Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
File:                     K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json)
Hash identifier:          ZMl2MLbIf9FwVnIBIWyv2ymV9PiNc5ObdkBEy2ZxMPQ=
Subject key identifier:   98:5F:4C:29:CF:31:16:63:FF:19:C1:EC:98:B8:17:C6:40:AB:29:96
Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22
Certificate issuer:       /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
Manifest number:          010F
Signing time:             Mon 11 May 2026 06:07:29 +0000
Manifest this update:     Mon 11 May 2026 06:07:29 +0000
Manifest next update:     Mon 18 May 2026 06:07:29 +0000
Files and hashes:         1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: hmwnwNJpTNKDq7YOn5V2lLFNpjED7gdlgMIiJxGchZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl
                          rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522
        Validity
            Not Before: May 11 06:07:29 2026 GMT
            Not After : May 18 06:07:29 2026 GMT
        Subject: CN=6a017221-e8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c2:88:83:dc:6e:85:a4:bc:1f:c1:99:d3:84:
                    15:15:d3:d2:d5:ae:f8:d5:e3:5f:0f:9b:8e:1d:47:
                    ac:b8:73:19:8b:5e:53:56:8c:d2:83:b6:1b:5d:2b:
                    28:69:50:67:1d:f7:ac:8f:9b:89:81:14:24:0c:47:
                    c5:93:18:94:35:33:14:9f:a4:ad:b6:a9:da:30:3b:
                    74:54:ef:c8:c8:da:57:ca:49:a7:cc:44:e4:8d:72:
                    cf:ba:7c:c5:a3:2f:af:51:56:ad:7e:1b:d8:b8:6d:
                    7f:14:b6:b6:28:72:ce:5b:2d:87:e8:e6:f8:d2:ef:
                    41:d4:72:0c:0f:e1:0b:e4:53:c6:52:b6:a5:99:b8:
                    ec:a8:8a:e3:b2:da:31:2a:d9:d4:51:9e:21:a8:db:
                    92:99:2b:e7:23:4f:eb:fa:8f:a7:83:b9:c1:35:bf:
                    18:70:86:61:a9:46:56:89:f1:7e:df:61:69:0f:e1:
                    6d:d7:3a:e3:17:8e:e4:45:89:10:5e:7e:38:27:ce:
                    97:d0:a3:4f:47:02:da:b0:ca:e2:ea:78:92:05:36:
                    7e:12:62:8d:19:e7:a2:c1:9d:50:5a:9e:19:6e:a6:
                    c8:60:5e:1f:06:7f:2a:0c:b2:8a:31:57:1e:ed:ee:
                    f1:6e:f2:ea:06:3e:8f:de:e5:38:23:0d:a9:c3:71:
                    04:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5F:4C:29:CF:31:16:63:FF:19:C1:EC:98:B8:17:C6:40:AB:29:96
            X509v3 Authority Key Identifier:
                keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7d:b9:e9:f9:84:9b:d2:12:a9:42:03:96:17:d7:d2:18:8c:
         8a:d4:60:1b:96:62:51:63:45:cc:f0:53:a1:42:0d:5b:7d:37:
         c1:bc:67:22:75:d0:20:50:d0:81:9f:25:cc:e9:e8:67:2b:25:
         44:1a:19:44:67:f0:1c:74:0f:6e:a7:8b:12:1b:55:fd:d5:ad:
         c8:8f:af:da:99:f7:20:ae:52:47:bf:33:39:f1:b1:73:1e:b4:
         7a:30:cd:ea:2c:15:58:24:cc:d6:86:f1:b3:e3:d3:19:74:af:
         45:ca:ac:9b:0e:b8:64:98:cc:b1:76:11:ef:90:ec:c2:be:5b:
         2a:2b:16:7f:f0:fa:3b:9f:c0:47:87:e0:8d:74:5c:35:83:ff:
         aa:46:fa:25:35:6b:4a:29:e5:e3:af:bf:5e:95:23:59:ac:50:
         91:b2:fe:e6:88:22:5a:9f:04:7e:fd:2e:f8:76:a8:49:66:5e:
         95:ff:3c:37:17:b8:17:66:ed:d1:1c:96:bd:2c:df:23:b2:f5:
         62:f8:71:a3:4f:5c:8e:b6:27:28:eb:2b:1d:02:5c:30:b1:4d:
         f7:d9:8a:de:c0:87:6b:47:dc:a7:b3:c9:dd:2d:70:07:a2:29:
         40:23:cf:84:84:f4:90:56:55:d3:f7:d8:54:cd:f6:e9:0e:be:
         f8:6a:41:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:24 2026 by rpki-client