Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
File:                     cuiGCytHM2W_JhQg0GtYqATClrI.mft (raw, json)
Hash identifier:          8eK6WUdn8WmkGwAZPV8d+Ao8YSaEboQhVadK2FPOcwY=
Subject key identifier:   F1:3D:F7:15:8B:1F:65:9D:EF:88:C6:22:2A:39:33:19:8B:3B:35:9D
Authority key identifier: 72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2
Certificate issuer:       /CN=A916AC30/serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
Manifest number:          012F
Signing time:             Tue 21 Apr 2026 05:34:41 +0000
Manifest this update:     Tue 21 Apr 2026 05:34:40 +0000
Manifest next update:     Tue 28 Apr 2026 05:34:40 +0000
Files and hashes:         1: cuiGCytHM2W_JhQg0GtYqATClrI.crl (hash: KqbNUdcd0q43Qyl9aZhhsWdw8DB5IfWdn9lpWSl38jE=)
                          2: 8CBE22F8D33911EF9F576474C4F9AE02.roa (hash: 1LHfqTOaLKQVkCd0oczoYrc20lDMyV5N0+iERGH3Aeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl
                          rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 05:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC30, serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
        Validity
            Not Before: Apr 21 05:34:40 2026 GMT
            Not After : Apr 28 05:34:40 2026 GMT
        Subject: CN=69e70c70-04e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:91:c7:06:16:1d:71:70:30:c2:7c:ca:ce:b6:
                    12:12:c9:aa:ab:08:8f:03:41:75:b6:b1:17:b6:72:
                    80:d8:79:fd:7f:06:b9:fd:be:7a:48:04:25:7b:82:
                    e8:2a:1d:ca:97:a6:ba:41:71:57:ff:9e:67:d4:8a:
                    04:97:2b:4a:5f:29:19:23:fa:84:f0:2b:13:02:2c:
                    d5:4b:8b:d9:55:78:d8:36:d5:e6:bc:80:ca:0c:0f:
                    98:ab:88:b6:bf:1a:56:ee:8f:ed:cf:a8:2f:cf:0c:
                    96:93:cc:42:63:be:67:70:41:39:1f:0b:40:85:12:
                    ce:6f:bf:3b:05:a2:08:90:64:31:08:93:cc:bb:5f:
                    d3:92:0c:ac:2f:b7:14:d5:1b:e7:80:7f:c7:b2:1f:
                    05:39:c8:9b:a1:42:fa:f6:f9:15:99:0e:e9:f5:bd:
                    8c:5b:71:f2:28:b4:22:09:4f:95:1a:2f:af:7f:04:
                    10:f6:52:23:c1:5f:24:fe:9f:93:68:b7:94:ba:ac:
                    63:69:11:2e:e7:08:12:d3:a4:b1:ae:47:69:55:e9:
                    b5:ce:d5:47:26:f5:b8:b8:b9:c2:df:59:f5:bb:46:
                    14:b4:e0:2f:da:7d:51:fc:86:26:34:ca:42:99:47:
                    55:eb:05:a1:8f:92:87:1e:c1:b0:58:f6:d1:ca:08:
                    9b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3D:F7:15:8B:1F:65:9D:EF:88:C6:22:2A:39:33:19:8B:3B:35:9D
            X509v3 Authority Key Identifier:
                keyid:72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:6a:92:8c:f8:04:a4:6d:ac:c1:88:36:55:52:7f:3c:54:12:
         f4:49:66:f9:e9:cc:0c:eb:0b:3c:b5:dc:ab:25:84:a3:c8:9a:
         6f:4b:85:df:8f:44:24:81:81:f9:52:83:35:ad:18:b1:71:e4:
         a7:8a:e4:91:d9:49:c3:be:bf:d0:ca:f4:99:2d:e1:81:d2:1d:
         d0:ae:d5:a1:ac:fb:86:f1:3c:a6:74:90:4b:d0:a6:02:fe:04:
         2f:43:3c:4f:ce:40:d9:1a:f9:71:d5:dd:0d:18:f6:a0:1c:d5:
         7e:a6:81:c8:03:9f:70:80:89:32:c0:07:a2:11:e7:3f:01:39:
         26:42:a3:f6:6b:4a:c7:fc:fc:16:30:da:80:19:e0:1e:c3:21:
         81:11:0c:6e:9c:b7:4a:ba:bf:21:6d:16:34:e6:17:af:6c:2f:
         2e:e8:11:49:68:47:9f:7b:35:13:88:6c:87:0e:c4:1a:28:7a:
         4f:99:ed:fb:64:a8:9a:02:4b:dc:92:c2:7c:67:88:05:a5:4d:
         b4:83:e5:fd:8b:cb:7c:41:bd:95:b0:d7:63:66:ad:11:c6:8f:
         f0:85:ee:8f:38:66:9f:2f:97:48:9a:8d:14:51:5b:1e:af:32:
         bb:b6:38:0b:d8:ab:87:bd:d3:17:26:88:b5:49:68:c5:a3:6a:
         6b:31:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:45:53 2026 by rpki-client