Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
File:                     KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft (raw, json)
Hash identifier:          tcZ/5x9UhKGd5iop5D4yAPvE0r4bkUBZ8dhZzlgdziw=
Subject key identifier:   45:38:AC:2B:78:BC:24:58:16:EC:25:33:62:FC:B3:60:B6:E2:AC:6A
Authority key identifier: 28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98
Certificate issuer:       /CN=A91E04FE/serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
Manifest number:          F2
Signing time:             Sun 27 Apr 2025 04:12:49 +0000
Manifest this update:     Sun 27 Apr 2025 04:12:49 +0000
Manifest next update:     Sun 04 May 2025 04:12:49 +0000
Files and hashes:         1: KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl (hash: TP7Fw/p1mEj3aTO5erfxofCa/Vbwjv8xSr17//s4Uzo=)
                          2: 5EE215CCC33D11EE97B67979C4F9AE02.roa (hash: qIW59Vu75lotEAXz2XFEI0+6mfrqPvKAPSHChiVChpE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl
                          rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E04FE, serialNumber=2883741B0F5BCA764F4D3C83D3ED6A0F27CD2298
        Validity
            Not Before: Apr 27 04:12:49 2025 GMT
            Not After : May  4 04:12:49 2025 GMT
        Subject: CN=680daec1-33c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:d0:1c:57:f0:94:3f:e9:ac:df:d7:5e:ca:
                    74:4a:6b:b7:1d:72:63:80:3d:bc:5c:1a:bf:61:c9:
                    73:0e:a1:6a:73:d6:89:94:7e:74:a1:9c:d1:1b:39:
                    79:40:80:ea:cb:d3:7f:b8:d9:44:be:04:79:26:30:
                    2c:e0:0f:a3:1b:f9:d8:0e:8a:82:21:47:d8:d3:c0:
                    17:a9:a3:5b:d3:e1:4d:a9:1a:5a:34:e1:80:c0:06:
                    8f:63:28:1a:bb:45:dd:f1:62:b7:89:12:44:46:1b:
                    28:bf:f4:60:c5:a8:01:86:a3:b2:3e:8a:c8:1b:82:
                    35:91:56:6d:28:c6:a7:95:3f:15:55:ea:56:4d:f3:
                    31:5c:71:f9:f0:86:28:47:42:bb:cb:3a:eb:e3:91:
                    c7:a2:cf:4b:4f:52:57:2b:ff:65:de:48:91:35:2a:
                    26:16:78:7d:71:e9:9a:b9:b6:96:eb:4a:db:3a:ab:
                    cd:98:41:27:96:5a:26:cb:46:ff:d2:df:aa:d0:89:
                    39:cc:8e:3a:59:77:ef:82:3d:01:67:ac:0b:7c:cb:
                    43:0b:be:06:e3:1b:fd:86:d9:1e:52:64:fc:70:36:
                    32:2e:52:58:65:dd:4d:6d:d3:83:8a:16:6e:ef:68:
                    1b:75:25:48:0e:28:db:41:b4:a3:e5:86:b4:08:ae:
                    e8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:38:AC:2B:78:BC:24:58:16:EC:25:33:62:FC:B3:60:B6:E2:AC:6A
            X509v3 Authority Key Identifier:
                keyid:28:83:74:1B:0F:5B:CA:76:4F:4D:3C:83:D3:ED:6A:0F:27:CD:22:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KIN0Gw9bynZPTTyD0-1qDyfNIpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04FE/86A6F654B73F11EEAF12B87BC4F9AE02/KIN0Gw9bynZPTTyD0-1qDyfNIpg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:7b:ea:06:9d:8b:34:e7:9b:1f:93:e3:07:ad:11:24:7b:a9:
         65:51:f9:d7:ec:36:31:54:bf:8b:ba:3e:ce:17:39:cc:77:6c:
         37:9a:c4:ce:ec:18:95:d5:56:cb:e0:6a:8d:17:e5:a0:b3:1d:
         4d:3e:b1:28:1d:61:c7:c7:f1:b8:94:f5:7b:1b:41:a3:4c:c4:
         68:07:be:89:b9:2b:72:bd:a1:29:e1:e8:14:5d:0e:41:38:a2:
         5a:e4:6d:4a:67:80:ba:3a:8c:6d:f5:bd:00:2d:ea:18:50:bb:
         d8:6a:6c:71:d0:2a:3a:ad:0f:bd:ff:aa:e7:3e:07:a1:c8:b2:
         ed:b6:bc:78:14:fa:a9:68:47:8a:de:18:3a:6e:85:c5:50:bc:
         b5:93:12:88:3a:37:ff:a2:1b:11:e4:5f:ee:64:86:5a:07:ab:
         27:92:c8:dd:d5:53:66:e8:6c:04:70:39:6a:39:87:b6:56:61:
         e6:af:31:d0:b5:bd:a9:c5:52:3d:83:fd:b3:38:65:12:7d:2a:
         9c:bd:10:57:3f:98:22:35:0f:37:4b:d6:3c:a6:c5:9e:5d:84:
         1c:a0:0d:01:9d:84:f1:c6:a6:27:79:ef:5a:bf:d4:f8:ed:1c:
         4b:09:e7:4c:b8:73:da:52:07:cd:7e:8c:9d:3c:29:c4:cd:36:
         37:68:22:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net