Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
File:                     cuiGCytHM2W_JhQg0GtYqATClrI.mft (raw, json)
Hash identifier:          9aHc6Li2nrzPB9oIW0xxpMso2fxnYy0P6zATg88u7rc=
Subject key identifier:   2B:DF:FD:7F:FC:42:2B:44:6D:D5:D3:82:4A:08:7E:30:10:C1:14:02
Authority key identifier: 72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2
Certificate issuer:       /CN=A916AC30/serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
Manifest number:          013A
Signing time:             Wed 13 May 2026 05:45:47 +0000
Manifest this update:     Wed 13 May 2026 05:45:47 +0000
Manifest next update:     Wed 20 May 2026 05:45:47 +0000
Files and hashes:         1: cuiGCytHM2W_JhQg0GtYqATClrI.crl (hash: mAeiWMcvRL3MgBxlLqpy+3eKHZ4dUpF4MDTIVkOt4KU=)
                          2: 8CBE22F8D33911EF9F576474C4F9AE02.roa (hash: 1LHfqTOaLKQVkCd0oczoYrc20lDMyV5N0+iERGH3Aeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl
                          rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC30, serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
        Validity
            Not Before: May 13 05:45:47 2026 GMT
            Not After : May 20 05:45:47 2026 GMT
        Subject: CN=6a04100b-d66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:20:f5:84:44:95:f3:c3:06:b1:83:41:5c:
                    37:f3:1d:f4:a0:4f:c8:02:c0:c7:46:2f:a1:2e:b7:
                    f5:46:42:37:39:18:43:d8:be:0a:ad:f7:f9:1c:df:
                    90:60:f7:6b:7f:b1:a0:82:75:7d:0e:a0:3f:3c:04:
                    5c:f1:f2:2d:8a:41:70:a0:2b:d6:c1:71:9a:98:8f:
                    58:8e:6e:be:41:0e:fb:39:40:47:06:a3:66:b5:24:
                    07:0c:35:fb:b5:5e:49:34:25:f8:48:ab:f7:30:82:
                    d8:3b:9d:67:52:0f:4b:fc:40:67:96:90:4f:5d:c9:
                    4d:49:f2:32:1f:27:e6:f5:99:26:dd:b4:87:e5:c6:
                    92:f0:49:aa:a0:14:08:ab:da:03:59:53:35:8d:f7:
                    bd:bf:56:24:54:22:a0:0e:70:80:3d:cc:c0:a8:26:
                    e3:37:74:9a:dc:de:f3:ed:24:81:8b:a6:3a:b4:d7:
                    e6:78:02:aa:c1:6b:50:fb:85:37:5b:ab:64:8a:12:
                    40:67:74:31:4a:b9:d1:67:12:ae:f8:1d:78:37:fe:
                    e3:e8:a3:00:ef:71:c8:ea:52:bd:d1:1b:dd:b0:33:
                    b4:13:c8:57:87:b9:b0:ec:5a:6f:7c:4a:a9:90:35:
                    c0:f2:f6:52:d7:8a:f9:b4:ea:a0:65:71:03:cb:d9:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DF:FD:7F:FC:42:2B:44:6D:D5:D3:82:4A:08:7E:30:10:C1:14:02
            X509v3 Authority Key Identifier:
                keyid:72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1e:9d:9b:a9:dc:3b:60:eb:8b:ea:2b:c2:18:f4:30:7a:94:
         22:35:cf:fb:1c:aa:7e:3b:0e:84:aa:3d:51:1f:a5:2d:67:a0:
         c9:ba:10:42:c3:08:2a:52:23:66:9f:2d:62:e8:d7:21:44:ce:
         be:55:37:2e:ae:ee:be:2b:97:90:0e:da:77:08:27:19:a4:aa:
         f1:9d:a5:95:cc:03:28:8e:de:c0:f3:81:7a:ff:d1:7b:d2:93:
         34:c7:56:fa:77:59:5b:14:49:c1:6e:bc:70:5a:58:fc:e9:a9:
         3f:0c:29:60:33:ff:12:4d:9c:ea:3f:d3:58:3e:61:84:ad:7b:
         e3:28:c6:c5:79:67:73:5d:a2:be:a5:09:7e:0f:2b:40:c9:27:
         4d:f7:55:91:3f:df:75:80:c3:8e:d8:4c:c9:46:dd:b3:02:18:
         d1:1a:3e:79:09:09:fe:65:ad:b2:bd:16:1e:c0:95:7b:1c:f0:
         f1:45:c0:0b:0d:ac:76:df:8a:78:1f:f7:54:1b:ee:7b:ac:8c:
         ee:d2:dd:0d:66:c3:4a:d6:27:92:b1:78:92:50:89:7a:81:fb:
         e4:4e:06:cd:09:f5:74:42:93:5c:4e:fd:e9:a3:8e:85:97:f5:
         f6:f9:e6:63:8a:92:49:60:0b:72:d6:67:1c:1e:4d:ff:84:85:
         f1:c1:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:58:18 2026 by rpki-client