Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
File:                     _UmlE0ai96yBGwCtYuvvDpSiobI.mft (raw, json)
Hash identifier:          huXR5zRTSolrk5T9NNl1Ct0mvAXYmJhN9X1KEoUywHo=
Subject key identifier:   9E:53:59:AA:30:A1:02:6B:F1:B1:1F:FE:CD:30:35:BB:ED:AC:BF:D4
Authority key identifier: FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2
Certificate issuer:       /CN=A91652B5/serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
Manifest number:          70
Signing time:             Sat 13 Jun 2026 07:57:56 +0000
Manifest this update:     Sat 13 Jun 2026 07:57:56 +0000
Manifest next update:     Sat 20 Jun 2026 07:57:56 +0000
Files and hashes:         1: _UmlE0ai96yBGwCtYuvvDpSiobI.crl (hash: gEa1xizL6f4tv9GCNbH0+dzWetsg+KYN1q3WbGSXBZ8=)
                          2: 535DB56CD1AF11F0A278C10CC4F9AE02.roa (hash: BXUEY5m+3lonf61CO2Aq4e6KwB/tUlOeMJ88DFpi710=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl
                          rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652B5, serialNumber=FD49A51346A2F7AC811B00AD62EBEF0E94A2A1B2
        Validity
            Not Before: Jun 13 07:57:56 2026 GMT
            Not After : Jun 20 07:57:56 2026 GMT
        Subject: CN=6a2d0d84-182b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:c8:cf:f5:38:ef:b1:e0:4f:ed:b6:f7:4e:
                    33:17:07:27:87:66:e9:a9:3d:87:f1:f7:47:a7:53:
                    ee:24:94:de:da:22:44:b4:e8:b1:4f:f3:a0:ee:11:
                    ff:93:c5:28:e5:85:91:4b:d0:bf:0c:51:74:1b:90:
                    d4:db:2d:5a:e8:e3:09:14:74:e4:4e:0f:8a:38:37:
                    4e:b1:33:1c:7e:3d:70:1a:9d:1b:ce:22:fa:91:17:
                    c5:89:dd:e7:f6:64:71:be:de:08:28:2b:d9:79:10:
                    48:9f:92:2a:94:c8:94:ac:c0:c3:30:b4:95:ce:57:
                    6f:11:43:c6:07:3a:1b:f4:4c:b0:f9:8d:bc:cb:4c:
                    6c:48:a1:f5:94:ea:92:01:e2:61:9f:54:2a:71:08:
                    a2:85:21:a1:23:75:35:f0:87:e0:8e:64:d4:f4:8e:
                    63:d7:33:0c:be:54:72:7c:86:0d:da:b8:73:a3:f1:
                    86:f1:41:cb:49:ab:62:fe:9a:36:fa:a4:2f:d2:88:
                    66:d3:47:2d:ad:7d:e6:47:a2:ee:19:d5:49:e4:5f:
                    3f:8c:cd:83:aa:58:75:8d:97:86:e8:24:49:94:de:
                    e5:9a:42:f1:05:1c:de:54:a9:60:5f:2d:cd:50:d7:
                    91:84:f0:db:6d:cd:05:19:71:3c:07:9b:d9:c7:fd:
                    dd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:53:59:AA:30:A1:02:6B:F1:B1:1F:FE:CD:30:35:BB:ED:AC:BF:D4
            X509v3 Authority Key Identifier:
                keyid:FD:49:A5:13:46:A2:F7:AC:81:1B:00:AD:62:EB:EF:0E:94:A2:A1:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_UmlE0ai96yBGwCtYuvvDpSiobI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6679D8BEC5B211F08622792BC4F9AE02/_UmlE0ai96yBGwCtYuvvDpSiobI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b7:33:a8:94:ee:97:ed:23:11:3c:89:48:01:4e:00:86:f8:
         f4:60:45:78:81:1a:ad:06:03:b4:8a:5f:8e:cb:1e:5a:90:ae:
         ef:f4:10:4d:3a:c2:b1:f1:aa:eb:bb:2e:c0:72:81:c9:53:b4:
         65:6d:53:60:c0:85:3e:d2:12:90:2a:39:d0:d0:43:32:df:66:
         8c:b6:35:7f:fa:8e:48:54:7e:21:b5:44:e4:39:94:68:0a:d6:
         d9:07:72:9b:01:31:ab:21:88:b8:c4:e9:06:23:49:6b:f3:07:
         73:e2:3e:03:c0:3d:6b:e4:d1:db:79:85:6f:d5:4c:b6:a3:5f:
         2a:e0:98:8b:35:e6:16:55:21:8f:a6:c0:e8:f0:02:91:5d:a8:
         14:e6:a8:ee:cb:cb:39:44:0b:03:58:b9:b9:84:4c:0b:59:37:
         de:82:f8:30:81:93:cc:ad:e2:a4:86:d7:e7:88:1b:73:dd:ca:
         e7:71:7b:3b:ce:7f:0c:6e:d1:99:8e:53:6a:d9:fa:0e:9d:26:
         0f:cc:31:f7:e1:61:9b:77:80:b4:27:a3:9d:6c:6e:33:56:1d:
         14:38:1c:4a:e5:67:33:7e:23:6b:b1:78:77:6b:87:41:41:d7:
         d3:16:d0:cb:cf:fc:2d:de:a9:95:c2:5a:42:62:38:66:80:24:
         15:60:af:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:16:25 2026 by rpki-client