Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
File:                     kNimlscsPFwGLY8AJhBf_c0Bz40.mft (raw, json)
Hash identifier:          mNBWlivHASyNKpj5atHCbtB7P6MQjP0VmP/IkRgfl80=
Subject key identifier:   6C:00:06:6B:D6:B0:0D:64:5E:38:64:C9:F8:66:D5:7F:DE:F6:BA:27
Authority key identifier: 90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D
Certificate issuer:       /CN=A9192C28/serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
Certificate serial:       04C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
Manifest number:          04B8
Signing time:             Sat 04 Apr 2026 23:42:08 +0000
Manifest this update:     Sat 04 Apr 2026 23:42:07 +0000
Manifest next update:     Sat 11 Apr 2026 23:42:07 +0000
Files and hashes:         1: kNimlscsPFwGLY8AJhBf_c0Bz40.crl (hash: mtEM/36qA9CyAjJaq8f2Y4zLuuVhNAjaHXH8J1lFMFY=)
                          2: 28741DDC85CD11ECA5E28171C4F9AE02.roa (hash: aMf5ZQEPQtwObqmvJT5ItKQeDQ+Q+Lo8Gpi2rkRE0lI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl
                          rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1219 (0x4c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C28, serialNumber=90D8A696C72C3C5C062D8F0026105FFDCD01CF8D
        Validity
            Not Before: Apr  4 23:42:07 2026 GMT
            Not After : Apr 11 23:42:07 2026 GMT
        Subject: CN=69d1a1d0-7fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:6c:9c:9b:e8:b3:19:ea:90:d9:98:ba:b6:
                    30:3d:48:16:79:01:66:d9:0b:b6:97:5b:83:63:b2:
                    1e:9a:88:33:ca:87:2b:a8:67:3e:d4:e4:45:8b:c8:
                    63:47:04:9b:d4:b0:c1:0a:f2:be:65:e2:92:5d:c0:
                    07:fc:1e:60:40:00:e6:bf:a7:dc:c6:23:c0:86:47:
                    cc:c7:08:db:40:b8:49:4e:41:2f:39:4f:6c:da:f9:
                    f9:f6:1a:fb:c6:be:b1:a3:ca:4a:02:68:49:d3:8a:
                    dc:67:f3:e2:c5:37:92:57:af:5c:b9:31:c5:04:95:
                    13:1b:31:86:48:20:ef:e8:d2:0a:2b:86:16:97:66:
                    a2:18:32:a4:90:63:95:3e:99:ff:71:d7:c3:1a:ba:
                    50:dd:c0:97:64:57:ce:60:39:19:fb:00:22:8c:57:
                    fe:65:2c:5e:e7:80:88:a0:1b:fe:12:dd:1c:54:e0:
                    49:12:6d:a3:5d:a4:e2:ee:21:57:fd:75:7f:e0:79:
                    49:1c:09:5d:d9:f2:71:e6:93:5a:1f:79:dd:66:47:
                    e9:52:4c:ca:60:6a:e7:a8:a3:e5:f6:10:d7:bd:3a:
                    43:27:d8:d7:ec:cb:72:3d:7a:ab:25:06:f4:cf:41:
                    7d:c0:78:0b:de:80:1d:10:08:85:35:a0:5f:e8:15:
                    09:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:00:06:6B:D6:B0:0D:64:5E:38:64:C9:F8:66:D5:7F:DE:F6:BA:27
            X509v3 Authority Key Identifier:
                keyid:90:D8:A6:96:C7:2C:3C:5C:06:2D:8F:00:26:10:5F:FD:CD:01:CF:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNimlscsPFwGLY8AJhBf_c0Bz40.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C28/3A0164766D5211ECAC61BB17C4F9AE02/kNimlscsPFwGLY8AJhBf_c0Bz40.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:18:93:90:8e:2c:af:24:af:b8:2a:18:71:04:28:4e:85:39:
         7a:e3:e0:0c:20:89:84:75:72:db:bd:ef:7c:75:d8:8f:de:92:
         4e:c4:f8:d4:f5:a9:a1:11:a4:67:75:db:c8:7a:af:4a:d1:94:
         77:9e:e5:40:52:17:25:a7:a7:7d:5a:c4:cb:f2:a1:ab:4e:73:
         ba:8c:b1:f0:93:46:53:bc:01:3c:1a:65:56:e3:2b:52:c9:1f:
         0c:1e:83:eb:7c:79:2a:39:ca:00:00:dc:84:d5:2f:cd:8a:c3:
         21:38:b9:45:9b:51:0c:be:59:52:89:5d:12:0c:48:04:ca:f3:
         fa:88:77:a4:cb:d7:54:5f:4f:75:83:79:7e:7b:aa:53:5c:ae:
         f0:c2:fe:22:2a:39:d0:b8:13:a3:02:c2:40:74:e6:55:5e:82:
         6c:80:6b:62:88:83:40:bd:93:00:e4:3b:19:7d:65:19:85:bb:
         ed:22:f0:13:77:b2:49:96:47:85:ca:d2:7e:c9:74:ba:c7:41:
         a8:8a:62:35:98:71:d7:b8:d7:b9:f8:21:e5:5f:43:33:eb:83:
         5b:93:2b:a0:c3:8b:df:12:04:46:ec:fa:ec:06:63:72:c7:d1:
         15:d1:21:f5:44:ff:a4:62:fd:d7:ba:85:a6:40:33:18:f7:25:
         ab:dd:d5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:07 2026 by rpki-client