VQQDEw02YTYxYWI1MS0xY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumQVROQLdiwpW+GSYYMscT4p1aV3XMG1ZepUrZbqBV5tqogYqJG9J1vj/nGT
+hWkXwnrTBQVFYp/BHsLxwbgBpi/5ZKBlBMBA97u2BVN5TxGXWZZtFyH45Krflcp
QYIBdEo2Gou5/uAXPJEwxje/+LypPVguaUQjrcMB7sFYaIzR/Ccv2FhAnHiZfWsL
Z7dRJvhmyTkspnwNf72Fl0s6BlX6n9DnMDvaKC1Kj+9jqPIURKYxMo/wc/Lte0Tf
GJcR0TPs7L7Fa3ucaI1d1nfhT/sMKn9276cVgcogm93+gZZKj19FPoT4iEC4zVCC
02RtEKBiv+FletLUhdLg2YyqlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGKiX/Ux
+jsCbZgGwPAEts4NcDmmMB8GA1UdIwQYMBaAFCpEVtFysrhtzacS5mH22fL/GSA4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI0Qy9BQkNCRUJENjIz
RDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVHM05weExtWWZiWjh2OFpJ
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0trUlcwWEt5dUczTnB4TG1ZZmJaOHY4WklEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDI0Qy9BQkNCRUJENjIzRDQxMUVGOTU3NTMyNEVDNEY5QUUwMi9La1JXMFhLeXVH
M05weExtWWZiWjh2OFpJRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMsfzXUpvJiE+UDTNNZGZ0zgXK/fr2/o3K2ztdtUQLikScze34waGzx51PkmE
DbeSphOOTVR3Zjy0E1bns58adljSNyGmiRHjnCfY4Xvkhd1aIhdUKAAZMyqLiLho
Hul0nSNBHJUhgsF+lxqsLajGnOJylfjqyA+EPh9W9yOwm93znVzwLqeDlLLPmJiv
hOuyfUgjCpnmkeDAwH0Gsi1Z90mZQP57wtrCWPOxooci7PlTFrdVpfhsu3+LVirw
Ey0uq9PGfuOvDl80DzCPF2UjYcMN+N+3QhFJjgekPjRs5LH6RGa4WLB5GYl2RA5R
KV+yd3QSwu9Bnvj9Eyk6rudFpQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:01 2026 by rpki-client