Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
File:                     cuiGCytHM2W_JhQg0GtYqATClrI.mft (raw, json)
Hash identifier:          WC1iAACLXoWXgG0qq164PdSXld50trHBVPk0MrAiWh8=
Subject key identifier:   7C:E7:C4:E6:46:07:72:98:14:56:23:89:23:82:35:0B:BF:F5:ED:91
Authority key identifier: 72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2
Certificate issuer:       /CN=A916AC30/serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
Manifest number:          012D
Signing time:             Fri 17 Apr 2026 05:30:46 +0000
Manifest this update:     Fri 17 Apr 2026 05:30:46 +0000
Manifest next update:     Fri 24 Apr 2026 05:30:46 +0000
Files and hashes:         1: cuiGCytHM2W_JhQg0GtYqATClrI.crl (hash: cw0eAM5Hkxo0RWpgR9G48XIgY6xNwitb4inej4cMjOo=)
                          2: 8CBE22F8D33911EF9F576474C4F9AE02.roa (hash: 1LHfqTOaLKQVkCd0oczoYrc20lDMyV5N0+iERGH3Aeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl
                          rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC30, serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
        Validity
            Not Before: Apr 17 05:30:46 2026 GMT
            Not After : Apr 24 05:30:46 2026 GMT
        Subject: CN=69e1c586-bda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:3e:b2:ce:57:e0:1b:93:6f:36:29:a8:3d:
                    de:b2:5e:98:70:de:e9:76:1d:04:d9:76:1c:42:94:
                    d4:8d:23:01:e4:05:2d:1b:da:a5:0d:75:16:31:21:
                    f5:d2:15:2a:ac:37:96:0b:6f:36:2b:e3:84:86:49:
                    fb:5c:a5:38:6f:3b:c3:b6:a9:f6:f7:f3:0e:07:69:
                    a9:4a:43:f0:7c:51:7b:ad:da:d5:fd:6d:f9:fc:6f:
                    45:6f:35:dc:10:a4:a1:c3:a4:43:89:67:01:f1:8a:
                    97:90:a2:ae:42:8a:b8:af:95:3b:11:ed:86:f4:cf:
                    6b:28:44:22:90:9b:9e:4a:30:e2:65:f7:9c:87:16:
                    fa:79:3a:81:79:39:38:8f:9b:ac:de:07:51:07:ad:
                    bc:91:7c:fe:d5:c5:7a:19:8e:a8:70:d2:2d:31:17:
                    90:5d:5a:ac:08:12:c3:0c:10:05:e5:60:98:32:50:
                    78:b6:a6:cd:09:a6:92:9f:e6:b8:e6:c0:cd:b6:6f:
                    f6:c7:1a:84:11:9c:bf:c9:f7:68:6b:c3:28:e3:3b:
                    dc:e8:52:68:20:f7:e5:3f:62:f8:a1:68:7a:1d:6d:
                    8c:9b:74:71:c3:09:6c:f7:d9:00:5d:73:fa:85:50:
                    cd:5b:b6:a0:ff:22:fa:ee:f9:46:d2:ea:c6:6d:50:
                    ab:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E7:C4:E6:46:07:72:98:14:56:23:89:23:82:35:0B:BF:F5:ED:91
            X509v3 Authority Key Identifier:
                keyid:72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2f:59:97:08:b2:c5:2a:02:2f:4c:c5:f2:3b:af:b2:00:0b:
         e7:a9:82:6a:70:b4:2f:d2:dd:c0:08:e6:bd:3a:ff:21:ce:b8:
         d2:83:73:c2:0d:ee:5d:e9:4f:70:a7:08:44:bf:7b:7a:4a:b1:
         5e:ca:8f:6a:26:af:ec:e5:46:46:61:cf:6d:f0:69:e1:f8:a1:
         c7:e1:16:99:0d:60:82:98:88:a6:86:5b:52:a1:d6:db:b0:d7:
         a8:40:8d:1b:a2:e8:70:51:25:bb:2a:4a:4d:aa:90:35:ba:35:
         ce:0a:e5:2f:bd:84:93:d1:df:4c:57:8f:31:04:7e:29:c4:25:
         f9:c4:8a:3f:22:b2:c8:52:0c:7b:37:06:14:7e:2b:d7:a6:f9:
         aa:5f:c3:05:c0:f7:99:ad:5b:1e:e4:db:b4:1e:37:44:97:47:
         17:94:f2:88:21:6b:2b:c9:6a:d3:fa:f5:95:f2:2f:ac:9c:c8:
         47:40:d3:7d:27:74:20:66:cb:3d:ae:a9:f5:a6:ca:d4:61:7f:
         97:cc:dd:58:42:c2:ed:4b:0d:d5:f5:9e:e3:49:fc:05:e2:99:
         91:85:27:31:8b:08:c8:02:11:88:6e:4b:55:ae:22:ff:53:77:
         5b:8d:0d:bc:ed:0c:7c:a9:81:a3:d4:4e:5b:fd:92:02:3e:67:
         b3:e5:a1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:39:30 2026 by rpki-client