Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
File:                     kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json)
Hash identifier:          xn++ThC1jtA6GOrZ6OehNm6vMjdkJgpTIecZuLW24V8=
Subject key identifier:   3A:3C:18:06:67:CE:CA:9F:7E:8C:56:01:A8:AA:E1:12:6E:16:14:E4
Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
Certificate issuer:       /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
Manifest number:          0145
Signing time:             Sat 03 Oct 2026 06:07:04 +0000
Manifest this update:     Sat 03 Oct 2026 06:07:03 +0000
Manifest next update:     Sat 10 Oct 2026 06:07:03 +0000
Files and hashes:         1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: fbD45FxE9tVcoiqU/Yjxd65TqyRnW2uID0lY3eq8czA=)
                          2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: Tk6XuHe+UOcO0wAYL78ZhK/3o/y93kH+Qpt8b1oatZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8
        Validity
            Not Before: Oct  3 06:07:03 2026 GMT
            Not After : Oct 10 06:07:03 2026 GMT
        Subject: CN=6ac09b88-f653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:c4:de:44:17:45:17:47:de:de:1e:06:eb:
                    6f:b3:1d:3e:c7:d6:34:a7:2f:af:01:cf:b5:7e:b6:
                    70:53:ca:42:db:5f:e5:62:f6:ea:c6:dd:98:47:39:
                    ba:89:a4:50:95:bb:2c:79:d2:35:2d:c6:ed:f9:99:
                    0c:67:82:95:8a:65:43:c3:1c:cb:6e:bf:8d:05:4f:
                    de:08:ed:fa:57:ee:e6:11:24:ad:9f:ab:e5:c1:d2:
                    83:54:8d:f8:a0:26:bd:b3:70:b6:dd:b6:be:d2:68:
                    fb:30:61:22:83:07:67:b9:b3:da:28:55:08:fe:b0:
                    42:44:f0:5e:b1:9f:3c:90:9f:4d:09:5a:e1:f5:cc:
                    b6:ae:8c:ac:77:a4:90:cb:d8:0d:b7:98:71:d9:ba:
                    7a:dd:4a:4c:40:0f:aa:02:1f:c2:4b:a1:fc:14:9a:
                    1a:87:03:87:9a:a6:3d:5a:dc:ea:05:e4:6b:34:f3:
                    f2:00:e3:0a:9e:a2:be:e9:76:eb:5e:e2:8f:d5:0c:
                    2b:9f:41:61:0b:08:d6:29:fe:96:7e:cc:7c:95:16:
                    0c:ce:75:67:aa:2f:11:af:0d:aa:cb:89:d4:2b:31:
                    a2:b9:ac:89:dd:95:37:b4:e2:2e:ff:90:d8:ab:72:
                    74:29:72:f2:f5:fd:e5:4c:17:01:67:de:b3:9e:45:
                    ef:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3C:18:06:67:CE:CA:9F:7E:8C:56:01:A8:AA:E1:12:6E:16:14:E4
            X509v3 Authority Key Identifier:
                keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:21:cb:4b:ac:b1:1d:b1:6a:ca:7f:57:15:34:80:4b:41:bd:
         f8:ef:49:7e:93:29:4f:62:4f:8f:10:46:d7:74:f3:35:2f:b9:
         60:f2:63:44:56:ab:81:fd:ec:ea:0b:65:9f:32:56:03:b8:3c:
         35:69:37:c5:53:3d:4c:28:8c:4c:f9:00:f0:4b:3d:31:90:36:
         a6:3f:54:85:4b:a7:8d:3c:7a:3a:bf:50:06:db:c0:b8:ba:5e:
         49:55:84:a0:36:ec:6d:60:a0:8d:8e:4b:9d:37:eb:7f:4c:7d:
         a9:c1:7a:7a:45:0d:5a:57:14:4f:ed:8b:a7:27:67:9d:f3:9a:
         f7:2f:47:ef:c2:8b:59:c3:35:35:33:8f:be:7f:cb:89:ea:76:
         f2:ca:1e:7e:ea:22:07:e5:c3:b8:3e:5b:f9:14:02:b8:0b:dc:
         ec:4b:1e:24:00:12:36:b0:e9:6d:b1:a5:36:ad:61:21:66:aa:
         14:33:49:0a:25:49:e7:cb:f2:80:26:5e:91:44:5a:86:11:0b:
         49:c0:ea:3e:53:01:b8:4f:4d:5a:ca:95:e3:f0:2e:3b:68:2e:
         66:24:5e:9d:02:4a:b6:eb:71:f1:b3:b3:3f:2d:04:f3:38:d1:
         7f:8c:78:05:80:84:f9:52:d6:82:43:f0:cc:9f:9a:7b:2f:41:
         da:84:ea:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZBMzUxMTAvBgNVBAUTKDkyNDg2NkI0MEMzMDQ0MkQ2OTZGMjQ3NzAxNTQ3NUM1
RjA3MDJBQzgwHhcNMjYxMDAzMDYwNzAzWhcNMjYxMDEwMDYwNzAzWjAYMRYwFAYD
VQQDEw02YWMwOWI4OC1mNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz1XE3kQXRRdH3t4eButvsx0+x9Y0py+vAc+1frZwU8pC21/lYvbqxt2YRzm6
iaRQlbssedI1Lcbt+ZkMZ4KVimVDwxzLbr+NBU/eCO36V+7mESStn6vlwdKDVI34
oCa9s3C23ba+0mj7MGEigwdnubPaKFUI/rBCRPBesZ88kJ9NCVrh9cy2roysd6SQ
y9gNt5hx2bp63UpMQA+qAh/CS6H8FJoahwOHmqY9WtzqBeRrNPPyAOMKnqK+6Xbr
XuKP1Qwrn0FhCwjWKf6Wfsx8lRYMznVnqi8Rrw2qy4nUKzGiuayJ3ZU3tOIu/5DY
q3J0KXLy9f3lTBcBZ96znkXvxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDo8GAZn
zsqffoxWAaiq4RJuFhTkMB8GA1UdIwQYMBaAFJJIZrQMMEQtaW8kdwFUdcXwcCrI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzNS85OTI3Nzg0NkQ0
OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JDMXBieVIzQVZSMXhmQndL
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2traG10QXd3UkMxcGJ5UjNBVlIxeGZCd0tzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkEzNS85OTI3Nzg0NkQ0OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JD
MXBieVIzQVZSMXhmQndLc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZCHLS6yxHbFqyn9XFTSAS0G9+O9JfpMpT2JPjxBG13TzNS+5YPJjRFargf3s
6gtlnzJWA7g8NWk3xVM9TCiMTPkA8Es9MZA2pj9UhUunjTx6Or9QBtvAuLpeSVWE
oDbsbWCgjY5LnTfrf0x9qcF6ekUNWlcUT+2LpydnnfOa9y9H78KLWcM1NTOPvn/L
iep28soefuoiB+XDuD5b+RQCuAvc7EseJAASNrDpbbGlNq1hIWaqFDNJCiVJ58vy
gCZekURahhELScDqPlMBuE9NWsqV4/AuO2guZiRenQJKtutx8bOzPy0E8zjRf4x4
BYCE+VLWgkPwzJ+aey9B2oTqKw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 02:17:22 2026 by rpki-client