Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
File:                     UlhBQeXpBP16_D4Noo2QCKGvkhI.mft (raw, json)
Hash identifier:          wdQGcLRyGS4UXFxWWyWf8iIw1ve5lI8O43WhHT4MHHs=
Subject key identifier:   A9:08:B8:55:97:EC:7F:55:A5:C7:49:4D:1E:24:A0:52:06:DF:59:26
Authority key identifier: 52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12
Certificate issuer:       /CN=A91C2CCD/serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
Certificate serial:       0223
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
Manifest number:          021E
Signing time:             Sat 13 Jun 2026 02:48:40 +0000
Manifest this update:     Sat 13 Jun 2026 02:48:39 +0000
Manifest next update:     Sat 20 Jun 2026 02:48:39 +0000
Files and hashes:         1: UlhBQeXpBP16_D4Noo2QCKGvkhI.crl (hash: iyQmky47aOxGJsWenmD7p+cGPlN2zgBbB4PEcMSJE10=)
                          2: 41D133CC2B5911EE85AD762BC4F9AE02.roa (hash: js8xICC+uo4E5pknpNk0KkzoVevnkz6o6MdDYMenHmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl
                          rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2CCD, serialNumber=52584141E5E904FD7AFC3E0DA28D9008A1AF9212
        Validity
            Not Before: Jun 13 02:48:39 2026 GMT
            Not After : Jun 20 02:48:39 2026 GMT
        Subject: CN=6a2cc508-a680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:33:89:ba:7b:74:2d:f4:3a:7a:cd:fc:68:5f:
                    f2:e9:7f:01:25:a4:7c:f4:69:97:4f:6a:8b:a2:c9:
                    42:32:2e:8d:54:6b:d8:9f:87:78:e3:71:22:be:28:
                    ff:1d:8b:8c:8f:1d:cb:95:b6:f3:07:88:1e:a2:13:
                    04:48:f6:92:39:37:2f:bd:40:f5:0a:b5:25:c6:58:
                    f6:a6:31:18:6c:d8:ed:b2:65:f5:f6:88:64:71:8a:
                    41:1d:b5:69:d1:39:0a:77:e3:07:9f:13:29:9b:ae:
                    28:38:5a:0b:08:13:0b:86:3a:a2:77:f9:30:83:60:
                    6a:ad:f4:fb:2f:f2:97:d9:9d:2b:c1:cd:36:cc:67:
                    90:0a:35:29:09:fa:e4:6a:7e:b9:06:bc:c9:4c:2f:
                    2a:1f:ff:aa:57:a9:de:fa:b6:15:b7:8a:28:d4:66:
                    52:02:23:33:38:d7:7d:c3:b4:90:52:c8:85:1d:8a:
                    3a:c7:a5:10:54:61:d9:b0:eb:fd:76:27:39:9b:1c:
                    43:2d:d6:20:d5:14:05:ed:ad:59:3c:1b:b0:eb:19:
                    b9:b8:cb:65:27:0f:b7:e1:97:d1:38:40:fc:4e:47:
                    9a:1f:76:4e:ef:54:4c:8e:0a:59:97:81:d9:a9:ff:
                    57:dc:fe:42:b7:02:92:5a:ea:6e:70:a6:b1:d3:e9:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:08:B8:55:97:EC:7F:55:A5:C7:49:4D:1E:24:A0:52:06:DF:59:26
            X509v3 Authority Key Identifier:
                keyid:52:58:41:41:E5:E9:04:FD:7A:FC:3E:0D:A2:8D:90:08:A1:AF:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UlhBQeXpBP16_D4Noo2QCKGvkhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CCD/DC352B5E2B5811EEB7C2DE2AC4F9AE02/UlhBQeXpBP16_D4Noo2QCKGvkhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:86:b7:e8:03:36:69:d4:15:51:bc:e7:4e:21:12:c2:87:c5:
         9b:63:f9:0e:10:43:19:ca:21:a7:7a:ee:9c:ff:ad:23:9b:8f:
         54:9d:ac:da:6f:05:cd:da:ac:cf:d0:a4:93:9d:e6:66:61:cf:
         33:6f:7a:f1:f4:67:40:80:b0:dd:a1:7e:31:9b:b5:17:c6:4e:
         4f:a5:4b:5d:68:54:93:10:b0:40:30:eb:ea:c9:6d:73:a1:bd:
         bc:3e:58:6e:d6:8d:28:91:f3:4c:a4:06:76:4f:bb:58:a5:d7:
         17:37:6a:27:38:12:68:ee:8e:30:73:c7:cf:0f:90:74:79:49:
         86:87:88:f4:f7:66:91:70:40:d1:2b:7b:fa:02:60:25:ff:c6:
         f6:3f:20:f9:91:bc:47:6c:45:23:48:47:f5:57:1c:76:de:4a:
         02:fb:c8:55:fc:b0:37:2b:f5:ae:86:11:36:87:8f:4f:09:c5:
         44:93:4d:7d:b7:b2:7d:41:8d:8e:22:39:4a:cc:95:a2:b1:9a:
         36:0f:c5:48:b7:e6:c6:5a:14:49:29:09:19:9d:60:64:01:10:
         4f:ee:d0:35:b7:d0:cb:a0:f7:75:b5:8f:c1:87:a9:03:ec:70:
         26:93:3a:3a:aa:37:2e:7f:8f:b4:66:59:98:1f:6e:a2:a3:b7:
         08:c0:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:10 2026 by rpki-client