Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
File:                     KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json)
Hash identifier:          cL3XDxtixVPLFwgYBI88W9A1Bj/tCOQiIga/h9vU2gY=
Subject key identifier:   FB:F0:7B:80:54:4C:64:24:66:72:B3:DE:FD:6D:BC:6B:F1:09:51:64
Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98
Certificate issuer:       /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
Manifest number:          0146
Signing time:             Sat 11 Oct 2025 07:23:21 +0000
Manifest this update:     Sat 11 Oct 2025 07:23:21 +0000
Manifest next update:     Sat 18 Oct 2025 07:23:21 +0000
Files and hashes:         1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: 1T3juOt478mMvT+YBQt3t/Zfm4BTMLMRQmxKGT/cOvs=)
                          2: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: qIW59Vu75lotEAXz2XFEI0+6mfrqPvKAPSHChiVChpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl
                          rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Oct 2025 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E04FE, serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
        Validity
            Not Before: Oct 11 07:23:21 2025 GMT
            Not After : Oct 18 07:23:21 2025 GMT
        Subject: CN=68ea05e9-ba8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:62:6a:1f:0a:54:c4:b8:cc:5a:4c:f7:56:
                    83:27:13:36:24:b9:37:4f:c6:43:3d:c9:da:85:c6:
                    c2:ca:dd:03:ab:76:2a:67:30:ae:95:95:7d:16:66:
                    62:c5:99:63:c6:bb:ed:60:bc:8d:3d:8c:27:11:bf:
                    09:6e:fc:c4:82:35:03:96:b2:c3:55:ac:4e:86:fe:
                    d9:d3:7e:4b:14:6b:9d:d0:0b:fb:26:f3:b0:3f:bb:
                    c6:1b:84:52:80:09:35:7d:23:2b:b8:bd:51:ff:30:
                    28:91:34:13:47:d8:a7:94:d4:fc:bd:c1:45:0d:cc:
                    92:f0:4a:2d:12:7a:8c:a8:ca:88:6a:48:0b:25:bf:
                    d2:9a:83:05:b6:5c:8c:14:44:0c:a0:02:2d:cf:aa:
                    fe:1d:60:48:12:fb:bb:ca:10:8d:15:1e:ef:cd:61:
                    4d:98:fa:4e:1b:5a:dc:ec:88:de:21:95:56:85:88:
                    2c:1e:f2:86:c2:ac:08:31:52:1c:ca:e5:ac:c6:be:
                    c8:57:92:c2:7e:f1:84:ec:aa:79:31:ed:de:d7:5e:
                    24:fc:d2:14:cc:a2:b4:b8:f9:fa:e6:84:a5:ed:ec:
                    30:0e:bc:7f:56:e1:4f:9c:8b:4c:30:48:55:ac:6b:
                    e5:40:04:fb:43:61:87:35:0e:ef:cf:58:05:4e:1f:
                    0f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F0:7B:80:54:4C:64:24:66:72:B3:DE:FD:6D:BC:6B:F1:09:51:64
            X509v3 Authority Key Identifier:
                keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:23:46:ae:f5:48:b0:1a:f9:45:ed:ec:ef:2c:8f:8c:44:17:
         4d:1f:66:2d:5d:0d:b4:8c:f7:18:3e:d0:81:4f:b1:b3:1d:94:
         7e:9f:d5:40:ca:e1:1f:6f:b1:4c:ce:e3:67:2f:4c:a0:cf:8e:
         e4:ce:26:b1:26:9f:13:fd:47:06:3e:1c:3f:a3:cf:a7:93:91:
         5f:ff:9c:be:ca:23:ad:0f:9c:19:6c:0b:6f:aa:19:04:34:37:
         d1:6f:63:e1:fd:cb:0a:c5:d3:be:43:e4:a8:2d:80:c3:48:f1:
         12:19:40:a9:ba:40:01:09:79:10:ed:2e:03:f6:ae:23:8f:11:
         52:d3:e8:3e:63:e9:3f:68:b9:20:8b:07:c2:b3:1f:1f:19:d8:
         a8:c8:f9:34:1b:a6:77:67:15:b9:0d:ac:20:a6:9c:dc:7f:ea:
         41:59:9d:1e:2a:96:4b:a2:33:75:0d:12:ba:a3:3f:ec:1b:05:
         0a:31:bd:32:fb:be:29:38:35:a7:3a:ea:68:01:c4:22:ac:ac:
         c9:8c:86:b8:0a:70:bd:42:94:2f:40:b9:9d:1f:5e:78:bf:ac:
         01:9b:3f:c5:e4:4b:41:58:5e:16:06:f2:56:66:b4:a9:9a:b0:
         e3:69:a4:53:8c:ae:5e:07:f4:7b:16:17:8c:2c:ef:03:c4:21:
         12:ab:30:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:54:11 2025 by rpki-client