Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
File:                     KISNw_Gedyn_43735PClycW0kOk.mft (raw, json)
Hash identifier:          EkOU6JvmP178KKvvLVyIvHnWpuJtpiALpWwPx/TM5Yg=
Subject key identifier:   3C:BE:7C:2F:C3:AA:59:2C:AF:E7:88:8B:79:30:75:61:A9:0D:41:66
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Certificate issuer:       /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial:       0227
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
Manifest number:          021D
Signing time:             Sun 01 Mar 2026 03:36:51 +0000
Manifest this update:     Sun 01 Mar 2026 03:36:50 +0000
Manifest next update:     Sun 08 Mar 2026 03:36:50 +0000
Files and hashes:         1: KISNw_Gedyn_43735PClycW0kOk.crl (hash: /HlJvL1JfZbRSXzHw/B8b7slmXDoREkMZnXhG4VmXoM=)
                          2: EC61C060DDB411ED93355C4FC4F9AE02.roa (hash: Ds1Oggb1CXmheiOx4YZNVxU2i1qg8eEHn8KdU83omHg=)
                          3: 6C0C84D8DD9E11EDB661B12CC4F9AE02.roa (hash: NvHtd8ujE1yELsuYXTHpNbSZA6sMXQEq9scs3taiBxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
                          rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
        Validity
            Not Before: Mar  1 03:36:50 2026 GMT
            Not After : Mar  8 03:36:50 2026 GMT
        Subject: CN=69a3b453-6b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:11:5b:0c:87:0a:92:3f:b2:ec:1c:2a:6d:ff:
                    d0:98:59:40:1e:57:48:7d:23:9e:83:07:bf:0d:3e:
                    68:42:e0:a6:b5:9c:3c:ea:50:41:9f:49:6a:30:06:
                    7c:60:89:2c:28:01:f1:79:b1:e3:7d:75:d0:68:6b:
                    8d:2c:e6:00:ef:22:09:8b:71:95:5b:52:c5:2b:f1:
                    6b:6f:b2:e7:7a:aa:83:88:0e:c4:a3:6a:11:ab:cb:
                    50:2f:65:31:ed:ff:3f:b6:48:15:b0:3c:03:ac:0b:
                    c8:9f:5d:1a:d2:36:f7:ff:b5:61:b3:20:99:35:84:
                    bc:e4:a5:cc:ad:38:ec:c3:27:21:c8:a5:61:4c:c5:
                    b0:bf:96:03:51:53:1e:42:a3:31:07:03:a1:db:4f:
                    37:e2:c7:cc:c3:e5:c8:06:ab:87:d8:84:af:17:a1:
                    31:18:4f:03:39:1f:86:8f:c4:60:fa:1c:9c:d4:f8:
                    a2:b8:62:9a:c6:ee:1b:ae:9a:5b:56:52:3b:e9:8c:
                    c9:b8:ac:87:6a:1c:0d:71:96:93:1d:3f:f0:4d:ef:
                    52:64:83:c9:30:8d:00:7a:a8:53:69:a7:d3:d4:8f:
                    54:38:69:f5:61:4c:49:ae:73:01:ba:0c:13:c6:7e:
                    7d:f4:b6:f2:9f:3a:08:4e:4e:9c:d9:83:63:03:13:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BE:7C:2F:C3:AA:59:2C:AF:E7:88:8B:79:30:75:61:A9:0D:41:66
            X509v3 Authority Key Identifier:
                keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e7:aa:6e:b0:11:fb:f1:40:d7:c8:30:8e:17:8f:a0:73:7d:
         72:14:8c:35:7a:97:62:71:fa:e3:33:0d:0a:a2:52:ce:fc:15:
         17:bb:d8:1d:9c:27:72:0a:5d:80:cd:78:a8:a7:00:ac:c5:71:
         71:a3:a6:91:00:41:d4:c0:62:92:29:13:22:65:12:e2:5e:4c:
         37:6f:18:5a:d9:e5:69:eb:63:d6:96:4f:ff:94:3a:e7:76:e3:
         69:b5:1b:6a:ee:9a:9c:c8:1a:10:7c:55:9d:6f:98:94:2f:00:
         d1:ab:98:0b:7f:7a:4a:1c:ad:c8:15:a1:a4:90:75:21:77:0c:
         e8:15:ae:21:32:b1:97:fd:ad:4f:c0:a8:09:85:6b:55:1c:f2:
         29:7c:0f:20:a6:60:0a:13:2d:f1:3d:c4:ad:f1:2b:91:90:0e:
         42:31:d0:a8:f8:37:be:6b:1d:b4:01:3e:e1:b9:f3:98:4f:0c:
         6b:7f:ae:cf:c2:ae:8a:dc:38:17:de:ff:27:36:8e:94:82:89:
         a7:91:7b:02:bc:ce:f7:5a:f8:28:8a:72:76:80:0f:f0:46:f0:
         1e:9f:ea:b2:9f:7a:e6:0f:54:41:07:b3:32:02:d2:5a:42:a8:
         ca:05:db:1f:e7:24:5b:4e:da:d0:65:0a:aa:cf:07:ab:64:73:
         6b:a5:cd:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFCNUIxMTAvBgNVBAUTKDI4ODQ4REMzRjE5RTc3MjlGRkUzN0VGN0U0RjBBNUM5
QzVCNDkwRTkwHhcNMjYwMzAxMDMzNjUwWhcNMjYwMzA4MDMzNjUwWjAYMRYwFAYD
VQQDDA02OWEzYjQ1My02YjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1hFbDIcKkj+y7Bwqbf/QmFlAHldIfSOegwe/DT5oQuCmtZw86lBBn0lqMAZ8
YIksKAHxebHjfXXQaGuNLOYA7yIJi3GVW1LFK/Frb7LneqqDiA7Eo2oRq8tQL2Ux
7f8/tkgVsDwDrAvIn10a0jb3/7VhsyCZNYS85KXMrTjswychyKVhTMWwv5YDUVMe
QqMxBwOh20834sfMw+XIBquH2ISvF6ExGE8DOR+Gj8Rg+hyc1PiiuGKaxu4brppb
VlI76YzJuKyHahwNcZaTHT/wTe9SZIPJMI0AeqhTaafT1I9UOGn1YUxJrnMBugwT
xn599LbynzoITk6c2YNjAxPSgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDy+fC/D
qlksr+eIi3kwdWGpDUFmMB8GA1UdIwQYMBaAFCiEjcPxnncp/+N+9+TwpcnFtJDp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUI1Qi84RDU3RTE3Q0RE
OTUxMUVEQUU4QzZDN0FDNEY5QUUwMi9LSVNOd19HZWR5bl80MzczNVBDbHljVzBr
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tJU053X0dlZHluXzQzNzM1UENseWNXMGtPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MUI1Qi84RDU3RTE3Q0REOTUxMUVEQUU4QzZDN0FDNEY5QUUwMi9LSVNOd19HZWR5
bl80MzczNVBDbHljVzBrT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYueqbrAR+/FA18gwjhePoHN9chSMNXqXYnH64zMNCqJSzvwVF7vYHZwncgpd
gM14qKcArMVxcaOmkQBB1MBikikTImUS4l5MN28YWtnlaetj1pZP/5Q653bjabUb
au6anMgaEHxVnW+YlC8A0auYC396ShytyBWhpJB1IXcM6BWuITKxl/2tT8CoCYVr
VRzyKXwPIKZgChMt8T3ErfErkZAOQjHQqPg3vmsdtAE+4bnzmE8Ma3+uz8Kuitw4
F97/JzaOlIKJp5F7ArzO91r4KIpydoAP8EbwHp/qsp965g9UQQezMgLSWkKoygXb
H+ckW07a0GUKqs8Hq2Rza6XNYQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:28 2026 by rpki-client