Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
File:                     kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft (raw, json)
Hash identifier:          cA7Ly5rwiHLULPypHZwbaYJlmeXUbemRPG3Xe6WiTG4=
Subject key identifier:   8D:D8:E5:9A:AF:F5:2A:CA:A9:D8:D5:38:CE:46:5E:E4:6F:6E:47:FA
Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
Certificate issuer:       /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
Manifest number:          8D
Signing time:             Sun 19 Oct 2025 09:47:43 +0000
Manifest this update:     Sun 19 Oct 2025 09:47:42 +0000
Manifest next update:     Sun 26 Oct 2025 09:47:42 +0000
Files and hashes:         1: kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl (hash: tUxOYH1W+O7d2Meq1dUj/m1+J0zqQwAPEcyGilATFyE=)
                          2: 06522672D49411EFA8DF5E69C4F9AE02.roa (hash: xnlYEk4KW2VhWwSazH9YyKPxeFaHVTp0cHWmf0iyBnI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8
        Validity
            Not Before: Oct 19 09:47:42 2025 GMT
            Not After : Oct 26 09:47:42 2025 GMT
        Subject: CN=68f4b3bf-9982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:71:18:b9:08:86:41:3f:11:9d:b4:9e:ef:
                    d0:5c:ef:61:10:7a:ed:1d:76:14:28:ba:3d:e9:11:
                    ab:fd:c4:8a:2d:4a:10:c1:e7:72:44:ac:55:63:aa:
                    b5:d0:8c:70:75:46:96:38:cd:01:2b:81:52:1d:2e:
                    fa:53:27:e9:d6:af:de:e8:be:b7:68:87:53:89:63:
                    e7:8c:bd:15:6d:2c:4c:48:bf:88:5c:d7:74:a1:13:
                    99:fd:db:6f:a3:43:fb:ab:56:63:c0:8c:b6:7d:84:
                    47:56:46:6d:37:1b:8b:5d:34:7a:5d:87:b7:ca:ed:
                    3f:2c:fa:22:3e:b2:9a:a6:7c:16:d2:0c:03:92:eb:
                    ca:b5:2e:c9:1d:7a:86:5b:dc:6c:40:b0:d8:7f:0a:
                    43:90:0f:91:e0:60:1e:25:3e:91:5a:b0:13:0a:c8:
                    de:09:1f:45:14:31:0b:f7:73:89:d3:f5:9e:43:03:
                    86:9b:e6:2a:b3:82:64:22:84:9d:6d:a2:18:bf:3c:
                    f8:bf:67:55:9b:26:fc:38:ae:1a:8e:59:fd:21:f6:
                    78:f6:22:f8:2a:d8:c7:b2:48:b1:d8:15:a0:44:8b:
                    9c:30:43:c3:13:04:99:59:64:16:a0:98:3e:d6:19:
                    0b:e0:44:10:fb:a3:b9:d9:b8:25:0a:4a:51:29:41:
                    2c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D8:E5:9A:AF:F5:2A:CA:A9:D8:D5:38:CE:46:5E:E4:6F:6E:47:FA
            X509v3 Authority Key Identifier:
                keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9b:71:85:e3:62:b1:77:e3:3c:ef:80:bb:01:81:2c:46:44:
         6f:10:48:c1:83:1c:e0:ea:89:7c:3a:ce:3e:08:42:f8:ea:6a:
         33:0d:24:c9:7e:6f:05:8f:66:e5:3e:fd:8f:d8:1d:8a:a9:14:
         89:a5:26:76:3c:86:5d:c1:ec:3a:bf:2f:02:25:04:be:47:98:
         29:e2:02:ec:82:14:b2:d8:c6:02:f1:f7:48:98:c0:09:6b:87:
         06:2b:a6:f1:e7:54:a3:87:4f:6b:18:b5:40:e5:d7:fd:b4:2c:
         ac:4b:ad:5e:e9:9d:b1:79:dd:ef:c4:74:fa:39:d2:6d:cc:23:
         82:e6:5f:db:06:94:76:93:e6:0d:0f:11:96:e3:94:fb:80:65:
         18:da:40:b0:28:de:b3:75:16:14:98:0f:f6:98:5a:49:bb:1e:
         49:5a:bb:f5:8a:3d:f1:72:bc:1c:40:19:02:88:49:95:5e:b8:
         c9:3e:e9:89:78:ed:82:1c:f0:f8:50:d9:5b:af:da:c3:84:cd:
         3b:fd:73:6c:5d:b0:2e:ef:27:38:4b:26:0f:63:2d:ae:08:1e:
         3b:ce:1f:b5:1c:4a:19:3d:b1:45:6c:95:8e:8c:4c:16:6b:a9:
         85:8a:3c:fe:42:85:78:d8:85:e0:82:d2:f3:e7:ee:51:fc:fe:
         e9:f0:d3:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZBMzUxMTAvBgNVBAUTKDkyNDg2NkI0MEMzMDQ0MkQ2OTZGMjQ3NzAxNTQ3NUM1
RjA3MDJBQzgwHhcNMjUxMDE5MDk0NzQyWhcNMjUxMDI2MDk0NzQyWjAYMRYwFAYD
VQQDEw02OGY0YjNiZi05OTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyAVxGLkIhkE/EZ20nu/QXO9hEHrtHXYUKLo96RGr/cSKLUoQwedyRKxVY6q1
0IxwdUaWOM0BK4FSHS76Uyfp1q/e6L63aIdTiWPnjL0VbSxMSL+IXNd0oROZ/dtv
o0P7q1ZjwIy2fYRHVkZtNxuLXTR6XYe3yu0/LPoiPrKapnwW0gwDkuvKtS7JHXqG
W9xsQLDYfwpDkA+R4GAeJT6RWrATCsjeCR9FFDEL93OJ0/WeQwOGm+Yqs4JkIoSd
baIYvzz4v2dVmyb8OK4ajln9IfZ49iL4KtjHskix2BWgRIucMEPDEwSZWWQWoJg+
1hkL4EQQ+6O52bglCkpRKUEsjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3Y5Zqv
9SrKqdjVOM5GXuRvbkf6MB8GA1UdIwQYMBaAFJJIZrQMMEQtaW8kdwFUdcXwcCrI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzNS85OTI3Nzg0NkQ0
OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JDMXBieVIzQVZSMXhmQndL
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2traG10QXd3UkMxcGJ5UjNBVlIxeGZCd0tzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkEzNS85OTI3Nzg0NkQ0OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JD
MXBieVIzQVZSMXhmQndLc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBtm3GF42Kxd+M874C7AYEsRkRvEEjBgxzg6ol8Os4+CEL46mozDSTJ
fm8Fj2blPv2P2B2KqRSJpSZ2PIZdwew6vy8CJQS+R5gp4gLsghSy2MYC8fdImMAJ
a4cGK6bx51Sjh09rGLVA5df9tCysS61e6Z2xed3vxHT6OdJtzCOC5l/bBpR2k+YN
DxGW45T7gGUY2kCwKN6zdRYUmA/2mFpJux5JWrv1ij3xcrwcQBkCiEmVXrjJPumJ
eO2CHPD4UNlbr9rDhM07/XNsXbAu7yc4SyYPYy2uCB47zh+1HEoZPbFFbJWOjEwW
a6mFijz+QoV42IXggtLz5+5R/P7p8NOr
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:26:40 2025 by rpki-client