Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File:                     UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier:          YPaTqbr/o9ioQv5OcM9CNCJuDbHkybyKwT/H8dN9IhM=
Subject key identifier:   A9:40:FF:0A:2B:9F:DC:E4:F0:15:37:28:18:1B:4B:64:33:E2:C3:08
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer:       /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial:       0CC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number:          0CAB
Signing time:             Fri 12 Jun 2026 18:35:07 +0000
Manifest this update:     Fri 12 Jun 2026 18:35:07 +0000
Manifest next update:     Fri 19 Jun 2026 18:35:07 +0000
Files and hashes:         1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: pcVT9RL8iyuKXSLORT9rE85pWoK+cOTWroQ193W04DI=)
                          2: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: VXncP0PhzyqKm2QEziAfAuVtMG/akEU8trZDQTOKPw8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
                          rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3267 (0xcc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
        Validity
            Not Before: Jun 12 18:35:07 2026 GMT
            Not After : Jun 19 18:35:07 2026 GMT
        Subject: CN=6a2c515b-f97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:17:d1:c1:53:ee:72:50:aa:8e:cd:c0:0e:
                    26:c1:bd:55:72:0f:dd:8e:1f:be:56:85:30:f9:0e:
                    85:4f:5f:fe:70:c5:07:14:9f:a1:d9:68:95:74:2f:
                    a7:10:a1:df:5d:3a:f3:d3:48:10:5d:15:5d:94:f9:
                    d9:9c:97:04:3b:96:67:50:e4:b0:41:41:b1:19:9a:
                    19:77:36:2b:3b:6b:2f:0c:cc:59:7c:14:2e:38:38:
                    12:b3:90:20:11:77:0a:50:da:8e:f7:50:ae:a8:02:
                    f1:56:7c:e5:9f:17:3e:ce:e0:f7:b9:aa:fb:c3:1b:
                    8b:59:08:38:c0:46:fb:c7:d7:87:38:89:93:f1:3d:
                    7c:f6:97:94:e6:9d:98:47:f1:d8:c1:b2:5b:5a:9d:
                    81:0b:6a:46:b6:f1:30:8f:b5:d8:08:95:0c:30:4c:
                    4d:12:10:ce:bc:64:1a:42:56:2a:98:7f:38:19:15:
                    f8:c8:4d:0f:dd:30:8f:16:24:9c:f0:55:f5:22:8a:
                    29:b7:09:4e:70:38:a3:ab:37:b1:57:ef:6a:eb:3c:
                    85:d4:24:12:10:0e:f4:a2:30:79:b3:a9:72:2b:59:
                    4a:01:d1:64:1d:c6:71:78:1e:34:2d:49:d7:2e:7d:
                    7a:4f:e4:30:17:c9:a4:de:42:20:cd:e6:21:79:3c:
                    60:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:40:FF:0A:2B:9F:DC:E4:F0:15:37:28:18:1B:4B:64:33:E2:C3:08
            X509v3 Authority Key Identifier:
                keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:05:56:ca:f9:72:11:32:e8:f3:a8:92:ff:f8:5b:bb:5b:79:
         a1:65:0d:d9:2f:1e:f0:c0:bc:32:9f:b6:09:13:8e:84:c3:c4:
         2e:8d:34:f6:fb:a7:ee:48:fb:9d:bc:5c:e4:9b:f6:35:a2:a4:
         59:24:a3:51:62:bc:92:71:ce:52:81:51:57:b8:42:1b:67:18:
         3d:ed:60:a9:0f:45:90:2b:04:48:b7:f5:77:08:1d:ee:a0:81:
         f6:99:de:72:06:53:e3:28:fa:90:0e:6e:98:6a:33:7c:cf:c5:
         92:a4:f9:66:fc:7a:1e:59:c0:24:5f:0c:13:bd:eb:79:ac:1d:
         9f:f1:a4:a9:2a:a6:d3:67:a9:36:36:8f:15:21:b0:e2:fc:aa:
         dd:8a:81:8f:8a:30:83:7e:1a:6c:96:6a:a6:06:5c:a8:04:98:
         98:cf:d5:69:0e:5b:cb:cc:1a:b0:ea:5f:23:e3:68:e4:ed:34:
         69:01:1e:04:3d:e8:a7:77:3d:5c:91:cb:13:58:3a:e5:d3:8c:
         dc:13:fe:d2:41:db:4f:39:df:e5:d1:7b:9c:54:ff:3b:6f:4c:
         18:1f:6f:27:56:72:c2:3a:34:16:64:05:09:7c:92:b1:56:ac:
         3f:0e:7b:33:72:f2:9f:97:e2:5d:8b:bc:d2:c0:dd:c0:4f:ec:
         f2:d9:b9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:26 2026 by rpki-client