Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
File:                     UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json)
Hash identifier:          T/SlCeEIjwsrkV7isdU2jljzslHeMVpkKN3kV+jd1xg=
Subject key identifier:   D7:D8:24:32:FE:14:5B:9E:E8:78:95:F3:88:68:8A:2F:71:2F:36:26
Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
Certificate issuer:       /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Certificate serial:       0999
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
Manifest number:          1AA8
Signing time:             Fri 12 Jun 2026 17:12:27 +0000
Manifest this update:     Fri 12 Jun 2026 17:12:26 +0000
Manifest next update:     Fri 19 Jun 2026 17:12:26 +0000
Files and hashes:         1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: RYUFp0/WBA4MM+SOZUJBhLGI++rjCx5fpic2fIop7EQ=)
                          2: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: TPRC+7x5lgG5CgncwF7KDW3EDTJUB3LlrULYz9MveMM=)
                          3: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: leVQ3s1GExMxigU8EEYZc0TFMeUDxFJChsNZNDW6QyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl
                          rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2457 (0x999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
        Validity
            Not Before: Jun 12 17:12:26 2026 GMT
            Not After : Jun 19 17:12:26 2026 GMT
        Subject: CN=6a2c3dfb-2c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:90:39:5c:94:bf:f9:e3:7a:7e:11:ba:2b:
                    55:59:f7:a7:9d:e2:1b:0f:14:e8:13:17:e8:4f:c2:
                    9b:83:db:ae:ce:2d:46:23:26:12:21:27:38:78:51:
                    2e:43:5f:7e:fe:cc:45:44:59:3d:7a:b3:c8:24:31:
                    a8:0e:7b:88:f3:6f:82:59:a8:7d:29:80:a9:66:49:
                    d6:77:81:77:dd:4b:61:cf:b4:7c:94:38:67:37:34:
                    e6:6a:61:39:17:b5:79:1b:7d:65:c2:39:47:d5:c2:
                    9b:70:2f:e5:20:08:b2:88:33:9e:46:20:f4:69:8f:
                    69:b0:f7:c1:82:4a:1b:37:c3:13:03:b5:a2:13:e8:
                    f0:94:1a:d3:4a:d1:a9:bb:a1:72:8f:97:e6:7f:da:
                    b4:2e:2d:9d:ea:8f:6c:4b:a2:5a:fc:2b:69:4a:7a:
                    96:a4:9b:ed:60:ce:fe:8e:81:75:f1:5b:da:57:70:
                    cc:07:77:77:a7:e9:bd:8a:4f:39:58:d2:03:25:9c:
                    70:b8:9f:d6:26:d1:e8:b1:1b:a5:0a:ea:9e:14:b2:
                    de:66:b2:d3:92:67:ae:0c:d2:17:bb:1a:31:52:58:
                    c6:67:16:5d:4b:66:3b:46:bb:8d:f0:dd:da:4e:6b:
                    19:2b:ff:a6:d0:da:80:cf:1d:80:df:c2:40:eb:ad:
                    fa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D8:24:32:FE:14:5B:9E:E8:78:95:F3:88:68:8A:2F:71:2F:36:26
            X509v3 Authority Key Identifier:
                keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b7:b6:4d:ba:b3:79:a1:93:dd:62:d0:d8:ab:3a:18:65:f4:
         22:56:73:ba:24:a7:2d:04:fc:f2:94:a4:d5:5e:85:25:33:ce:
         d7:bd:95:b0:35:1c:77:63:17:15:1b:ff:5c:37:95:51:b0:f9:
         41:71:52:65:02:f5:3f:e8:b5:d7:52:f2:c7:08:9e:5b:01:76:
         03:bf:6e:ec:db:53:50:3b:34:17:d8:a1:cb:c0:86:6d:23:19:
         74:0b:77:64:5c:1f:41:98:98:23:44:07:fa:47:c8:21:cc:84:
         94:02:a8:18:dc:8c:76:c8:a7:aa:ca:0e:d4:37:13:38:dc:85:
         96:32:ea:95:08:3c:ef:4b:e0:bb:c5:a3:1f:60:30:64:87:5c:
         46:76:9f:27:ba:d4:88:77:a5:f8:e9:88:f1:75:04:58:d0:b9:
         33:17:a2:5c:d2:e1:80:fb:92:23:a8:d6:e0:ef:de:37:25:3e:
         93:c5:1a:55:7f:b6:fc:a8:1e:6b:ec:5e:dd:a5:02:71:93:47:
         c7:f9:fa:6b:f2:c9:14:ce:88:d1:e7:0a:61:b6:32:bd:a3:0b:
         0c:cf:56:fc:69:ee:a9:2f:b1:05:f1:b7:69:da:00:81:0f:09:
         bf:86:73:77:08:cd:53:eb:fd:d0:1e:b1:95:08:c1:6e:0b:e9:
         20:5a:db:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:11 2026 by rpki-client