Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft
File:                     kuYzl488XC0IYKzbDh3VEhAOie8.mft (raw, json)
Hash identifier:          WhINgAJ0y++M+AgA1tjNNbxrTZwmxjmw03RuXbfgh7U=
Subject key identifier:   5A:F3:29:3F:AA:04:0B:1A:89:58:30:F3:0E:55:18:3C:B7:AD:C6:CF
Authority key identifier: 92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF
Certificate issuer:       /CN=A91A15FB/serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft
Manifest number:          0174
Signing time:             Thu 11 Jun 2026 06:57:43 +0000
Manifest this update:     Thu 11 Jun 2026 06:57:43 +0000
Manifest next update:     Thu 18 Jun 2026 06:57:43 +0000
Files and hashes:         1: kuYzl488XC0IYKzbDh3VEhAOie8.crl (hash: +v90zD1Fk/qwu4dqGhKMhRw3Ssn3cqtOf3j8nTmTqmk=)
                          2: F67388B8C8EE11F0B296D571C4F9AE02.roa (hash: Ln4i6mHL5UZIq22mGQVLVNPqUJhOiI44Lt1j7dBvqNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 06:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB, serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF
        Validity
            Not Before: Jun 11 06:57:43 2026 GMT
            Not After : Jun 18 06:57:43 2026 GMT
        Subject: CN=6a2a5c67-b5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:47:59:9a:23:bf:77:b0:62:81:fd:fe:47:
                    63:38:9c:43:74:a3:29:cb:de:dd:d7:fb:9e:15:bd:
                    5c:02:31:fe:e6:12:9d:0d:bf:88:1a:4a:e8:98:a1:
                    bc:4e:80:0f:d3:3e:a1:7a:30:3a:9c:e5:07:64:8a:
                    7c:7d:a1:48:a1:16:1c:7c:ee:10:a6:c7:cc:7a:80:
                    8c:30:e5:a3:a6:ff:e0:39:02:6c:ff:e6:ef:d7:3f:
                    e9:f0:7d:b5:9c:17:d4:33:a0:72:bc:b4:e6:73:b4:
                    7e:3e:81:7f:84:3f:ea:56:f3:57:37:59:69:04:a3:
                    29:51:b3:d8:92:07:16:f4:03:4b:9c:1a:cc:68:1a:
                    41:40:3d:9c:f2:8e:70:be:66:2d:83:b2:51:02:1e:
                    91:84:37:1a:85:f6:09:24:3b:3c:43:1b:c6:23:fd:
                    da:d9:02:7c:94:e2:3e:ed:24:83:3e:f5:ac:31:83:
                    e9:eb:a3:e9:f6:64:21:f2:46:7e:6b:05:b6:9c:3a:
                    fb:fe:5e:d1:96:a5:fc:c6:6d:b9:35:ed:bb:ab:94:
                    fc:96:5a:a9:5b:31:c4:ff:16:b6:0e:2d:85:74:f9:
                    77:28:eb:d6:32:3e:9e:14:b4:71:d4:48:e4:f8:9e:
                    4f:75:24:25:58:2d:74:bc:57:3a:8e:19:63:bb:8d:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F3:29:3F:AA:04:0B:1A:89:58:30:F3:0E:55:18:3C:B7:AD:C6:CF
            X509v3 Authority Key Identifier:
                keyid:92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a8:7f:d3:18:64:16:01:05:f4:e5:fe:33:db:11:13:ad:1a:
         a2:23:e0:a6:e3:e8:e8:a4:b6:89:63:b1:55:06:51:a6:ec:88:
         a2:4e:44:7e:2b:b6:8e:75:03:96:54:44:30:84:bd:b4:39:4e:
         9e:82:61:0d:c4:cc:ba:fa:05:c4:ae:6c:1f:fd:7a:46:3e:dd:
         72:40:74:15:aa:6b:91:85:8c:91:6e:1c:05:91:35:51:6d:f9:
         12:9a:10:ec:fd:7f:e1:39:b1:7d:e1:56:8f:a5:fc:b7:71:ec:
         1d:48:4f:d8:d4:37:74:03:9c:7a:60:3e:2c:a2:62:1a:a4:9e:
         ec:7f:f9:fe:03:a3:cb:25:4b:26:9a:be:63:0a:66:f3:6d:72:
         a6:12:04:7c:af:aa:70:b6:fd:2e:5b:4c:85:1c:13:3b:6a:76:
         b5:f4:ca:00:05:d4:6b:43:ef:2f:b5:d5:5e:6f:0d:e1:28:88:
         b2:ae:c3:58:ff:1e:46:de:df:98:e4:13:e3:18:2f:5c:f8:02:
         c7:f0:42:85:7a:9e:94:ce:27:cb:2e:5a:63:7d:4b:0f:d9:72:
         e1:ca:d4:5f:a7:7b:6f:97:d4:cb:02:68:cc:13:f1:af:87:67:
         4b:ff:63:37:f6:cb:eb:2a:4d:5b:72:35:39:87:35:c4:9b:6a:
         4f:dd:b3:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE1RkIxMTAvBgNVBAUTKDkyRTYzMzk3OEYzQzVDMkQwODYwQUNEQjBFMURENTEy
MTAwRTg5RUYwHhcNMjYwNjExMDY1NzQzWhcNMjYwNjE4MDY1NzQzWjAYMRYwFAYD
VQQDEw02YTJhNWM2Ny1iNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAskVHWZojv3ewYoH9/kdjOJxDdKMpy97d1/ueFb1cAjH+5hKdDb+IGkromKG8
ToAP0z6hejA6nOUHZIp8faFIoRYcfO4QpsfMeoCMMOWjpv/gOQJs/+bv1z/p8H21
nBfUM6ByvLTmc7R+PoF/hD/qVvNXN1lpBKMpUbPYkgcW9ANLnBrMaBpBQD2c8o5w
vmYtg7JRAh6RhDcahfYJJDs8QxvGI/3a2QJ8lOI+7SSDPvWsMYPp66Pp9mQh8kZ+
awW2nDr7/l7RlqX8xm25Ne27q5T8llqpWzHE/xa2Di2FdPl3KOvWMj6eFLRx1Ejk
+J5PdSQlWC10vFc6jhlju41YuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrzKT+q
BAsaiVgw8w5VGDy3rcbPMB8GA1UdIwQYMBaAFJLmM5ePPFwtCGCs2w4d1RIQDonv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTVGQi9CRTg4QTcwQzJF
QzcxMUVGODIyMDgyNzNDNEY5QUUwMi9rdVl6bDQ4OFhDMElZS3piRGgzVkVoQU9p
ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2t1WXpsNDg4WEMwSVlLemJEaDNWRWhBT2llOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTVGQi9CRTg4QTcwQzJFQzcxMUVGODIyMDgyNzNDNEY5QUUwMi9rdVl6bDQ4OFhD
MElZS3piRGgzVkVoQU9pZTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbqh/0xhkFgEF9OX+M9sRE60aoiPgpuPo6KS2iWOxVQZRpuyIok5Efiu2jnUD
llREMIS9tDlOnoJhDcTMuvoFxK5sH/16Rj7dckB0FaprkYWMkW4cBZE1UW35EpoQ
7P1/4TmxfeFWj6X8t3HsHUhP2NQ3dAOcemA+LKJiGqSe7H/5/gOjyyVLJpq+Ywpm
821yphIEfK+qcLb9LltMhRwTO2p2tfTKAAXUa0PvL7XVXm8N4SiIsq7DWP8eRt7f
mOQT4xgvXPgCx/BChXqelM4nyy5aY31LD9ly4crUX6d7b5fUywJozBPxr4dnS/9j
N/bL6ypNW3I1OYc1xJtqT92zmg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 15:13:47 2026 by rpki-client