Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
File:                     kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft (raw, json)
Hash identifier:          ZVqf7psdD/NMXBvL3pX1BfQ2KlW5ePhWiLpAQDj/66s=
Subject key identifier:   7B:50:AC:CD:BA:9B:A3:5C:34:C6:BB:C9:BF:FE:91:A5:23:E6:30:11
Authority key identifier: 90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74
Certificate issuer:       /CN=A91A038D/serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
Manifest number:          70
Signing time:             Sun 05 Apr 2026 07:19:30 +0000
Manifest this update:     Sun 05 Apr 2026 07:19:30 +0000
Manifest next update:     Sun 12 Apr 2026 07:19:30 +0000
Files and hashes:         1: kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl (hash: xd7Ni6rBPOZRDuJY4Ldeib/Ii5/3MgwfgsZZzitz9xI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A038D, serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
        Validity
            Not Before: Apr  5 07:19:30 2026 GMT
            Not After : Apr 12 07:19:30 2026 GMT
        Subject: CN=69d20d02-237d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:ee:bf:19:31:97:46:a1:b2:a1:da:ed:97:
                    9c:c6:27:3a:df:ae:f9:22:6e:21:5a:53:a1:64:f8:
                    af:7d:ab:76:ad:81:45:8f:8c:bc:c7:9e:db:11:ee:
                    cb:c8:b6:65:dc:a5:d9:b0:9d:9f:f9:25:ca:f5:c7:
                    0a:03:8a:10:2a:fc:5f:f5:17:5b:69:04:d3:3d:7a:
                    42:36:3a:9a:6e:40:8f:e6:c3:e2:18:dc:41:ee:71:
                    51:ad:c5:d8:a2:84:06:d6:bf:28:8f:2f:00:db:97:
                    b3:cf:ed:2b:35:ae:c3:5e:13:4a:3c:30:39:be:7d:
                    bd:d3:87:38:3b:cd:ca:3f:c4:2b:de:dc:21:bd:5c:
                    81:5a:f6:ef:49:d0:60:f2:2f:d3:96:da:e8:02:51:
                    4c:6e:ee:01:0d:18:5d:23:63:97:70:51:a5:07:53:
                    0a:65:2a:5b:6b:2d:e2:42:58:de:04:b9:b3:ff:f4:
                    74:4f:93:43:b1:4f:64:d6:6e:b7:d1:7c:1b:0e:d6:
                    45:41:24:3c:fb:a6:fd:56:d0:00:88:80:15:a3:01:
                    f7:48:89:88:34:c5:7f:d5:d7:aa:66:2e:aa:ce:d0:
                    4b:fe:c2:11:09:b3:b1:af:8b:77:57:45:e8:60:79:
                    0e:65:b4:26:d5:a5:5d:17:97:31:6b:63:72:a8:5f:
                    f2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:50:AC:CD:BA:9B:A3:5C:34:C6:BB:C9:BF:FE:91:A5:23:E6:30:11
            X509v3 Authority Key Identifier:
                keyid:90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:05:dd:1e:b6:80:a9:42:fe:5a:3b:bf:83:f1:9a:12:88:88:
         41:84:c3:47:03:b0:f2:a9:82:ad:9a:64:36:3d:4e:2a:df:9b:
         5c:06:b9:26:1f:d2:ca:2a:9e:8c:a1:2b:86:8a:41:3a:09:cb:
         c5:25:be:cd:9a:3b:ba:08:2b:b1:a4:cb:d8:c5:ff:ec:57:65:
         3a:d8:7a:5b:cc:d1:9c:45:34:39:a6:c8:71:52:59:17:bf:4f:
         b6:18:eb:1e:1c:23:cf:69:d6:d5:b7:66:8c:cb:08:be:1a:1a:
         10:02:b5:d4:b7:4b:73:9b:a3:ce:fb:0c:de:6c:62:28:d5:69:
         4a:73:f3:e6:a4:cb:b5:73:18:1e:97:7f:53:c8:a1:fa:38:08:
         45:58:a8:ed:47:bf:d8:14:32:b0:73:08:b4:d1:ba:64:40:82:
         a0:2a:cb:a7:b4:d3:1d:ec:65:4f:f6:0a:6b:01:24:e1:bb:20:
         c7:a6:b8:66:cd:1d:9d:7d:95:08:f7:e1:75:bc:ec:75:b7:f2:
         49:b4:ed:f6:9b:67:de:96:6c:52:5c:d0:a9:f1:37:87:51:04:
         a3:66:a6:1e:2e:30:a9:e1:54:2f:90:ee:ba:fe:e0:17:eb:91:
         ec:2f:9b:85:8c:f5:94:c4:bb:0c:20:60:2d:53:ad:06:fc:40:
         24:e1:04:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:59:35 2026 by rpki-client