Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
File:                     KYEeHbBovbur-3q2lfhYmL1hjGk.mft (raw, json)
Hash identifier:          mr3yM602OiCU7CIB52orC6oe7dDCIk4ggDW/cYV60EE=
Subject key identifier:   6B:9E:62:4B:6C:50:E1:AC:C1:49:10:2E:28:0A:03:BE:0E:2E:14:16
Authority key identifier: 29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
Certificate issuer:       /CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
Manifest number:          0183
Signing time:             Wed 05 Nov 2025 03:47:44 +0000
Manifest this update:     Wed 05 Nov 2025 03:47:44 +0000
Manifest next update:     Wed 12 Nov 2025 03:47:44 +0000
Files and hashes:         1: KYEeHbBovbur-3q2lfhYmL1hjGk.crl (hash: Vct1eYYfQziNReXz9AJ3oZOWrAXUP/sqbSCRZCpTqCk=)
                          2: 0B2052EA6D0D11EEA65D7522C4F9AE02.roa (hash: romYbuiWzdOqklzJCkUsUwW/w4kh63Rd2xMFubLjgPo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl
                          rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0CAE, serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
        Validity
            Not Before: Nov  5 03:47:44 2025 GMT
            Not After : Nov 12 03:47:44 2025 GMT
        Subject: CN=690ac8e0-3fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:22:a0:07:2b:a7:8c:50:ca:e5:9e:e1:00:de:
                    a6:4e:9f:db:b4:23:95:75:10:9d:68:30:48:37:f1:
                    9d:d1:f5:28:b6:89:88:be:7c:f6:6a:69:a3:5d:d4:
                    8d:9f:d7:38:33:a2:5f:34:aa:21:f7:47:02:03:10:
                    59:f6:30:41:4f:2b:1c:de:15:84:cf:93:a3:30:ca:
                    39:c2:e1:4b:68:f9:61:3f:2b:08:77:b9:c9:48:20:
                    a9:09:2f:f8:9a:a4:fd:53:11:cb:dd:a7:8b:31:d6:
                    28:2b:2c:1b:42:52:a9:b2:91:03:0e:79:c5:9c:99:
                    d4:08:89:01:d6:ce:f7:60:1d:1f:51:45:b0:5c:e0:
                    b7:15:7c:c0:2d:46:0c:15:07:03:52:e7:a6:e3:79:
                    8a:f3:aa:ff:ee:81:c3:71:37:52:f5:fc:59:d7:86:
                    39:86:a4:ce:6e:4a:23:8b:ae:e1:a1:65:d2:3f:61:
                    ad:56:0f:f5:83:82:53:d1:87:f6:a0:b3:05:b1:84:
                    ac:b6:10:0d:d7:42:6c:88:df:54:fb:df:b6:66:b4:
                    ef:47:9d:de:b0:f4:6f:d4:49:03:9f:f3:13:d7:c7:
                    32:a8:ba:96:c7:10:a0:8a:43:3e:8e:c2:f9:a5:02:
                    af:c2:89:94:c2:1e:80:4a:32:3e:7f:48:93:d3:0a:
                    42:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9E:62:4B:6C:50:E1:AC:C1:49:10:2E:28:0A:03:BE:0E:2E:14:16
            X509v3 Authority Key Identifier:
                keyid:29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ce:28:2c:0d:34:0f:97:56:f7:c9:ee:8c:85:5b:14:13:9c:
         55:d1:90:6a:1a:2e:24:b6:3e:1b:21:0b:05:d1:08:bb:82:1b:
         65:da:8d:7b:ee:f6:b4:7e:a1:57:fc:7d:73:2b:36:3e:f6:ff:
         0a:01:ef:33:42:ed:fb:99:65:1c:4f:68:5e:d5:c6:bd:77:1b:
         a4:d4:a4:c7:21:66:23:60:6e:72:a0:0e:99:61:ff:77:6b:70:
         c5:7e:46:fe:00:39:e7:3c:f2:99:ad:79:14:db:0b:f4:d1:1f:
         7d:01:0d:7c:23:a6:df:1b:ca:ec:19:8d:94:85:20:71:91:a2:
         09:f5:cd:fa:77:18:37:8f:b0:13:c9:96:00:0c:a0:27:b7:a1:
         fb:0c:b8:63:cc:b3:74:8f:81:70:5c:6c:03:98:97:36:64:72:
         42:92:71:c8:fe:ad:5f:95:fd:5b:60:56:30:80:c5:00:80:cf:
         d3:7b:76:30:74:bd:e1:9a:ad:81:f5:e3:84:40:65:ab:f9:8f:
         82:48:c1:bb:9a:26:06:2c:c9:01:ca:95:16:fb:d2:b8:f5:87:
         d7:33:d7:44:da:3c:1a:a8:ec:e0:db:1f:85:35:88:5c:ce:b6:
         55:90:23:ef:34:e5:ec:df:cd:2c:1d:ac:d6:89:8f:17:94:4f:
         05:d5:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:04:31 2025 by rpki-client