Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
File:                     uo1v5dgowFOZs-GqZY_AWIYf3OA.mft (raw, json)
Hash identifier:          Y4P6XI2hKaPbe8K90WJUioKle+HjmwoTbX+pgp6XRps=
Subject key identifier:   E1:1F:17:AA:28:4E:A4:B5:D9:AA:7C:61:1E:B3:03:11:34:A0:1E:4D
Authority key identifier: BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0
Certificate issuer:       /CN=A91AAF02/serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0
Certificate serial:       0FF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
Manifest number:          0FEA
Signing time:             Fri 12 Jun 2026 17:27:11 +0000
Manifest this update:     Fri 12 Jun 2026 17:27:11 +0000
Manifest next update:     Fri 19 Jun 2026 17:27:11 +0000
Files and hashes:         1: uo1v5dgowFOZs-GqZY_AWIYf3OA.crl (hash: tNYZM0ym79N5XXcjm6/I2tNXHusxyghWTbE5tonGElI=)
                          2: 7EA856A6C3F511EEB2610F2FC4F9AE02.roa (hash: OjM1bFnCHb2Nbpu1zaIXajiz/Q+c8E0n3J971ErzXps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl
                          rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4088 (0xff8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAF02, serialNumber=BA8D6FE5D828C05399B3E1AA658FC058861FDCE0
        Validity
            Not Before: Jun 12 17:27:11 2026 GMT
            Not After : Jun 19 17:27:11 2026 GMT
        Subject: CN=6a2c416f-7c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:b6:6f:6e:65:31:82:d6:c5:6f:b9:64:e1:
                    2c:7a:96:b2:5a:e9:5f:72:bd:85:4a:65:59:2c:19:
                    68:2d:ba:a9:0a:8a:e1:6a:03:f7:c9:0b:c6:2b:21:
                    94:8f:3a:fa:94:39:48:97:f3:aa:21:57:dc:c2:4e:
                    a8:52:d0:ea:83:1d:03:78:5a:9e:29:08:14:45:0b:
                    c1:ef:02:95:f6:81:cf:eb:5d:8a:08:6b:fe:f7:77:
                    dd:63:42:cd:ba:ad:59:be:1b:3d:2f:28:38:41:f5:
                    0f:99:3f:99:27:c4:53:11:26:29:0a:ae:ae:ac:6b:
                    e6:37:62:56:9d:81:42:2b:6f:be:97:02:89:58:64:
                    a6:65:52:e5:2d:a0:c5:42:cf:60:72:f5:7a:5e:15:
                    ab:66:5d:64:ef:4b:87:18:83:40:7b:28:90:90:75:
                    7f:55:b5:55:74:f3:b7:f3:0d:7d:61:1f:96:9b:bd:
                    e7:3e:89:06:3e:2d:59:32:82:99:c5:ce:0c:71:b2:
                    7c:75:7e:da:5a:b9:17:1a:75:76:6c:ed:90:51:14:
                    0e:67:82:e8:68:fa:e9:be:e4:05:18:17:9f:68:65:
                    3b:7a:b9:46:0a:de:83:71:ea:bd:33:ad:ae:8b:03:
                    ca:90:04:8c:c9:14:19:ba:08:b7:73:23:0b:a4:35:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1F:17:AA:28:4E:A4:B5:D9:AA:7C:61:1E:B3:03:11:34:A0:1E:4D
            X509v3 Authority Key Identifier:
                keyid:BA:8D:6F:E5:D8:28:C0:53:99:B3:E1:AA:65:8F:C0:58:86:1F:DC:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo1v5dgowFOZs-GqZY_AWIYf3OA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/EACD4876764A11E98C87B582C4F9AE02/uo1v5dgowFOZs-GqZY_AWIYf3OA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:57:34:73:00:08:ba:ef:47:7f:35:88:1d:39:49:1b:90:1c:
         a5:a9:60:39:f2:bd:a0:30:81:9d:6e:a6:a2:e5:13:3d:78:5a:
         65:a4:c1:d1:cb:cb:27:74:92:18:cb:02:cb:c0:12:68:e8:c1:
         4c:73:c5:72:23:a0:4a:94:53:8d:7c:f1:12:f7:50:99:5d:24:
         70:c7:3c:88:fb:95:f6:46:a6:fd:3f:17:0e:94:36:1d:6d:06:
         d0:95:3b:95:f3:b4:f3:1a:2c:d9:23:17:40:52:36:bd:e2:79:
         78:a5:09:5f:91:c6:25:9e:04:1a:8c:bf:7d:0f:54:fc:a0:3d:
         22:37:71:74:37:ad:65:4a:29:2d:ba:ff:10:8f:ec:6e:06:37:
         dc:2c:f6:db:ff:19:a8:b2:6b:1e:bc:52:72:fd:94:9b:e5:f7:
         f6:68:0d:f9:dc:2e:cd:71:c9:8f:ac:54:3c:3c:22:c9:34:35:
         80:59:14:14:ac:28:32:ed:bd:11:7c:a1:25:82:73:db:fa:df:
         c8:5a:a7:b9:c6:47:e0:b2:d1:c1:2b:60:bf:89:25:8d:bc:9f:
         bd:3d:75:8b:e5:c8:3f:8e:0d:71:d5:3c:6f:bb:ad:5a:41:31:
         d9:15:cb:d1:8e:be:9b:ba:38:ce:d4:8b:bb:0b:3d:01:fc:a2:
         50:f8:a2:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFGMDIxMTAvBgNVBAUTKEJBOEQ2RkU1RDgyOEMwNTM5OUIzRTFBQTY1OEZDMDU4
ODYxRkRDRTAwHhcNMjYwNjEyMTcyNzExWhcNMjYwNjE5MTcyNzExWjAYMRYwFAYD
VQQDEw02YTJjNDE2Zi03YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoYO2b25lMYLWxW+5ZOEsepayWulfcr2FSmVZLBloLbqpCorhagP3yQvGKyGU
jzr6lDlIl/OqIVfcwk6oUtDqgx0DeFqeKQgURQvB7wKV9oHP612KCGv+93fdY0LN
uq1Zvhs9Lyg4QfUPmT+ZJ8RTESYpCq6urGvmN2JWnYFCK2++lwKJWGSmZVLlLaDF
Qs9gcvV6XhWrZl1k70uHGINAeyiQkHV/VbVVdPO38w19YR+Wm73nPokGPi1ZMoKZ
xc4McbJ8dX7aWrkXGnV2bO2QURQOZ4LoaPrpvuQFGBefaGU7erlGCt6Dceq9M62u
iwPKkASMyRQZugi3cyMLpDU5ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOEfF6oo
TqS12ap8YR6zAxE0oB5NMB8GA1UdIwQYMBaAFLqNb+XYKMBTmbPhqmWPwFiGH9zg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi9FQUNENDg3Njc2
NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dGT1pzLUdxWllfQVdJWWYz
T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VvMXY1ZGdvd0ZPWnMtR3FaWV9BV0lZZjNPQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUYwMi9FQUNENDg3Njc2NEExMUU5OEM4N0I1ODJDNEY5QUUwMi91bzF2NWRnb3dG
T1pzLUdxWllfQVdJWWYzT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADFc0cwAIuu9HfzWIHTlJG5AcpalgOfK9oDCBnW6mouUTPXhaZaTB0cvLJ3SS
GMsCy8ASaOjBTHPFciOgSpRTjXzxEvdQmV0kcMc8iPuV9kam/T8XDpQ2HW0G0JU7
lfO08xos2SMXQFI2veJ5eKUJX5HGJZ4EGoy/fQ9U/KA9IjdxdDetZUopLbr/EI/s
bgY33Cz22/8ZqLJrHrxScv2Um+X39mgN+dwuzXHJj6xUPDwiyTQ1gFkUFKwoMu29
EXyhJYJz2/rfyFqnucZH4LLRwStgv4kljbyfvT11i+XIP44NcdU8b7utWkEx2RXL
0Y6+m7o4ztSLuws9AfyiUPiiGQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:04:59 2026 by rpki-client