Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
File:                     uRokzwRxERfIw7omSjM5Xad_kbQ.mft (raw, json)
Hash identifier:          +ZCJxTG1ZC3wz4AMuDDFF+37ZVC5II4w3s8LeuW5+44=
Subject key identifier:   E2:AC:2B:86:AF:A3:83:C7:96:58:72:DA:D1:9A:6E:EC:F4:4F:65:C3
Authority key identifier: B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4
Certificate issuer:       /CN=A9133BB0/serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
Manifest number:          015A
Signing time:             Sat 13 Jun 2026 04:57:35 +0000
Manifest this update:     Sat 13 Jun 2026 04:57:34 +0000
Manifest next update:     Sat 20 Jun 2026 04:57:34 +0000
Files and hashes:         1: uRokzwRxERfIw7omSjM5Xad_kbQ.crl (hash: gRNwwVzroKfJpnISmAfVihL4kZ1WORFP0vANFMW8xVo=)
                          2: 27995372566911EF9D53B517C4F9AE02.roa (hash: DeSR6K4bPK/5yIQimeD5bS9czMTEXaccQNS0PK5i+zY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl
                          rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133BB0, serialNumber=B91A24CF04711117C8C3BA264A33395DA77F91B4
        Validity
            Not Before: Jun 13 04:57:34 2026 GMT
            Not After : Jun 20 04:57:34 2026 GMT
        Subject: CN=6a2ce33f-8a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:45:44:5d:6b:30:05:24:6e:e8:15:75:ae:
                    b2:3f:f8:9c:58:6a:e6:87:d8:1f:bc:49:53:04:7e:
                    de:dd:1b:c0:d3:4c:99:7e:3d:f6:15:46:ce:db:69:
                    4d:bc:b2:19:01:2a:f5:95:45:62:ec:aa:41:1e:23:
                    a5:6d:92:b6:67:9d:77:5d:9f:b5:79:1b:38:8f:c8:
                    e1:98:ce:ab:89:6d:05:91:56:49:af:ff:f1:f0:63:
                    23:05:0c:28:41:8d:15:9b:a5:7c:dc:ed:85:f8:06:
                    5a:8e:e4:2c:55:0b:36:9b:4a:6f:a5:e4:1a:dd:11:
                    0f:f1:98:72:c7:83:c0:54:7f:13:a1:19:45:e7:9c:
                    49:f1:02:73:41:2e:85:00:59:cc:68:0c:8d:42:7b:
                    fc:c7:fa:ce:6d:2f:50:58:0b:8b:4e:fd:c9:41:c1:
                    00:3e:0d:6f:ca:37:7c:e0:b9:2e:66:ae:69:d9:88:
                    1a:d8:aa:cd:53:0b:e1:32:8a:42:19:7a:ab:e3:ea:
                    3f:94:66:9a:2c:28:b4:d2:fb:68:4f:8c:92:0a:df:
                    bf:b6:de:a7:31:69:fd:c4:63:90:74:dd:87:e7:b4:
                    79:d1:7c:c1:49:b4:e1:53:ed:18:99:e6:0e:0d:a2:
                    2f:69:ee:1b:27:3d:e9:49:46:d7:72:dd:99:09:ad:
                    97:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AC:2B:86:AF:A3:83:C7:96:58:72:DA:D1:9A:6E:EC:F4:4F:65:C3
            X509v3 Authority Key Identifier:
                keyid:B9:1A:24:CF:04:71:11:17:C8:C3:BA:26:4A:33:39:5D:A7:7F:91:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uRokzwRxERfIw7omSjM5Xad_kbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/B865B37E566811EF8E6A775DC4F9AE02/uRokzwRxERfIw7omSjM5Xad_kbQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b5:c1:d6:f2:29:56:40:a6:cc:fb:fd:57:d2:bb:4a:28:39:
         0d:34:22:31:d7:4c:ac:49:b5:01:63:8e:0e:99:58:76:35:c2:
         fa:07:84:ab:f2:9e:57:93:be:6e:7f:09:14:e4:1c:ad:fb:b8:
         7d:43:6e:e1:01:39:ca:70:55:32:c1:1f:5e:de:48:ef:ed:49:
         bc:1a:ec:1f:21:92:01:63:0f:9f:20:1a:46:51:d0:2d:a9:d3:
         aa:4b:06:5d:cb:b5:97:12:ed:42:bf:17:3b:15:2c:a5:62:1a:
         90:15:8a:ae:f8:46:02:a9:77:4e:66:c1:70:1b:36:dd:f5:85:
         a4:2f:c8:49:81:ad:a6:1f:88:05:ac:3d:00:f4:b2:4d:63:38:
         ad:41:0d:2a:f9:78:d1:81:45:30:ee:79:5c:48:1b:a4:55:3c:
         e5:c9:b2:ff:26:9d:f6:ce:db:ea:67:93:4c:f9:10:9e:1c:df:
         33:2a:15:1e:e6:62:3c:44:78:b0:57:1a:23:5b:da:fe:95:15:
         83:02:78:d9:91:5e:14:39:10:a3:3c:a8:f4:e5:10:59:f5:1a:
         e7:4b:e4:d0:1e:12:7f:23:6d:ab:b7:c8:6f:b1:c7:f7:00:ff:
         5a:e6:40:85:9d:17:e6:bf:fb:cf:74:02:fc:8d:01:6f:59:07:
         ec:a2:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:19:44 2026 by rpki-client