Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
File:                     UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json)
Hash identifier:          B+I4p9hfPPmzBHYz1FwUDp0r1kLc4flymBMUEPQRE24=
Subject key identifier:   83:66:0B:9F:1E:4B:5E:9C:A4:FA:2E:41:7A:A1:70:2C:19:7B:C5:2D
Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
Certificate issuer:       /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Certificate serial:       0B1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
Manifest number:          0B10
Signing time:             Fri 12 Jun 2026 19:21:45 +0000
Manifest this update:     Fri 12 Jun 2026 19:21:44 +0000
Manifest next update:     Fri 19 Jun 2026 19:21:44 +0000
Files and hashes:         1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: 1sfzvR4KgVLWsDNk7p/t6G9Aa6pIWXBdvHbXQNExVq8=)
                          2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: bP8YW/usVEPebr8yo+q/K5uFmrIVy5PiorRcfqJheHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl
                          rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2842 (0xb1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
        Validity
            Not Before: Jun 12 19:21:44 2026 GMT
            Not After : Jun 19 19:21:44 2026 GMT
        Subject: CN=6a2c5c49-0c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:e2:91:45:e8:20:a4:00:ca:07:49:ba:21:
                    cd:4e:3e:69:23:4e:97:9b:5d:09:c7:b5:36:f2:29:
                    ce:80:07:de:ee:af:94:f1:81:ff:5d:17:95:63:83:
                    a5:68:f2:c0:60:f1:74:08:65:ee:d8:ad:a1:bc:23:
                    eb:9c:de:5e:b0:12:13:86:72:16:c9:7d:dd:9d:51:
                    ae:3a:de:94:d6:19:23:fa:4f:73:dc:44:f3:3a:52:
                    f8:2b:7f:2e:b0:f6:f6:2e:27:6a:ef:f9:31:67:69:
                    0b:5a:ca:10:a9:a7:c3:8c:a2:a0:55:2b:8a:f9:42:
                    b4:48:45:1b:4f:86:c5:de:99:1b:64:99:df:0e:5d:
                    20:12:57:c6:db:75:1a:11:48:d3:f2:78:b0:9c:1f:
                    69:56:26:eb:88:fc:56:44:78:b3:28:65:c9:e1:3e:
                    4d:19:31:b8:ab:8f:62:4c:44:a3:f4:d8:75:39:0f:
                    9b:6f:18:dc:4c:cf:7e:56:3e:23:83:67:37:db:16:
                    7f:b9:07:a1:5d:0d:10:1a:5e:ea:72:e8:df:13:41:
                    9c:83:e4:c5:94:4a:e5:7b:ee:0b:34:fd:a3:e8:b2:
                    72:58:cf:7e:23:1b:43:0c:91:88:a1:b6:0d:6a:ee:
                    95:99:a1:1a:ef:63:dc:84:b8:59:0d:5d:51:e6:b9:
                    a6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:66:0B:9F:1E:4B:5E:9C:A4:FA:2E:41:7A:A1:70:2C:19:7B:C5:2D
            X509v3 Authority Key Identifier:
                keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:16:77:3b:e3:70:1e:d7:c3:35:76:67:56:a6:0e:46:e0:96:
         9e:06:42:1a:0c:22:40:4d:13:a2:6b:2f:91:18:5b:f5:63:42:
         d3:9f:e9:be:e6:d7:23:30:a6:da:0b:8c:fe:8c:bb:04:c4:99:
         2f:5c:58:ef:65:91:3b:a7:3a:f6:8c:dc:74:91:15:e9:28:0f:
         96:3d:93:74:a3:42:bd:92:d3:f4:5c:1c:d2:2f:e6:8b:f9:06:
         34:54:0c:9b:b6:ff:e6:91:ad:29:3f:05:3f:36:0d:71:a9:af:
         a8:9a:26:76:f9:48:42:b7:82:8a:2a:5a:f8:5f:37:63:28:1a:
         42:a6:3f:84:64:19:78:44:d9:3c:0e:60:45:1d:af:d4:cf:e2:
         4d:17:33:cf:e2:ae:4f:fe:20:85:59:cc:50:70:73:29:db:86:
         94:7c:d7:c3:25:4d:c3:09:42:f3:0b:1d:70:c7:17:fc:9b:31:
         b4:37:22:ed:32:ed:0a:57:29:67:15:c5:88:65:fb:6c:f4:ef:
         ee:f9:26:7d:a9:68:04:b6:83:f7:2f:96:73:dc:76:a4:8c:75:
         03:4c:5d:e6:07:70:22:11:06:f8:3c:c7:04:7f:21:ab:80:d9:
         fc:18:61:e9:f6:58:79:78:a8:06:1b:2e:49:d1:d3:db:70:ac:
         a7:fe:76:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF
QUUzRUYzQzAwHhcNMjYwNjEyMTkyMTQ0WhcNMjYwNjE5MTkyMTQ0WjAYMRYwFAYD
VQQDEw02YTJjNWM0OS0wYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtmHikUXoIKQAygdJuiHNTj5pI06Xm10Jx7U28inOgAfe7q+U8YH/XReVY4Ol
aPLAYPF0CGXu2K2hvCPrnN5esBIThnIWyX3dnVGuOt6U1hkj+k9z3ETzOlL4K38u
sPb2Lidq7/kxZ2kLWsoQqafDjKKgVSuK+UK0SEUbT4bF3pkbZJnfDl0gElfG23Ua
EUjT8niwnB9pVibriPxWRHizKGXJ4T5NGTG4q49iTESj9Nh1OQ+bbxjcTM9+Vj4j
g2c32xZ/uQehXQ0QGl7qcujfE0Gcg+TFlErle+4LNP2j6LJyWM9+IxtDDJGIobYN
au6VmaEa72PchLhZDV1R5rmmSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFINmC58e
S16cpPouQXqhcCwZe8UtMB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3
OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0
TTJIYlZadGJhNFBxNC04OEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMhZ3O+NwHtfDNXZnVqYORuCWngZCGgwiQE0TomsvkRhb9WNC05/pvubXIzCm
2guM/oy7BMSZL1xY72WRO6c69ozcdJEV6SgPlj2TdKNCvZLT9Fwc0i/mi/kGNFQM
m7b/5pGtKT8FPzYNcamvqJomdvlIQreCiipa+F83YygaQqY/hGQZeETZPA5gRR2v
1M/iTRczz+KuT/4ghVnMUHBzKduGlHzXwyVNwwlC8wsdcMcX/JsxtDci7TLtClcp
ZxXFiGX7bPTv7vkmfaloBLaD9y+Wc9x2pIx1A0xd5gdwIhEG+DzHBH8hq4DZ/Bhh
6fZYeXioBhsuSdHT23Csp/52uA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:52:02 2026 by rpki-client