Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
File:                     kuuO8sbiYWmIqY_VsT7io2siHEM.mft (raw, json)
Hash identifier:          SZkSW6FYs+yxWE1x07kQFqnR7//cB61KekAGIshMsa8=
Subject key identifier:   93:C3:CA:E1:37:DA:04:E2:E1:1C:93:0D:69:B0:E6:1C:A0:63:A8:0D
Authority key identifier: 92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43
Certificate issuer:       /CN=A91A15FB/serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
Manifest number:          0158
Signing time:             Fri 17 Apr 2026 04:41:49 +0000
Manifest this update:     Fri 17 Apr 2026 04:41:48 +0000
Manifest next update:     Fri 24 Apr 2026 04:41:48 +0000
Files and hashes:         1: kuuO8sbiYWmIqY_VsT7io2siHEM.crl (hash: QexyaT1a/UqSOJYGdFU2H/FcnJ6pBzMQorIl017qEdQ=)
                          2: E61BEE5C605711EF9150403FC4F9AE02.roa (hash: MWhWUJe4SeJTcc/opNmiuFWwcuEGLkaOPyxnveQv5L4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:41:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB, serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
        Validity
            Not Before: Apr 17 04:41:48 2026 GMT
            Not After : Apr 24 04:41:48 2026 GMT
        Subject: CN=69e1ba0d-d450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:51:2e:2a:ce:76:58:35:e5:eb:ae:40:c0:4a:
                    bc:48:d8:db:a5:ba:2e:3d:c6:5b:a1:3f:2f:c2:bd:
                    67:b4:ce:11:33:02:e0:8a:0e:9f:fa:6c:9f:2d:5a:
                    30:ac:dd:60:01:d3:0f:22:06:28:90:32:3a:b9:63:
                    fe:68:2f:75:0a:cf:ac:53:a2:51:f5:bb:95:da:62:
                    7c:8c:81:74:07:39:07:88:de:51:a2:e9:82:ee:28:
                    d1:cc:c9:cb:5b:07:3b:4b:c0:e1:95:79:43:32:11:
                    17:1c:a1:e2:ab:a3:23:73:50:12:dd:82:b5:0c:c7:
                    c8:e1:d7:b3:ec:a2:40:9e:ca:f5:0a:c6:de:7e:0d:
                    2f:f1:ad:b7:63:94:52:f7:00:18:05:4b:22:9c:bc:
                    b4:b1:99:50:09:f4:f7:9e:04:d8:af:bb:4e:44:c4:
                    03:d8:19:92:24:49:54:a0:ad:e7:09:ef:5f:e1:ff:
                    65:04:0d:4f:f8:70:2e:c3:9b:e9:b3:91:f1:13:14:
                    da:ec:e2:a1:5b:d6:29:c2:51:d8:5e:14:02:2e:af:
                    1e:00:b6:b8:cf:66:17:57:67:32:97:df:b7:1e:59:
                    02:5a:f7:54:99:12:49:d9:d0:0b:21:7c:85:37:de:
                    c4:c4:b9:aa:d7:2f:9e:b4:10:5f:d0:ce:44:87:41:
                    2e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C3:CA:E1:37:DA:04:E2:E1:1C:93:0D:69:B0:E6:1C:A0:63:A8:0D
            X509v3 Authority Key Identifier:
                keyid:92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:24:76:2c:a2:29:73:dc:d4:77:eb:39:f4:65:0b:5c:2a:42:
         ab:81:23:6f:8f:12:d6:83:87:aa:8d:97:cf:81:fa:6d:44:3a:
         54:b4:b6:27:3e:13:be:bf:a9:fe:01:13:a4:f0:4e:8f:df:83:
         9c:cb:17:49:10:54:d6:66:0b:f4:43:2d:e0:f1:7a:89:27:81:
         8c:a7:c2:e3:cc:4f:66:54:f6:93:06:e4:cc:72:6b:ce:ab:62:
         a0:6e:90:0d:25:97:49:7a:bf:1b:fe:ca:51:27:04:53:e5:1e:
         08:d0:85:f5:5e:8b:09:72:e1:de:19:cd:31:63:f0:2f:0c:3c:
         3f:38:f6:2f:bb:06:7d:b8:54:9f:e9:cb:9a:1a:4c:4c:78:82:
         54:b7:63:2c:46:2e:34:0f:2e:3e:0b:c2:8a:02:ca:e9:b7:3d:
         d1:6e:8e:4f:5a:3c:86:80:a3:31:92:d1:64:3a:c4:04:06:1c:
         d6:f3:59:fa:f3:53:22:39:3a:81:b1:76:24:08:ef:55:92:07:
         5f:6b:e0:64:36:00:93:93:5e:18:65:5d:94:65:57:15:eb:76:
         ff:e5:65:ab:08:9d:98:a3:18:ca:aa:2b:71:bf:0f:6c:44:3e:
         d5:0e:b5:f0:25:c8:fe:f7:0e:d8:6d:8c:88:86:ae:9d:e5:1a:
         fd:f4:1a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:39:58 2026 by rpki-client