Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft
File:                     UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft (raw, json)
Hash identifier:          I7ArmCLVsycuG1FPSWj1ItvTVW6R4uvBQK/FIkAyQgY=
Subject key identifier:   AD:76:0C:3B:BE:9B:4C:43:63:78:47:FA:F2:BA:45:70:56:04:39:E1
Authority key identifier: 52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B
Certificate issuer:       /CN=A91A459D/serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B
Certificate serial:       0AA1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft
Manifest number:          0A98
Signing time:             Fri 12 Jun 2026 19:33:02 +0000
Manifest this update:     Fri 12 Jun 2026 19:33:01 +0000
Manifest next update:     Fri 19 Jun 2026 19:33:01 +0000
Files and hashes:         1: UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl (hash: 0WSa6S9kwPPEBqaY1R9jOrFcG2BH0bDrswcHqDnbbTk=)
                          2: 21028CF67EF811EAAD47CD30C4F9AE02.roa (hash: 5qiov1nLKq5hzpu8tNYLrN/GDNf/4xMMx86PHr1cmkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl
                          rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2721 (0xaa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A459D, serialNumber=52B21995429C44F8A7F4EC99E53040870D6D385B
        Validity
            Not Before: Jun 12 19:33:01 2026 GMT
            Not After : Jun 19 19:33:01 2026 GMT
        Subject: CN=6a2c5eed-3398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:4a:88:52:7a:7f:ae:cc:3d:9b:7c:4a:77:
                    45:58:97:64:b6:e3:c9:3d:68:e7:22:9a:9e:28:98:
                    6c:46:f6:fb:3e:0b:8f:be:5f:e3:63:51:40:1d:0f:
                    0e:3d:08:3a:49:39:ca:27:2a:07:68:90:16:65:a7:
                    6a:b6:9e:4a:09:14:b9:80:e5:e4:6a:24:71:dc:6c:
                    72:3e:f8:58:85:c6:fc:be:73:ba:c7:31:1d:cd:96:
                    ed:1b:ce:94:04:5b:72:93:4e:39:ec:e8:de:7a:4d:
                    8a:2b:86:08:39:e8:e2:3a:67:22:3a:94:96:5c:00:
                    08:68:6b:7b:63:a8:d4:20:a9:8b:7a:e1:f5:16:fa:
                    a0:de:da:c7:1a:34:e7:35:96:70:ff:d5:08:3b:5a:
                    1a:6a:a7:f5:b4:d5:02:38:e0:70:39:9b:5c:3e:2d:
                    ad:01:eb:14:36:c1:9a:5a:b5:20:2c:93:94:57:37:
                    23:e9:82:03:8a:e9:91:f6:ec:e9:c1:6a:51:fa:0b:
                    b1:cc:06:82:5c:98:a2:e9:9d:6e:ed:37:9c:6d:73:
                    98:df:dc:4f:c4:90:22:fb:3d:9f:a1:3c:c6:c0:f8:
                    84:5e:4c:af:af:6d:f7:a7:71:dc:e5:73:b5:fe:3c:
                    e7:e5:af:07:d6:43:b1:57:9d:b4:37:ee:8e:59:e5:
                    46:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:76:0C:3B:BE:9B:4C:43:63:78:47:FA:F2:BA:45:70:56:04:39:E1
            X509v3 Authority Key Identifier:
                keyid:52:B2:19:95:42:9C:44:F8:A7:F4:EC:99:E5:30:40:87:0D:6D:38:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrIZlUKcRPin9OyZ5TBAhw1tOFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A459D/5FAB972E7EF611EAA979A32DC4F9AE02/UrIZlUKcRPin9OyZ5TBAhw1tOFs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f9:89:44:5f:71:32:a9:6c:98:6f:48:b6:c5:e4:80:69:1d:
         aa:98:21:f0:92:1e:5b:8f:7e:87:a0:3b:5c:62:ba:f2:66:43:
         a4:e0:32:8f:6a:97:df:d8:dc:34:9b:e9:21:de:4c:48:53:96:
         46:5c:45:47:dd:c5:f9:b1:ac:09:b6:29:27:8b:63:bc:71:c8:
         6c:ca:59:13:84:23:b2:ef:50:bb:35:37:67:25:cf:c2:ca:74:
         35:7c:e5:55:93:a1:7f:fe:b9:9b:77:29:7a:f3:50:a8:f0:ad:
         03:ff:5d:19:b9:d8:ce:4e:ff:79:46:2c:98:71:e9:ff:be:58:
         11:1b:f4:41:59:ac:7d:60:bc:d0:1d:d8:69:b5:51:f4:ef:cb:
         37:c8:08:cd:cf:08:57:d9:0b:4f:e6:21:f6:e4:7d:4b:54:64:
         76:af:de:c7:f2:8f:76:b9:9a:12:40:4e:f4:2e:90:d2:63:b1:
         e5:d7:34:4c:02:4d:21:43:5d:8b:5a:18:ed:f8:b7:cd:0c:99:
         48:61:df:27:16:5b:64:25:a8:c4:85:74:fc:cd:7a:54:07:01:
         6d:78:74:7c:a1:a8:f7:19:b9:61:51:b0:ed:43:e3:40:02:8c:
         6b:8a:3e:4c:34:05:0e:93:80:06:04:37:83:7b:46:40:d9:7f:
         1b:34:fa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:50:21 2026 by rpki-client