Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
File:                     cuiGCytHM2W_JhQg0GtYqATClrI.mft (raw, json)
Hash identifier:          8S7c/pcXA8pd5TeNiXGzyFdGZ9KsceQNPz+OU91/bj8=
Subject key identifier:   13:F2:03:C1:5E:0C:32:DF:84:0B:0E:F7:51:AA:80:A6:C9:9B:06:87
Authority key identifier: 72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2
Certificate issuer:       /CN=A916AC30/serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
Manifest number:          0145
Signing time:             Fri 05 Jun 2026 05:50:21 +0000
Manifest this update:     Fri 05 Jun 2026 05:50:21 +0000
Manifest next update:     Fri 12 Jun 2026 05:50:21 +0000
Files and hashes:         1: cuiGCytHM2W_JhQg0GtYqATClrI.crl (hash: 9Qy2bcx/lnYGRXccTgQjMm0J39GIbytUtcnCDt0Khb8=)
                          2: 8CBE22F8D33911EF9F576474C4F9AE02.roa (hash: 1LHfqTOaLKQVkCd0oczoYrc20lDMyV5N0+iERGH3Aeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl
                          rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 05:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC30, serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
        Validity
            Not Before: Jun  5 05:50:21 2026 GMT
            Not After : Jun 12 05:50:21 2026 GMT
        Subject: CN=6a22639d-1d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:31:8b:58:cf:ca:e7:f2:57:a7:5a:e5:4c:20:
                    aa:c2:b8:0e:e2:07:e9:f4:34:ac:da:8a:8a:8f:aa:
                    b5:77:4a:b1:fd:4d:99:e3:6a:1b:50:ef:4b:9c:c2:
                    74:9c:b0:a4:65:dd:b0:dd:2e:b2:ed:e8:0c:12:d7:
                    20:35:c9:11:dc:02:10:b9:18:9c:42:38:dc:a6:6c:
                    81:01:6c:3e:bb:dc:9c:5c:4f:e6:34:8d:c8:50:2d:
                    77:2b:a0:e5:d1:84:7e:20:e4:8c:83:5e:b3:bd:59:
                    44:6d:2c:55:f6:5c:0c:b5:d9:a0:2e:dc:b7:52:1a:
                    de:f5:37:49:5a:d5:fe:e7:77:3b:fb:a1:a7:8a:43:
                    c9:83:18:40:ca:e3:51:8c:10:30:d2:2e:06:82:7f:
                    fc:b5:30:5a:4d:ec:22:fd:c0:ca:a2:e6:70:61:bc:
                    f5:c5:18:c3:c8:20:bf:74:74:2c:d5:3b:d1:b1:bf:
                    85:e3:0b:e4:66:d2:96:10:cb:c4:87:7e:e5:6d:c1:
                    c4:cb:7e:ee:16:84:1f:e7:29:87:b8:eb:8c:5f:f1:
                    a4:84:56:21:26:7d:53:6b:b5:59:5f:5a:29:49:98:
                    25:5e:39:fc:52:12:e9:c5:61:c2:59:35:7c:2c:84:
                    2d:6f:6f:55:48:d0:93:41:eb:2a:ee:21:aa:9d:12:
                    7c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F2:03:C1:5E:0C:32:DF:84:0B:0E:F7:51:AA:80:A6:C9:9B:06:87
            X509v3 Authority Key Identifier:
                keyid:72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2b:26:f9:27:b5:4f:af:c5:6c:7b:a9:df:43:9a:10:45:92:
         18:b5:16:68:70:6a:37:60:44:8e:9d:cf:91:e1:d1:6f:a9:e8:
         0c:aa:9f:04:7f:a2:fc:45:bc:ac:30:29:c9:3b:ba:d5:55:c2:
         45:a0:d7:74:e9:88:80:1c:a9:71:f1:e4:60:d9:ea:dd:98:c9:
         65:b3:be:74:ba:b5:25:b8:64:57:bd:3f:ce:4b:b5:4d:66:4d:
         45:39:23:b2:ca:01:34:f6:16:75:3c:48:63:9c:29:8d:51:d4:
         a2:69:71:21:13:6a:6f:81:ec:bc:c9:07:c6:91:a6:2b:f2:f4:
         c9:fe:6b:bb:ba:68:f7:4d:52:88:b1:e4:ef:a7:48:33:94:0c:
         12:01:0a:18:41:57:a3:cf:4f:fa:0c:1d:ea:fb:9f:94:17:eb:
         50:8f:22:60:db:18:fb:56:ba:bd:eb:ae:ec:53:d1:a7:ab:28:
         96:51:88:43:26:29:3e:08:6f:8b:aa:82:86:88:12:e6:ca:d4:
         fe:2e:d4:31:35:a5:f7:b3:a5:79:86:83:cc:0c:06:09:ed:f1:
         7e:be:6d:4b:eb:e1:b7:4d:52:05:9d:4d:72:2c:84:3c:2e:99:
         83:4f:56:31:f0:41:27:ca:71:75:ae:5c:79:74:ca:45:cd:21:
         7e:00:7a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:06:59 2026 by rpki-client