Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
File:                     K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json)
Hash identifier:          KDHLBUuyfIz5d8GkDESwfRKRIjD027VykdAx25RdLpM=
Subject key identifier:   37:D4:59:61:45:AF:26:C5:DA:04:46:C0:C4:F1:01:45:F9:2A:BB:18
Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22
Certificate issuer:       /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
Manifest number:          0154
Signing time:             Fri 25 Sep 2026 05:17:49 +0000
Manifest this update:     Fri 25 Sep 2026 05:17:48 +0000
Manifest next update:     Fri 02 Oct 2026 05:17:48 +0000
Files and hashes:         1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: 0uUU//s8IbqE2zIxFhNNnHzeeIUUmnVbNXr4s41u9ZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl
                          rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522
        Validity
            Not Before: Sep 25 05:17:48 2026 GMT
            Not After : Oct  2 05:17:48 2026 GMT
        Subject: CN=6ab603fc-8f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fc:e9:db:41:bf:90:49:b4:95:17:d6:f8:b5:
                    6d:b6:02:48:ee:eb:d1:14:8e:77:1b:ec:8b:e3:3d:
                    1d:d1:6f:f3:5f:eb:d4:4b:f6:4b:c0:f6:26:a6:3a:
                    87:82:bb:ea:85:e9:1b:23:43:f7:8b:1d:fd:59:9a:
                    1e:9f:5a:ff:1c:dc:5a:c6:97:ce:c3:7c:e3:a0:c1:
                    0b:4f:26:24:84:69:39:ef:7a:80:cc:1d:b1:32:6a:
                    df:a8:35:78:43:b4:53:5b:3d:e7:dd:64:d7:f3:9e:
                    05:f2:f2:70:b9:71:37:0a:a7:58:59:6c:75:3d:68:
                    c5:1e:e2:63:2b:22:33:44:82:d7:54:9f:f9:40:6e:
                    25:f4:7e:7d:f8:92:d0:a8:cc:37:e4:17:4e:4c:e5:
                    f3:c9:b3:4c:ec:a5:74:9f:b6:69:86:d3:a6:77:d2:
                    12:f0:eb:ac:69:03:4f:04:eb:93:03:52:78:1d:6b:
                    f8:2a:38:b0:8e:1b:d2:08:14:17:df:38:7e:a7:ad:
                    38:de:bd:08:b1:a4:c3:61:7e:a7:c0:50:9c:7d:e7:
                    0d:27:61:1a:2d:e7:b7:7c:7b:00:e0:97:13:ea:d6:
                    e6:7c:49:e8:5f:23:5e:b2:34:b5:4a:74:0a:86:04:
                    0b:cf:00:2e:09:93:b1:65:9b:f6:f5:e3:99:5c:96:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D4:59:61:45:AF:26:C5:DA:04:46:C0:C4:F1:01:45:F9:2A:BB:18
            X509v3 Authority Key Identifier:
                keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:14:15:59:26:86:45:35:88:a4:91:3e:e9:9e:b1:b1:f0:3c:
         0c:ea:2d:82:f2:7a:3b:e9:73:9c:c2:45:32:9e:7e:aa:29:93:
         b0:d7:a9:87:9c:f9:d7:90:02:bc:3c:7a:bf:96:83:51:18:6e:
         81:91:68:af:99:d5:2c:73:41:ca:69:59:40:db:fd:72:30:da:
         1e:4c:2d:37:41:2c:9c:cf:4e:a2:f6:28:36:08:9b:9e:eb:d9:
         1a:8b:ea:d7:f1:81:32:e9:c0:05:e1:60:c4:5f:5c:62:b0:09:
         9a:59:a9:c5:48:b9:03:b1:c3:74:31:9c:c4:8b:5c:91:c4:c1:
         8a:a0:e0:f2:63:1d:53:c2:fe:8b:06:b3:d5:8e:a9:41:85:f5:
         d3:fd:80:6f:ad:74:da:04:63:83:19:42:d6:ac:51:ed:6d:95:
         bc:26:84:d7:bc:cc:1c:b2:80:66:bb:22:a3:bd:c4:53:a8:6e:
         4b:00:d1:ae:01:df:62:8e:e7:df:26:b6:e8:86:bc:b1:11:9a:
         a3:e5:1c:03:8e:0d:80:42:c0:82:4f:85:3c:ea:d7:92:15:1d:
         2f:3a:60:6f:fd:ce:6c:82:bd:6a:98:e9:50:dd:72:a9:ba:9d:
         53:0e:cd:5e:b8:17:4d:2a:7d:5f:fc:00:cf:d9:6f:2d:e1:a3:
         34:ce:de:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY2RTMxMTAvBgNVBAUTKDJCRjBBRTY3OTBEMkYwMUREMURCNjczODMxMzJEQzQw
M0I2NzQ1MjIwHhcNMjYwOTI1MDUxNzQ4WhcNMjYxMDAyMDUxNzQ4WjAYMRYwFAYD
VQQDEw02YWI2MDNmYy04Zjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7vzp20G/kEm0lRfW+LVttgJI7uvRFI53G+yL4z0d0W/zX+vUS/ZLwPYmpjqH
grvqhekbI0P3ix39WZoen1r/HNxaxpfOw3zjoMELTyYkhGk573qAzB2xMmrfqDV4
Q7RTWz3n3WTX854F8vJwuXE3CqdYWWx1PWjFHuJjKyIzRILXVJ/5QG4l9H59+JLQ
qMw35BdOTOXzybNM7KV0n7ZphtOmd9IS8OusaQNPBOuTA1J4HWv4KjiwjhvSCBQX
3zh+p6043r0IsaTDYX6nwFCcfecNJ2EaLee3fHsA4JcT6tbmfEnoXyNesjS1SnQK
hgQLzwAuCZOxZZv29eOZXJZ24wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfUWWFF
rybF2gRGwMTxAUX5KrsYMB8GA1UdIwQYMBaAFCvwrmeQ0vAd0dtnODEy3EA7Z0Ui
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjZFMy9GMkZCODI1MEI1
REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9LX0N1WjVEUzhCM1IyMmM0TVRMY1FEdG5S
U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tfQ3VaNURTOEIzUjIyYzRNVExjUUR0blJTSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjZFMy9GMkZCODI1MEI1REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9LX0N1WjVEUzhC
M1IyMmM0TVRMY1FEdG5SU0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWhQVWSaGRTWIpJE+6Z6xsfA8DOotgvJ6O+lznMJFMp5+qimTsNeph5z515AC
vDx6v5aDURhugZFor5nVLHNBymlZQNv9cjDaHkwtN0EsnM9OovYoNgibnuvZGovq
1/GBMunABeFgxF9cYrAJmlmpxUi5A7HDdDGcxItckcTBiqDg8mMdU8L+iwaz1Y6p
QYX10/2Ab6102gRjgxlC1qxR7W2VvCaE17zMHLKAZrsio73EU6huSwDRrgHfYo7n
3ya26Ia8sRGao+UcA44NgELAgk+FPOrXkhUdLzpgb/3ObIK9apjpUN1yqbqdUw7N
XrgXTSp9X/wAz9lvLeGjNM7eRw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:01:05 2026 by rpki-client