Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
File:                     ULpjuT-CkSle5HAxuWtFzaXCSw0.mft (raw, json)
Hash identifier:          Dop8UHUF7fBko0EzYvXbfYHXrfLmgEGlotoldYgqGlY=
Subject key identifier:   0D:79:CB:3C:F4:FF:97:14:2C:F6:B3:54:38:8F:6C:C5:1A:33:C7:82
Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D
Certificate issuer:       /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
Manifest number:          0108
Signing time:             Thu 11 Jun 2026 08:26:02 +0000
Manifest this update:     Thu 11 Jun 2026 08:26:02 +0000
Manifest next update:     Thu 18 Jun 2026 08:26:02 +0000
Files and hashes:         1: ULpjuT-CkSle5HAxuWtFzaXCSw0.crl (hash: zDBk1rKN+IeypPm0m9xqDCmYDSL8JbW6IvFuDHmkCHs=)
                          2: 42D62828962711F0B74FEE0CC4F9AE02.roa (hash: dEqBDGsqeiUN91FwP/nGNGZY5s+Bv1LRGDa/upjDjdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl
                          rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
        Validity
            Not Before: Jun 11 08:26:02 2026 GMT
            Not After : Jun 18 08:26:02 2026 GMT
        Subject: CN=6a2a711a-4e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:1d:84:f5:da:c4:5f:20:43:33:2b:85:c3:
                    11:d4:d1:aa:f9:48:24:99:9f:0e:37:75:24:33:ef:
                    9a:10:40:a8:2d:18:af:5c:93:5f:85:f2:7c:1e:4f:
                    65:41:42:eb:2f:c6:47:63:7d:69:b5:e1:dd:5c:21:
                    01:21:d2:5a:35:1e:2a:2d:4d:db:14:c5:8f:e7:4b:
                    62:3a:fe:73:c9:56:7f:48:49:5f:18:b2:51:8a:e0:
                    99:8b:9e:8b:46:08:83:4e:d6:84:66:b2:3f:6e:9a:
                    ee:7a:cb:1f:6a:63:db:14:2c:12:34:d3:09:6e:cf:
                    aa:8b:78:6c:a7:54:73:7e:4a:f1:2a:dc:7b:be:b5:
                    01:e6:52:dd:71:e0:a6:07:c4:c9:b9:8c:28:c9:5b:
                    67:ee:0f:19:ba:49:71:48:7a:ec:99:39:8b:80:ee:
                    48:70:81:7f:ad:0d:9d:9e:c0:58:37:3b:69:81:84:
                    fb:b9:99:d4:86:59:a9:34:e2:10:31:41:de:68:f8:
                    7f:93:53:0a:b7:5e:bb:e2:2b:4e:dc:44:14:5f:c0:
                    98:60:81:ec:63:ff:63:af:18:8b:6d:8d:e7:b9:37:
                    3c:24:e2:83:12:a4:5c:01:0b:59:65:29:e2:f5:1f:
                    6a:e0:e4:8c:3e:82:61:5c:6f:41:0e:af:da:32:28:
                    78:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:79:CB:3C:F4:FF:97:14:2C:F6:B3:54:38:8F:6C:C5:1A:33:C7:82
            X509v3 Authority Key Identifier:
                keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f4:db:7a:c0:50:85:66:f7:8b:7f:26:20:b2:66:0a:ee:3e:c6:
         f0:94:ab:94:49:83:d0:b3:74:49:c8:a9:11:8b:48:37:01:8f:
         bc:b6:5a:82:70:53:98:4a:3d:82:fa:21:2b:9e:b7:c9:c0:9d:
         ee:7e:60:30:95:67:ae:15:a3:ce:be:6f:8c:29:fa:e9:50:5a:
         71:a4:8f:b8:2d:ef:7e:58:2f:87:04:08:e5:1d:79:63:24:3f:
         4f:01:97:35:53:fb:b6:72:1e:c7:0f:1a:83:aa:ba:4d:95:1d:
         db:39:94:e8:03:f5:3a:4c:1b:15:8a:54:4e:5a:b5:fb:82:cf:
         29:6e:1f:7a:3f:86:45:09:44:9a:90:e2:6f:6c:4e:4a:13:83:
         62:ec:75:23:51:c7:ad:46:0b:6e:8f:ba:a7:61:f5:62:3e:f0:
         c9:1f:2c:75:44:7d:ef:e6:49:c2:c0:1c:a9:5b:d7:9d:98:82:
         4f:a5:39:a2:70:16:e2:4b:a3:df:c9:a0:f6:0a:20:48:39:5c:
         6d:c7:9e:eb:45:19:a9:e8:1a:74:6c:0e:ff:ed:04:08:2b:3e:
         6d:77:d0:7a:43:22:7c:b1:15:eb:79:a5:cd:03:53:a6:0a:0a:
         b3:af:95:0d:ee:87:3b:6c:46:bf:6b:9c:a6:e0:1c:00:7e:49:
         98:42:95:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:51 2026 by rpki-client