Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
File:                     uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json)
Hash identifier:          1w5E+ITJMzhofMjKX/ld4TERnFSErQvN3Iz9vFjJ5Eg=
Subject key identifier:   33:1C:16:E0:F5:DC:F9:C9:38:4D:71:F4:18:FE:76:38:9A:6A:6C:34
Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Certificate issuer:       /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
Manifest number:          016D
Signing time:             Wed 17 Jun 2026 04:59:21 +0000
Manifest this update:     Wed 17 Jun 2026 04:59:20 +0000
Manifest next update:     Wed 24 Jun 2026 04:59:20 +0000
Files and hashes:         1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: 6PFutrK5xMCrTF/9fOIkTPnPQY8ZxlMObl2KwZLHYAw=)
                          2: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (hash: vCcnGHDur1MCV3cbkutfaHSo5RLRMio7vL1cu8PMH74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
                          rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
        Validity
            Not Before: Jun 17 04:59:20 2026 GMT
            Not After : Jun 24 04:59:20 2026 GMT
        Subject: CN=6a3229a9-c7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:48:17:c9:50:df:27:9e:7c:5d:2c:9d:11:
                    9c:1d:fd:5b:a7:3d:0c:58:16:73:3e:96:df:16:c5:
                    c0:a9:06:39:27:68:54:aa:05:8f:85:67:d3:9d:9c:
                    3f:f8:14:a4:d6:a5:52:d3:15:40:ee:65:74:f3:59:
                    e7:33:d7:28:3a:56:2f:0a:fc:f4:9a:03:48:22:4e:
                    14:88:ca:1f:4f:ed:52:7b:2f:fc:84:da:d8:1a:75:
                    2d:d8:69:8a:12:1a:48:1a:d7:09:b1:2b:99:92:e3:
                    3e:32:54:d9:13:0d:cf:7a:ac:3d:f8:ff:79:84:18:
                    3e:43:fa:25:a3:ae:aa:a9:0a:1c:3a:64:e4:dc:51:
                    cc:7e:46:a2:4d:1c:88:b9:1c:c9:0d:31:5c:8c:fb:
                    4d:99:5c:bf:58:97:a1:d2:4e:dd:c3:e0:ec:c1:c4:
                    c5:ec:95:31:22:f8:cf:80:e9:4e:4f:75:85:aa:92:
                    74:58:f6:f7:a3:71:aa:98:81:c3:f9:bd:c1:3a:38:
                    df:b6:56:a5:90:cd:9a:a0:cc:d8:c1:9c:50:44:90:
                    68:d7:e9:2d:ea:67:4a:96:10:44:c3:f3:93:8b:34:
                    9f:1c:e9:c1:4a:54:df:a2:7f:81:13:3e:0f:0c:51:
                    08:10:d1:98:8e:db:57:47:21:4a:f2:e7:2d:78:6a:
                    70:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1C:16:E0:F5:DC:F9:C9:38:4D:71:F4:18:FE:76:38:9A:6A:6C:34
            X509v3 Authority Key Identifier:
                keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2a:61:33:90:b9:15:be:bc:47:d2:9c:c9:d2:eb:93:bc:0e:
         3b:cb:2f:50:2a:8f:91:ff:10:99:95:66:60:6a:3a:c1:19:47:
         9e:2b:5d:0b:87:dd:c0:16:26:4a:d0:33:33:cd:d4:fe:88:11:
         6e:8f:fa:c5:73:f0:e7:7c:0d:1a:bc:0a:e7:a8:0f:c8:ac:d2:
         fa:4a:ad:89:1d:b9:fd:ba:82:be:73:4a:90:dd:7f:95:d4:9d:
         00:b1:5c:3a:6c:1a:66:54:8b:4d:1b:6f:51:3b:fe:2c:ed:11:
         51:bd:7b:63:74:35:dc:f0:6c:a4:88:72:db:9c:c9:4a:9b:39:
         ca:4d:f3:30:d3:1e:b7:ec:c2:40:24:52:dc:16:a2:ea:26:81:
         29:86:7b:00:46:46:d0:9b:f8:7e:0a:c8:cc:86:3c:09:19:bf:
         c1:f8:89:44:c0:cc:c6:25:9e:45:12:b0:56:fe:f3:79:e3:32:
         3c:6f:15:c1:f7:1e:c0:ae:f1:a2:5f:db:8f:cb:12:cb:3d:8c:
         2c:c3:28:a3:cb:cd:10:d9:6e:54:36:c5:d2:e4:c9:22:51:23:
         3a:07:c8:3a:7b:dc:3b:3e:ff:ed:70:9c:5a:50:29:e6:00:98:
         e9:b0:74:12:0f:34:aa:e7:89:62:fb:a1:51:3f:0d:87:2e:f3:
         e7:42:f0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:01:18 2026 by rpki-client