Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
File:                     kuuO8sbiYWmIqY_VsT7io2siHEM.mft (raw, json)
Hash identifier:          tsrSMjiKnUex4rsXHXjydrkaGLZHjSRz4M46XxxTsMM=
Subject key identifier:   D5:11:2A:19:44:1D:75:C4:F9:74:D2:8E:4E:96:B6:32:4A:A5:06:DD
Authority key identifier: 92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43
Certificate issuer:       /CN=A91A15FB/serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
Manifest number:          018B
Signing time:             Sat 25 Jul 2026 05:54:17 +0000
Manifest this update:     Sat 25 Jul 2026 05:54:17 +0000
Manifest next update:     Sat 01 Aug 2026 05:54:17 +0000
Files and hashes:         1: kuuO8sbiYWmIqY_VsT7io2siHEM.crl (hash: 6n/CskdcThaPa47vp55SOcg0cEKjWkqtQQG5fWNbr6E=)
                          2: E61BEE5C605711EF9150403FC4F9AE02.roa (hash: D+iJuzDvMhnCI8UyvsE+qUDuWTu3WwuRDsjoFGIlBpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Aug 2026 05:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB, serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
        Validity
            Not Before: Jul 25 05:54:17 2026 GMT
            Not After : Aug  1 05:54:17 2026 GMT
        Subject: CN=6a644f89-73c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e5:24:60:2a:6e:a3:e0:9f:e9:96:3d:5f:26:
                    9b:bf:19:34:47:a3:8e:36:1a:33:7c:fb:5f:f4:4c:
                    57:cc:1c:de:6c:4e:4a:7f:3f:53:b8:65:df:82:60:
                    c2:b3:81:4f:79:32:6d:5b:b4:bb:00:73:4b:2a:66:
                    ce:33:f2:7d:68:36:62:8c:31:5d:b3:cf:96:db:56:
                    96:56:09:b5:d0:d4:de:af:be:b5:66:78:79:cd:67:
                    31:97:d4:f6:b9:2b:c2:e5:40:b1:6c:71:1e:68:fa:
                    46:c8:e0:4b:a3:c3:06:43:19:90:f8:b4:95:64:69:
                    e6:1c:fb:10:67:3d:ff:2b:3d:55:c4:46:3f:f7:ac:
                    21:ac:6c:4d:2a:1c:ec:71:61:c9:b3:c4:83:3b:b2:
                    c3:c4:7d:2d:04:7a:24:3a:fd:11:54:ab:21:95:5d:
                    55:e8:0e:d6:91:77:b0:78:f3:13:9a:0f:60:64:fd:
                    18:85:ce:a6:18:f3:44:9c:85:72:d6:11:f8:9f:91:
                    99:61:a5:23:ee:f9:0b:8c:99:ef:e2:31:bb:66:1c:
                    33:f6:10:3e:7d:c2:9b:c2:8e:49:6f:65:99:b1:bb:
                    3c:4f:86:8f:50:42:fa:55:96:e1:62:ab:e1:ba:53:
                    81:20:b7:86:76:3f:72:9c:f3:7e:aa:d6:5c:9f:dc:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:11:2A:19:44:1D:75:C4:F9:74:D2:8E:4E:96:B6:32:4A:A5:06:DD
            X509v3 Authority Key Identifier:
                keyid:92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:20:c9:5f:89:b1:0c:ae:89:f7:38:f7:e6:f1:b1:8f:8f:c3:
         8e:ed:cd:3b:59:16:b8:c5:06:20:ed:21:2b:50:8d:ed:67:e0:
         a5:e9:5d:f2:3a:f1:49:01:98:f5:b4:db:ac:15:77:6a:e5:67:
         35:c9:05:f0:06:27:34:05:a0:d6:90:02:f7:57:d4:51:ad:aa:
         b8:d5:30:33:fb:e5:9e:db:5f:7d:ab:8d:00:ca:7e:e7:ac:df:
         cd:5e:b7:be:96:a2:77:ca:38:cc:88:25:6b:79:1f:92:3b:46:
         b1:e1:2e:b9:3f:46:b2:b4:42:0c:a2:39:c2:a5:cf:bc:cd:60:
         d1:5d:ab:71:21:1e:22:08:20:31:28:d6:f3:b4:6a:bc:b6:4c:
         1e:16:f9:f0:1a:43:36:34:4c:9a:02:9d:3a:db:9a:ed:d6:91:
         3b:1e:b8:fd:1d:b7:8b:3c:c2:a8:6c:38:ca:86:9e:a8:51:d6:
         0b:b6:0e:83:7d:27:08:5e:19:24:eb:89:09:92:76:5d:07:41:
         de:22:2f:6c:57:4c:08:d9:a0:f0:a8:20:97:e9:71:e0:7e:d3:
         e0:1b:f6:8c:86:ea:d6:db:a8:39:56:59:3b:4d:7a:fd:be:5b:
         84:9e:a6:63:9f:50:93:78:85:7d:e0:48:2f:30:35:9e:6f:2d:
         74:1d:da:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:36:08 2026 by rpki-client