Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
File:                     KwN-XtvChKOTiNGbzUXS2UdLMZs.mft (raw, json)
Hash identifier:          dC2uENcm1UhOBTvaB4vZrTB4NqfpnS/onCRohNb5Om4=
Subject key identifier:   31:45:41:96:7A:51:46:86:7D:DE:B4:38:10:FB:8B:FC:AF:66:30:FF
Authority key identifier: 2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B
Certificate issuer:       /CN=A9183A80/serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B
Certificate serial:       0474
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
Manifest number:          05C1
Signing time:             Sat 04 Apr 2026 23:53:33 +0000
Manifest this update:     Sat 04 Apr 2026 23:53:32 +0000
Manifest next update:     Sat 11 Apr 2026 23:53:32 +0000
Files and hashes:         1: KwN-XtvChKOTiNGbzUXS2UdLMZs.crl (hash: mU0Aiacecerk/rE2kDvr/TfkPacrsjce5xLFdY2zqIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl
                          rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1140 (0x474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A80, serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B
        Validity
            Not Before: Apr  4 23:53:32 2026 GMT
            Not After : Apr 11 23:53:32 2026 GMT
        Subject: CN=69d1a47d-2091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:02:1c:ba:9f:3e:0d:44:f0:d6:96:f7:3b:
                    ea:c1:0e:29:d5:50:b4:b5:33:31:51:df:19:d2:6f:
                    d6:eb:b1:c1:e4:bf:e8:d6:6c:14:0c:89:31:c3:ec:
                    86:1a:3c:b6:8c:2a:10:30:21:08:59:16:28:3b:23:
                    cd:e5:f5:65:05:8e:da:90:82:3f:f5:92:4d:9b:90:
                    f1:7f:24:18:d9:30:9d:59:14:b9:0f:5f:db:df:56:
                    be:b4:f4:74:83:e3:67:55:da:b3:60:79:6b:72:eb:
                    6b:3b:26:8b:74:95:8b:56:40:ed:8d:a4:92:21:e5:
                    ec:c4:e2:0f:66:4e:c6:76:10:88:8a:5d:07:eb:d0:
                    65:c7:c3:39:13:8e:fa:8f:31:9a:d5:c7:1e:b3:41:
                    4f:ec:39:77:0f:61:d5:69:fe:e4:bd:3e:1e:92:12:
                    75:96:ff:4c:6b:93:cc:08:b8:0b:41:44:6d:0a:c1:
                    f9:f5:e3:f5:1b:4d:4c:89:5c:81:fd:1d:04:06:b6:
                    5d:7b:8e:91:fb:ff:ab:73:b7:67:c2:f5:d0:33:9e:
                    10:89:bd:f0:1d:97:07:4c:d0:09:35:25:56:78:63:
                    bf:eb:bf:0e:a2:24:bb:f1:c3:90:22:35:8d:82:43:
                    28:8f:14:09:9d:90:dc:90:50:cf:7a:1b:a9:0e:dc:
                    0f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:45:41:96:7A:51:46:86:7D:DE:B4:38:10:FB:8B:FC:AF:66:30:FF
            X509v3 Authority Key Identifier:
                keyid:2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:75:4b:25:a9:8d:b5:ca:0f:76:fd:9c:21:fc:57:a3:eb:e8:
         e5:1a:81:e8:4b:99:58:5e:5b:8f:57:2d:02:74:ec:1d:90:9b:
         71:3c:ae:82:eb:f3:09:70:23:48:09:1d:a6:92:2b:2d:e1:97:
         e3:7f:aa:57:8a:9c:b7:a6:2c:ad:a5:7c:c0:f7:1d:f4:a6:7b:
         21:cb:11:d8:ff:32:e7:e1:c1:14:d2:f4:57:09:bd:5c:77:5e:
         ec:6e:cf:8c:74:96:97:34:fc:46:5d:68:fa:e5:b5:20:f9:e3:
         5b:28:45:eb:34:98:c7:23:cd:78:43:17:d1:07:20:6e:1a:15:
         ca:ce:0e:62:39:0b:ae:f4:9e:04:a5:be:0a:25:2f:9e:63:61:
         ae:8e:f6:33:2b:e4:bd:09:87:a1:df:6a:75:82:3e:34:68:c5:
         41:cf:9f:d7:65:bf:1b:ed:95:d8:79:84:fb:65:a8:c8:00:70:
         69:6e:be:03:15:d6:8b:40:4c:e8:57:40:10:0e:22:1d:50:ca:
         5d:a3:94:dc:87:07:c1:a0:fa:6e:b4:ac:26:7a:fa:61:4c:64:
         34:c7:50:a8:73:b7:95:13:76:d0:81:93:57:0d:be:b8:76:39:
         07:f5:20:95:31:e4:b4:a5:78:32:8a:23:eb:c7:25:b8:cc:15:
         30:50:71:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:10 2026 by rpki-client