Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
File:                     K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json)
Hash identifier:          2YPbQUI7R6jecytUV+6Dx7jOHBuuasfj7Stwk8FmU2Q=
Subject key identifier:   57:82:22:1E:0B:36:5E:9F:72:BD:C1:D3:BF:E0:ED:95:3F:6F:A4:30
Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22
Certificate issuer:       /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
Manifest number:          011F
Signing time:             Sat 13 Jun 2026 05:49:38 +0000
Manifest this update:     Sat 13 Jun 2026 05:49:38 +0000
Manifest next update:     Sat 20 Jun 2026 05:49:38 +0000
Files and hashes:         1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: 9UxOm+6gOg+Fn5zePRHP+BCmYDLQC/OIUXFbuuDf41A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl
                          rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522
        Validity
            Not Before: Jun 13 05:49:38 2026 GMT
            Not After : Jun 20 05:49:38 2026 GMT
        Subject: CN=6a2cef72-a89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:5d:fd:63:b9:32:24:96:24:11:0b:96:54:
                    25:11:5e:c0:3a:af:29:56:89:b8:fd:af:36:5a:53:
                    18:47:8d:02:d7:03:3d:70:ec:e4:49:61:ff:fd:c9:
                    89:e1:3e:58:14:ae:2b:c6:a4:9c:a6:31:43:02:82:
                    d6:5b:ce:91:6d:ab:1b:27:fe:34:05:ef:8f:b5:e6:
                    1a:ac:b9:c5:fc:3a:ff:8f:cb:50:d2:d3:b3:8e:39:
                    1f:ec:aa:41:4a:be:45:6f:77:c1:78:d1:3b:23:78:
                    df:1c:b6:82:0c:ed:7b:bf:da:25:12:43:72:73:45:
                    be:5e:ea:fc:36:e7:29:64:71:06:09:a5:1d:5b:63:
                    a3:cc:f0:1a:2a:c5:3e:d8:04:bf:16:a1:b0:5f:f3:
                    5d:05:35:8b:f2:5e:47:59:df:19:07:79:11:06:81:
                    eb:34:b5:9c:d5:73:50:c2:97:ca:08:a8:93:fb:2a:
                    f5:05:01:67:e4:eb:a4:95:f5:b9:dc:f2:95:bc:b9:
                    57:9d:94:33:f1:83:0c:00:4d:76:00:c8:0a:95:f1:
                    fb:b3:d6:bc:0b:bd:1d:b2:08:6a:be:cd:31:32:04:
                    fe:10:33:c3:b9:7f:b5:66:96:c3:f6:cf:03:89:fc:
                    5f:3c:77:2e:4e:02:5d:39:0f:cd:99:87:ac:89:df:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:82:22:1E:0B:36:5E:9F:72:BD:C1:D3:BF:E0:ED:95:3F:6F:A4:30
            X509v3 Authority Key Identifier:
                keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:87:cb:b8:d2:2b:87:5f:5e:11:ed:7f:cb:d2:05:41:1d:dc:
         a0:31:e3:6e:b1:78:d4:0f:e4:f8:f5:8e:c4:1b:a1:2b:07:24:
         f9:2d:00:86:76:06:71:56:a6:b1:8b:bf:8d:82:6f:29:76:28:
         70:1f:dd:99:98:f9:07:90:03:4e:c0:68:6f:bf:a9:f0:4e:0d:
         00:19:d9:d2:36:da:c7:90:73:74:d9:f2:b4:5d:33:97:41:19:
         30:f3:58:ba:d5:41:19:c7:42:4f:8f:3e:43:15:c8:b2:0d:af:
         7e:9a:35:c6:49:73:ff:75:b8:c2:98:c8:d2:89:a5:fa:fa:0c:
         f2:d2:9a:0c:a1:5c:5e:65:37:2a:f8:40:9f:71:92:ae:5b:20:
         56:49:db:6e:20:ba:e2:94:8a:d7:7f:67:fa:f9:46:7e:d1:7d:
         2f:41:e8:8e:c9:9d:d0:04:e2:94:50:fe:15:03:77:35:dc:c3:
         af:39:64:54:4b:2d:ab:1d:7e:b3:26:b1:e3:d8:b7:96:9d:a0:
         19:47:d5:be:f1:89:c3:41:e3:1c:a2:2b:37:e0:5a:59:aa:04:
         c5:f9:d1:7b:68:e8:45:4e:7b:e5:b3:6b:24:b9:ce:d1:69:af:
         14:e9:4f:f7:36:74:ce:92:ab:e9:f1:82:ab:94:0f:58:bc:51:
         8f:f1:3d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:39 2026 by rpki-client