Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
File:                     KwN-XtvChKOTiNGbzUXS2UdLMZs.mft (raw, json)
Hash identifier:          +QKK0uSlBaQaeCTXWWksknFHNv+RETNvYbQ+NJ6I/Sc=
Subject key identifier:   1D:D3:8D:DE:53:54:7A:6B:29:A3:FD:36:0E:EC:AC:5D:4B:EB:AD:CF
Authority key identifier: 2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B
Certificate issuer:       /CN=A9183A80/serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B
Certificate serial:       047A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
Manifest number:          05CD
Signing time:             Fri 17 Apr 2026 00:00:00 +0000
Manifest this update:     Thu 16 Apr 2026 23:59:59 +0000
Manifest next update:     Thu 23 Apr 2026 23:59:59 +0000
Files and hashes:         1: KwN-XtvChKOTiNGbzUXS2UdLMZs.crl (hash: y+kPloH7a3eUDvVJpWIwMuZ4yXCx1U5QNIHcad49iN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl
                          rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146 (0x47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A80, serialNumber=2B037E5EDBC284A39388D19BCD45D2D9474B319B
        Validity
            Not Before: Apr 16 23:59:59 2026 GMT
            Not After : Apr 23 23:59:59 2026 GMT
        Subject: CN=69e177ff-ed50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:65:27:d6:32:16:82:ab:ed:72:1b:1d:1b:
                    61:63:83:0b:32:cf:ba:5b:70:28:53:81:10:71:dd:
                    c7:e1:ec:06:b8:4b:a8:28:ef:03:7d:ff:21:87:d9:
                    1d:92:7a:f6:a9:64:35:62:7e:97:ce:dc:e8:f2:ae:
                    cd:36:f1:cd:e3:59:f5:f2:3a:84:02:ac:a2:fb:be:
                    21:6b:1e:09:4e:91:99:53:1b:f9:00:df:fc:ae:3e:
                    fb:07:77:1e:4a:65:95:16:fa:1c:e2:a0:5a:9c:03:
                    2d:88:df:ea:08:9a:80:fb:c8:f7:3a:d2:b7:71:eb:
                    08:2c:8f:6d:74:29:be:1e:8d:af:82:2c:f6:5a:82:
                    03:ec:01:27:54:c5:89:41:57:69:cf:b5:7e:64:5d:
                    7c:46:93:82:8c:46:63:26:44:8b:bd:c7:34:80:a8:
                    15:e0:18:c4:2f:5f:47:32:78:ad:fe:66:fe:90:79:
                    d8:5f:cb:57:d2:e5:61:45:b9:cb:5b:bc:7e:94:99:
                    63:67:59:78:7e:77:58:f9:00:d3:3f:4e:20:00:98:
                    f9:0d:ad:32:e2:f2:84:39:7c:6f:7e:3a:cb:d2:d9:
                    01:b5:a4:3d:cb:94:dc:98:b1:c6:84:8d:1d:06:6d:
                    15:5e:ae:f4:05:e5:b0:53:f0:f3:36:f2:a3:c3:68:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D3:8D:DE:53:54:7A:6B:29:A3:FD:36:0E:EC:AC:5D:4B:EB:AD:CF
            X509v3 Authority Key Identifier:
                keyid:2B:03:7E:5E:DB:C2:84:A3:93:88:D1:9B:CD:45:D2:D9:47:4B:31:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KwN-XtvChKOTiNGbzUXS2UdLMZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/KwN-XtvChKOTiNGbzUXS2UdLMZs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:2a:a1:e7:9a:47:b8:d7:25:e3:ad:e3:05:e1:7b:35:8f:f7:
         b3:7f:98:7a:54:ae:5d:2a:29:42:87:54:bc:c5:54:05:9b:dc:
         36:6a:e6:0a:c8:7c:e3:88:1c:c3:34:71:11:9d:ab:d6:60:21:
         57:df:8d:50:52:6f:1d:e5:52:2b:b5:3b:b0:e7:f8:d5:1e:2a:
         7f:86:77:c0:67:f5:76:85:d7:a1:21:2a:91:2f:cc:ed:26:c7:
         e7:f6:01:43:85:c0:93:9a:b4:ac:ed:dd:7a:84:83:54:18:ff:
         d0:23:08:4a:b6:53:75:ca:be:0e:c4:f1:4f:16:86:8d:d3:f4:
         ee:7d:ef:9b:d6:a4:0d:71:f4:a3:63:ee:7f:4a:40:ec:ac:91:
         9a:2a:43:49:77:1a:e7:37:47:46:a5:47:25:a1:d7:fe:19:1b:
         83:ae:2c:df:f9:b8:25:74:5c:3b:32:1f:07:dd:8e:c1:70:f6:
         8e:7b:8d:2a:86:89:f0:09:bf:41:ff:5c:45:1a:3b:c1:4a:90:
         70:66:9c:b4:1e:f8:56:67:4b:76:12:b2:b7:09:94:19:77:65:
         3e:52:17:d3:f7:5f:6d:77:cf:0e:83:b5:2f:5d:47:70:bf:10:
         62:8c:fb:99:0c:b5:79:b2:c9:67:4a:f7:5e:ed:c4:07:7f:a3:
         c4:f3:27:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:25 2026 by rpki-client