Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
File:                     kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft (raw, json)
Hash identifier:          4+aw183e72p/gm66rtRx2TEsrgq+hY4fDgqe+FmML6M=
Subject key identifier:   0F:F7:1F:6D:F2:25:F4:21:60:64:EB:8E:2C:40:54:FE:DA:FE:D6:05
Authority key identifier: 91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66
Certificate issuer:       /CN=A9155806/serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
Manifest number:          013F
Signing time:             Thu 21 May 2026 05:26:23 +0000
Manifest this update:     Thu 21 May 2026 05:26:22 +0000
Manifest next update:     Thu 28 May 2026 05:26:22 +0000
Files and hashes:         1: kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl (hash: 1DhN2ZZSXDAyTSBdlNoiguo1wP29wPq7OP9H1oNAYN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl
                          rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155806, serialNumber=9146B782EB82467B19D8B41D1CC40EBF04899066
        Validity
            Not Before: May 21 05:26:22 2026 GMT
            Not After : May 28 05:26:22 2026 GMT
        Subject: CN=6a0e977e-bd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:e9:e0:44:90:d5:80:60:b5:a0:87:c9:55:
                    91:48:4f:78:9f:a8:02:9c:17:52:93:1b:fe:0b:32:
                    a9:a2:9c:e4:2e:ae:87:25:c1:f8:cb:32:6d:cc:5f:
                    94:40:04:6f:2a:66:39:0a:de:15:2d:81:c8:40:2a:
                    7c:83:e9:24:61:0a:9a:e9:d2:0f:7d:3a:77:23:3a:
                    42:d4:7b:2a:30:8d:05:81:34:20:fd:a3:1e:b0:c2:
                    4e:e4:f7:38:ce:bd:6d:b5:47:67:e8:d4:44:19:6b:
                    74:18:ab:0c:03:8f:4a:42:30:2a:c9:1d:67:81:03:
                    8b:a2:98:69:6d:64:63:1f:e8:b0:6c:75:07:5e:49:
                    45:7c:8d:a8:ca:b3:57:74:4c:42:34:d7:cc:e4:9f:
                    c4:0d:72:35:0d:31:2c:3c:47:ef:07:5a:e5:52:a2:
                    5f:f5:14:1d:33:d9:7b:f4:79:f0:4b:64:9c:b3:69:
                    d5:5a:13:16:1d:77:8f:93:b8:46:96:35:2a:fa:38:
                    fa:18:c8:1c:10:5d:18:2a:cf:3f:af:b8:28:52:3d:
                    57:60:14:94:d5:d2:87:ea:fb:8f:6f:ac:20:8f:9e:
                    4b:34:e4:04:6e:e1:ab:22:7a:ac:0f:9e:8a:ea:7d:
                    ed:2c:5c:d8:82:03:75:01:56:b0:b5:71:92:d6:46:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F7:1F:6D:F2:25:F4:21:60:64:EB:8E:2C:40:54:FE:DA:FE:D6:05
            X509v3 Authority Key Identifier:
                keyid:91:46:B7:82:EB:82:46:7B:19:D8:B4:1D:1C:C4:0E:BF:04:89:90:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUa3guuCRnsZ2LQdHMQOvwSJkGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/D0C5F4E26E9111EFA62B4C3FC4F9AE02/kUa3guuCRnsZ2LQdHMQOvwSJkGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c5:8c:c2:d5:55:78:e1:b1:f0:31:28:05:e7:ff:62:38:27:
         c0:38:90:c7:ca:9f:a6:7f:f8:24:f6:13:9f:46:f1:d2:a0:b2:
         d2:fd:0d:14:11:60:09:c3:13:19:b7:23:7f:79:76:dd:2c:aa:
         c3:fb:78:16:c8:3a:b7:54:c5:9f:42:7c:41:d8:31:d0:1f:2c:
         43:a1:92:c8:9a:80:2b:30:6e:5d:dc:02:f1:5d:73:1a:9c:4e:
         b1:a7:73:8f:c3:c5:e2:94:4c:7a:cf:2f:d4:71:a3:28:4d:da:
         fa:ba:ea:64:b9:b2:8e:1d:29:06:b3:d8:8b:7b:56:2f:9d:1c:
         5e:83:3e:78:94:59:89:4e:f5:7c:ce:26:11:8d:76:52:1f:a1:
         4f:15:f4:2c:2b:ff:37:3d:dd:f1:6c:2b:c4:bf:f2:81:57:f2:
         4e:ba:d2:ec:8f:23:0c:37:61:b0:38:d2:4e:0f:c4:50:c1:fc:
         ad:17:bd:9e:15:ef:80:dd:e9:5b:cc:f1:88:c8:67:d0:5a:29:
         da:78:34:b4:e3:74:f1:77:e8:e0:17:12:11:5a:b5:a4:a5:0a:
         75:44:d2:3a:61:74:da:82:e5:2b:da:2d:9e:00:66:60:0d:f6:
         8e:77:95:9b:c6:cc:24:70:4b:3c:fd:31:04:f7:78:00:3c:c4:
         4e:18:76:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:30 2026 by rpki-client