Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
File:                     CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft (raw, json)
Hash identifier:          cpmERZvyecQwKPODfIGGbrZehiI7srBB8Igihkj9Rq8=
Subject key identifier:   CA:FF:B8:EF:F8:0F:7C:50:A4:50:8E:48:13:EC:71:1D:24:52:38:F6
Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30
Certificate issuer:       /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
Manifest number:          01B5
Signing time:             Sun 05 Apr 2026 03:32:27 +0000
Manifest this update:     Sun 05 Apr 2026 03:32:27 +0000
Manifest next update:     Sun 12 Apr 2026 03:32:27 +0000
Files and hashes:         1: CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl (hash: msg9pesJpmc36DE6ojQ7xcQm3KGE8hdtbNDu7AwnfSg=)
                          2: DE2E716626DE11F18929E99D92833773.roa (hash: M2tO02HFUs50RonBzNe9MwYdR9Tkq6+PZdU5UbshAKM=)
                          3: AC218F2E2CDE11EFBC062E74C4F9AE02.roa (hash: g8MO/QgVBv9RweRV0mXs2iLPhyz7OUiWR60sGCOPFiA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl
                          rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:32:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
        Validity
            Not Before: Apr  5 03:32:27 2026 GMT
            Not After : Apr 12 03:32:27 2026 GMT
        Subject: CN=69d1d7cb-1d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:16:e4:0f:65:d9:5f:08:81:04:78:54:00:
                    05:0c:cf:84:f2:d7:f8:2c:80:d6:3f:5b:83:53:f7:
                    a7:01:5b:51:54:40:20:6f:75:0f:f7:c8:70:b0:0a:
                    09:a3:27:89:08:c8:85:b0:de:64:7b:8f:62:8e:61:
                    56:c5:40:19:a9:14:fb:89:5f:1b:5a:a7:1f:86:39:
                    18:27:a6:cd:19:ef:bf:c4:21:f5:ea:97:1e:ea:dc:
                    4a:7b:f9:e9:e1:7b:da:be:46:b0:52:59:30:98:30:
                    a7:96:0a:19:56:eb:cf:eb:99:2c:40:6d:19:f2:b9:
                    cd:56:fe:6c:4a:c9:89:84:09:95:17:95:50:b3:e7:
                    07:cb:3d:6c:ff:3b:c8:32:7f:ff:d6:ea:5d:b9:d1:
                    ec:8b:46:7e:ff:7e:78:72:30:58:ae:88:aa:b0:be:
                    6b:de:db:ec:54:97:32:86:14:25:7b:d2:76:38:52:
                    2b:20:63:27:fa:1e:27:a0:3b:6d:6f:ba:e5:98:3d:
                    8f:6d:54:c5:93:57:41:60:da:0e:d3:c7:47:97:ca:
                    b5:02:3d:5c:29:49:5a:88:28:8a:36:34:35:0c:b9:
                    f6:c7:f9:4f:c8:b9:95:7d:b7:fb:5b:60:88:af:2b:
                    d7:eb:9e:e9:9b:41:fc:95:9b:83:af:e9:36:0a:d3:
                    1c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FF:B8:EF:F8:0F:7C:50:A4:50:8E:48:13:EC:71:1D:24:52:38:F6
            X509v3 Authority Key Identifier:
                keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c6:ea:aa:d6:fa:88:4e:77:5b:fe:e6:bc:d1:04:42:03:a7:
         38:bd:37:16:3d:54:3b:e0:ea:bc:0f:c6:4f:38:74:6d:45:9c:
         d4:af:5e:a0:a1:3d:71:da:21:73:be:b1:5f:ac:94:f8:01:98:
         c0:77:90:56:c2:77:be:67:04:b1:05:ed:74:6a:c1:fa:cb:67:
         af:ee:f9:3a:dd:70:74:75:9a:0b:eb:c0:f8:a3:9a:4e:d0:6e:
         75:6c:7a:94:91:88:82:a5:6c:29:23:50:39:7e:56:0f:55:71:
         60:70:83:ac:83:ca:7d:09:c0:14:2b:6b:7d:46:6d:3e:df:2c:
         22:73:d2:6d:0c:03:2d:b0:01:d2:5e:77:10:68:69:46:09:6a:
         a7:a5:68:01:2e:1f:b5:da:eb:dc:a8:f6:40:a0:ce:9f:58:57:
         39:9a:5e:f3:71:0a:64:00:65:ec:82:bd:72:5e:af:33:34:03:
         84:11:c0:17:39:74:e7:d7:d8:cf:ab:c7:a7:a9:ee:e8:74:82:
         68:39:3b:25:b7:f2:fa:14:52:4f:c8:96:0c:ac:af:ce:ae:b8:
         c9:14:38:b1:95:a4:72:bf:7f:72:07:e1:f7:39:df:34:36:50:
         e8:ca:40:01:4a:50:e6:a8:14:58:97:07:51:4f:a9:99:cb:83:
         a3:4b:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:15 2026 by rpki-client