Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
File:                     KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json)
Hash identifier:          IGl1jOnMZNdMYDmZdNS1FrYm7SBMWhXS+5bg4srRuuU=
Subject key identifier:   D8:2E:81:3D:3A:D3:56:8F:5F:E2:91:72:1E:33:AF:82:19:8D:D7:11
Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98
Certificate issuer:       /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
Manifest number:          01A5
Signing time:             Sun 05 Apr 2026 03:41:01 +0000
Manifest this update:     Sun 05 Apr 2026 03:41:01 +0000
Manifest next update:     Sun 12 Apr 2026 03:41:01 +0000
Files and hashes:         1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: Iy0jkL2NNUabJ5krv0OqO1tHjKRKrpBCiNt04vbVLyo=)
                          2: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: h3tpppmL1hT5EM3m6sk6xUTtg20d/wirnkJ2RqVRrs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl
                          rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E04FE, serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
        Validity
            Not Before: Apr  5 03:41:01 2026 GMT
            Not After : Apr 12 03:41:01 2026 GMT
        Subject: CN=69d1d9cd-5a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:15:fa:26:68:9c:1b:17:e8:c2:60:59:b6:
                    40:14:a9:db:64:27:09:f6:96:c4:49:28:3a:5e:fb:
                    19:f3:c6:02:da:4e:95:06:e2:49:f4:dd:2e:b3:d9:
                    7f:19:00:84:06:0b:97:d1:c0:d2:b5:b2:27:f8:17:
                    f4:7d:49:7c:10:0c:8f:49:42:79:93:bd:e0:81:03:
                    07:4b:cf:8b:e8:85:86:08:c3:25:95:17:ca:62:37:
                    a1:68:5a:18:8c:18:d7:e9:fa:c2:10:78:0e:2f:d6:
                    f1:7a:f9:1c:e0:b8:65:5b:59:04:f8:61:ad:c7:d4:
                    03:df:51:f1:b0:8b:e9:25:a3:f6:18:29:dc:f1:93:
                    9d:6b:a5:95:a6:3f:9a:db:4d:bd:b4:b6:a9:6f:2b:
                    9a:cd:70:00:6b:24:e5:1f:53:de:8e:f5:49:0b:93:
                    29:8c:9b:5c:28:80:cb:b0:f0:69:88:5b:96:d9:01:
                    4f:e4:f1:2a:0b:ce:1c:64:d3:09:ca:58:56:69:2f:
                    ff:bd:4b:0f:f4:b8:a6:d0:4b:e4:25:74:bc:4b:23:
                    ac:a6:20:b5:22:bc:35:da:f2:4e:76:31:33:00:80:
                    e4:ed:0e:27:37:29:2a:0a:c2:52:c4:d9:ec:98:81:
                    03:49:19:ae:5f:db:26:48:86:c4:2b:67:94:eb:6f:
                    9e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2E:81:3D:3A:D3:56:8F:5F:E2:91:72:1E:33:AF:82:19:8D:D7:11
            X509v3 Authority Key Identifier:
                keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:5f:44:bc:bf:c5:e1:5a:80:d0:5c:db:57:19:aa:5a:b8:b5:
         b8:96:c4:6f:a9:fd:f6:2f:33:7d:e9:8c:d4:00:9b:9a:41:34:
         c0:9e:e3:6f:3b:24:03:26:c6:b6:91:5d:59:d9:47:16:6c:15:
         7c:10:0a:d4:f3:f5:d1:71:db:d0:0a:c6:74:fa:ee:17:fe:9d:
         29:f7:91:4c:63:b5:1c:d6:6b:09:5b:21:d0:3e:91:9b:ac:c3:
         0a:e7:d7:8a:81:c3:63:14:fa:28:4a:86:0b:a7:6d:28:28:1b:
         35:ce:37:00:c4:8f:44:79:90:83:db:6b:e3:88:ab:4e:5a:2d:
         c2:a7:6a:ed:72:f3:62:a8:dd:61:6a:bd:37:18:19:06:07:ae:
         b4:39:fb:69:aa:43:17:44:1c:57:ab:92:cf:67:13:93:24:68:
         38:30:fd:e0:2f:2b:cd:72:e9:98:b3:19:41:54:6a:3a:10:b7:
         02:c7:91:82:02:bb:69:fa:6c:1b:18:c3:eb:b1:08:6a:a2:d7:
         a1:84:05:9f:f4:63:91:5b:84:e2:97:c5:07:91:37:a8:49:48:
         d8:d0:06:5d:cf:55:f4:6f:47:90:29:4d:60:9c:21:ba:0b:28:
         fb:0e:b5:80:11:21:cd:26:9f:67:d9:19:a3:34:6c:97:d6:d5:
         70:07:15:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA0RkUxMTAvBgNVBAUTKDI4ODM3NDFCMEY1QkNBNzY0RjREM0M4M0QzRUQ2QTBG
MjdDRDIyOTgwHhcNMjYwNDA1MDM0MTAxWhcNMjYwNDEyMDM0MTAxWjAYMRYwFAYD
VQQDEw02OWQxZDljZC01YTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZYV+iZonBsX6MJgWbZAFKnbZCcJ9pbESSg6XvsZ88YC2k6VBuJJ9N0us9l/
GQCEBguX0cDStbIn+Bf0fUl8EAyPSUJ5k73ggQMHS8+L6IWGCMMllRfKYjehaFoY
jBjX6frCEHgOL9bxevkc4LhlW1kE+GGtx9QD31HxsIvpJaP2GCnc8ZOda6WVpj+a
2029tLapbyuazXAAayTlH1PejvVJC5MpjJtcKIDLsPBpiFuW2QFP5PEqC84cZNMJ
ylhWaS//vUsP9Lim0EvkJXS8SyOspiC1Irw12vJOdjEzAIDk7Q4nNykqCsJSxNns
mIEDSRmuX9smSIbEK2eU62+eHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNgugT06
01aPX+KRch4zr4IZjdcRMB8GA1UdIwQYMBaAFCiDdBsPW8p2T008g9Ptag8nzSKY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRGRS84NkE2RjY1NEI3
M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5YnluWlBUVHlEMC0xcUR5Zk5J
cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tJTjBHdzlieW5aUFRUeUQwLTFxRHlmTklwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDRGRS84NkE2RjY1NEI3M0YxMUVFQUYxMkI4N0JDNEY5QUUwMi9LSU4wR3c5Ynlu
WlBUVHlEMC0xcUR5Zk5JcGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvF9EvL/F4VqA0FzbVxmqWri1uJbEb6n99i8zfemM1ACbmkE0wJ7jbzskAybG
tpFdWdlHFmwVfBAK1PP10XHb0ArGdPruF/6dKfeRTGO1HNZrCVsh0D6Rm6zDCufX
ioHDYxT6KEqGC6dtKCgbNc43AMSPRHmQg9tr44irTlotwqdq7XLzYqjdYWq9NxgZ
BgeutDn7aapDF0QcV6uSz2cTkyRoODD94C8rzXLpmLMZQVRqOhC3AseRggK7afps
GxjD67EIaqLXoYQFn/RjkVuE4pfFB5E3qElI2NAGXc9V9G9HkClNYJwhugso+w61
gBEhzSafZ9kZozRsl9bVcAcV7w==
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:04 2026 by rpki-client