Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
File:                     kuuO8sbiYWmIqY_VsT7io2siHEM.mft (raw, json)
Hash identifier:          rmDXh080JLI71DNZfkx9RYxoofqx4AjwhfqACKbBg3o=
Subject key identifier:   93:3F:A0:0F:D1:71:80:22:C6:A1:44:22:23:DE:2C:D9:12:C3:C2:F2
Authority key identifier: 92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43
Certificate issuer:       /CN=A91A15FB/serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
Certificate serial:       0190
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
Manifest number:          018A
Signing time:             Thu 23 Jul 2026 05:53:07 +0000
Manifest this update:     Thu 23 Jul 2026 05:53:07 +0000
Manifest next update:     Thu 30 Jul 2026 05:53:07 +0000
Files and hashes:         1: kuuO8sbiYWmIqY_VsT7io2siHEM.crl (hash: Zs8a5PNN3jx08Vjmqb3dQefBzGQP9jRnJczBXXCxAI8=)
                          2: E61BEE5C605711EF9150403FC4F9AE02.roa (hash: D+iJuzDvMhnCI8UyvsE+qUDuWTu3WwuRDsjoFGIlBpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB, serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
        Validity
            Not Before: Jul 23 05:53:07 2026 GMT
            Not After : Jul 30 05:53:07 2026 GMT
        Subject: CN=6a61ac43-cf52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:54:e5:97:2d:1d:9a:e1:88:49:31:f1:d2:9e:
                    f3:17:54:25:88:7b:60:b5:f8:b9:50:8f:89:1a:4f:
                    7c:d5:8c:dd:1f:4e:89:ee:34:c3:c9:b6:27:31:94:
                    46:8a:87:03:27:a0:87:2e:ec:10:a5:5d:1f:53:d7:
                    d7:29:c3:e1:06:0f:9d:36:d2:49:90:3d:10:ac:01:
                    49:27:bb:cf:8d:4a:54:58:7d:88:f0:f6:08:b1:53:
                    15:ab:83:2f:da:6c:b9:e1:e6:57:be:21:42:59:f0:
                    1b:3d:2c:59:78:53:e5:b1:7a:5e:f8:88:22:6d:98:
                    24:e7:5a:4f:41:bc:63:9f:a8:bc:ee:1e:ed:21:dc:
                    b3:18:85:29:bb:5f:20:e3:69:25:4c:7b:c1:2e:7e:
                    21:69:58:14:91:53:f3:db:7a:d1:c3:64:04:43:47:
                    f3:4e:14:b1:63:73:14:d1:f0:ed:bf:9d:57:31:0e:
                    cb:36:ac:2e:51:7c:ea:10:08:41:e5:02:c3:4a:81:
                    0e:c4:c3:6b:c7:ae:20:e1:55:dc:e5:54:d7:0b:f6:
                    85:88:8d:2b:e6:84:20:99:66:41:bf:7a:62:9b:a9:
                    6c:7c:e7:ff:8f:e2:ed:61:74:37:5d:67:d9:f5:13:
                    80:f1:65:fa:fb:49:e8:4d:3b:6e:4d:2c:74:9f:9d:
                    4c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3F:A0:0F:D1:71:80:22:C6:A1:44:22:23:DE:2C:D9:12:C3:C2:F2
            X509v3 Authority Key Identifier:
                keyid:92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:57:04:64:97:3f:14:81:75:3d:c0:0c:d2:94:e3:7b:75:99:
         d6:08:c0:75:61:45:49:43:e6:5c:13:2d:8b:c2:4f:c8:d5:2f:
         76:54:95:fe:10:ae:5c:b2:05:94:57:1b:33:fd:2a:1b:46:ed:
         f0:95:5b:5a:17:ff:a4:25:83:b4:d3:27:ce:5d:16:d5:5a:89:
         c6:0e:d9:2f:77:31:92:dd:42:7e:e7:eb:05:52:1e:f1:42:68:
         71:d7:39:84:32:e8:91:e1:87:32:8e:e7:10:a2:c3:a6:c3:e2:
         3b:bc:75:e2:d7:98:f4:6e:06:d1:5e:3c:d9:fd:22:a4:5e:57:
         af:c2:89:b2:0e:15:9e:06:cf:64:e5:9b:97:c9:83:00:1c:0e:
         d6:e2:40:bf:61:67:74:09:cb:f8:b6:a6:20:db:9b:7b:0c:dd:
         d5:06:bf:78:82:b5:76:2d:34:3e:5b:bc:b9:09:73:45:0e:cb:
         ad:c6:11:18:3c:0d:50:73:c8:2c:46:c7:ab:33:b3:af:9b:a5:
         30:f2:7e:11:2b:ca:8a:2c:71:35:a9:4b:42:8f:80:0b:ce:40:
         fd:ee:b5:e6:71:a6:b0:68:d5:97:fb:2a:8f:c3:1a:23:a3:20:
         4f:c9:bf:0c:a5:e8:c2:4c:f5:21:ee:8c:c6:3d:00:91:ce:4e:
         9b:d0:c5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:31 2026 by rpki-client