Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft
File:                     UG49HcCtxzidnNuq-lFwdBtVhho.mft (raw, json)
Hash identifier:          nmN+Phi7rUIpic/X4nTYdvmuNpcIMQHcjq6wCqSKb9o=
Subject key identifier:   A5:C6:C0:3A:B3:AD:D4:15:91:42:D6:2B:77:8E:2A:F6:E2:6F:83:71
Authority key identifier: 50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A
Certificate issuer:       /CN=A917FFCC/serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft
Manifest number:          36
Signing time:             Sat 13 Jun 2026 08:39:57 +0000
Manifest this update:     Sat 13 Jun 2026 08:39:57 +0000
Manifest next update:     Sat 20 Jun 2026 08:39:57 +0000
Files and hashes:         1: UG49HcCtxzidnNuq-lFwdBtVhho.crl (hash: 2xGAV7IZ0AH3e1iEms/G6j5ClxX9d8dhTYhUafyTVpU=)
                          2: D040E1BC16D311F18D1B19D1303D8C67.roa (hash: FW4iyNzwJYx2pnIdKFnPL+9FFZZIBrzKM+GhxItUIOM=)
                          3: F780D776194611F1871644483C3D8C67.roa (hash: ho5eEvE3UY6na6Rt/OnfOdSf9aaBbnbQUdpdtiKwfI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl
                          rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFCC, serialNumber=506E3D1DC0ADC7389D9CDBAAFA5170741B55861A
        Validity
            Not Before: Jun 13 08:39:57 2026 GMT
            Not After : Jun 20 08:39:57 2026 GMT
        Subject: CN=6a2d175d-3c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:9d:e5:db:46:bb:63:4a:05:2e:bc:c0:a1:
                    84:59:e6:47:1c:63:ab:e6:69:cd:7e:8b:79:4d:f0:
                    7f:8c:0a:ec:74:2c:f5:7c:70:fd:29:22:df:f8:d1:
                    90:9b:96:2d:30:6e:30:a8:95:03:db:f0:1b:2e:db:
                    e5:ad:a7:15:30:c9:9a:16:d1:fd:03:03:ac:4a:e2:
                    a0:0e:19:3b:67:02:df:f3:4d:aa:eb:44:12:b9:b7:
                    14:73:f5:4e:87:98:93:e1:cc:28:0e:1c:6e:4c:fe:
                    31:30:81:54:79:48:b6:96:6b:d8:a1:1b:04:62:33:
                    1b:83:7b:16:06:fe:4a:11:21:d7:ee:5f:ff:e1:95:
                    70:46:d2:5d:b2:1d:97:80:2f:d8:bf:3d:5b:65:0b:
                    20:ab:9b:fa:a8:50:75:ce:8f:fb:f8:74:ca:d9:66:
                    33:26:5c:1b:c6:74:95:ad:5c:3b:2b:a1:f2:3c:69:
                    ee:15:00:b3:5b:7d:e4:24:5e:e3:e0:56:55:b8:d0:
                    54:08:b6:17:a6:01:ad:41:61:1c:11:70:e6:72:a9:
                    eb:2f:d4:5a:ec:17:42:11:70:b0:17:4f:30:b8:48:
                    26:20:f7:e2:b3:1c:73:89:15:d8:f1:20:92:5f:ad:
                    92:82:21:f0:2d:f7:a8:66:6d:5c:53:c3:d9:8d:68:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C6:C0:3A:B3:AD:D4:15:91:42:D6:2B:77:8E:2A:F6:E2:6F:83:71
            X509v3 Authority Key Identifier:
                keyid:50:6E:3D:1D:C0:AD:C7:38:9D:9C:DB:AA:FA:51:70:74:1B:55:86:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UG49HcCtxzidnNuq-lFwdBtVhho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/06C55AE816D311F1BAA410C8303D8C67/UG49HcCtxzidnNuq-lFwdBtVhho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ed:58:9f:88:e7:7d:03:ff:42:f2:10:78:93:ad:95:51:79:
         2c:b6:bc:20:e6:5f:a2:5b:96:79:3a:b3:de:b0:73:0e:23:a3:
         a0:b5:13:21:eb:57:b2:a6:ab:09:81:17:c5:09:67:32:d9:9c:
         79:04:89:1c:1a:20:3d:d5:34:e9:f7:0b:2a:ca:a7:e0:82:45:
         e8:ee:0a:db:94:b5:f6:2c:bb:c5:b2:6a:a4:73:6f:46:8c:2a:
         16:f2:ae:88:98:ed:9e:d3:21:49:49:c8:29:f2:cf:9b:39:9b:
         4b:1f:65:89:8c:9d:d6:52:ff:7a:11:99:c8:49:b5:02:52:76:
         0d:d6:c2:31:06:85:54:25:d6:3f:3e:18:4e:75:fe:ab:f9:69:
         7d:df:4d:88:d4:2a:ff:d4:33:bb:0c:bd:62:4a:a7:84:2e:28:
         af:6e:67:b9:d0:a8:4f:87:f8:27:7c:1d:4b:47:a5:5d:62:1c:
         7d:31:70:0c:10:ae:7f:12:de:04:9f:24:0c:4a:64:01:06:22:
         09:25:a4:77:d8:55:e5:fe:45:ab:32:b2:9e:e1:66:fe:36:c9:
         a1:5d:f4:74:cb:a2:c1:8d:33:48:38:50:8f:f4:66:75:94:ef:
         eb:d5:bc:35:1e:1a:a0:ab:8d:37:b9:5a:30:dc:ba:9f:c1:2f:
         0d:0b:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:44:00 2026 by rpki-client