Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
File:                     uLVa9atmqP-naRykPaKmtJuiRUA.mft (raw, json)
Hash identifier:          88slK2NxM4WLkB7Nvqf2PV48G3/hzItyDfjnZXTq+hA=
Subject key identifier:   53:1F:FA:E6:F9:DC:6E:94:0E:ED:12:CA:61:20:D0:57:08:7C:6D:BA
Authority key identifier: B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40
Certificate issuer:       /CN=A91C5778/serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540
Certificate serial:       0CC4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
Manifest number:          0CBA
Signing time:             Tue 16 Jun 2026 18:32:23 +0000
Manifest this update:     Tue 16 Jun 2026 18:32:23 +0000
Manifest next update:     Tue 23 Jun 2026 18:32:23 +0000
Files and hashes:         1: uLVa9atmqP-naRykPaKmtJuiRUA.crl (hash: 0OusLdwxFx6aVNkIF9Oux/Yjxivn4iuY5R5kpjk6lwM=)
                          2: B3E5DF2A14ED11EAACAB5E5DC4F9AE02.roa (hash: 3OqTGjIgsHVDPUYnbHar2FaPmlN2uunJHFoJ3j2NcEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl
                          rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3268 (0xcc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5778, serialNumber=B8B55AF5AB66A8FFA7691CA43DA2A6B49BA24540
        Validity
            Not Before: Jun 16 18:32:23 2026 GMT
            Not After : Jun 23 18:32:23 2026 GMT
        Subject: CN=6a3196b7-a54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:10:e6:dc:3a:45:fe:58:0c:5e:88:ea:c2:b6:
                    a6:44:07:c5:b4:7f:c9:0e:b7:00:be:81:64:82:a6:
                    11:ab:f2:3b:f4:8e:19:de:a6:3f:71:2c:b3:dc:fa:
                    ac:eb:91:7c:ec:df:6e:dc:22:44:c7:44:94:fd:70:
                    81:56:e8:ec:cb:06:d6:51:e8:df:6c:50:48:e9:43:
                    40:ee:f2:98:7e:6b:9e:e9:ab:90:8a:b8:11:97:04:
                    9a:32:7c:f1:69:9f:f5:dd:c4:11:bb:ab:97:53:49:
                    b3:43:61:a5:93:96:50:78:4e:f2:e3:d8:e1:33:a9:
                    e9:35:6b:d4:b3:6c:02:1c:aa:23:b0:f2:75:da:da:
                    31:91:95:b9:2b:fd:53:c3:ec:45:2e:42:30:0a:5a:
                    80:55:4d:6a:23:19:13:37:12:b0:fa:be:16:d9:cb:
                    fe:c1:4e:12:3e:de:80:75:dd:27:d2:2f:cd:d7:d8:
                    a9:7b:59:81:4e:2d:fa:c2:e1:81:97:d7:84:d3:a4:
                    56:b2:ed:c2:0c:f6:4d:7e:fe:34:20:7d:a1:dc:48:
                    2c:0c:bb:80:ab:83:5f:d8:12:8a:40:d2:7b:15:90:
                    ab:9b:f9:e4:26:8c:59:c2:a6:2a:d3:43:be:db:e8:
                    b3:18:4d:5e:e7:b4:d6:e3:52:00:df:cb:fe:0a:d1:
                    fa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1F:FA:E6:F9:DC:6E:94:0E:ED:12:CA:61:20:D0:57:08:7C:6D:BA
            X509v3 Authority Key Identifier:
                keyid:B8:B5:5A:F5:AB:66:A8:FF:A7:69:1C:A4:3D:A2:A6:B4:9B:A2:45:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uLVa9atmqP-naRykPaKmtJuiRUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5778/3DDC1AC014EC11EAA8BAAE5AC4F9AE02/uLVa9atmqP-naRykPaKmtJuiRUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d9:5c:55:58:f2:c4:7c:a0:db:d4:75:25:46:77:be:81:74:
         48:17:b5:e4:50:f0:01:45:f7:95:2d:df:d1:78:4b:0a:8f:02:
         d3:61:6e:a2:8c:2b:6c:eb:3d:ae:4c:be:d0:a1:4c:94:07:0b:
         16:c3:d2:95:de:0e:72:a5:5f:fe:95:ab:19:8e:ce:31:a6:62:
         a2:93:a8:21:0e:a8:85:ea:2b:f1:31:80:a8:08:f3:ad:55:50:
         ed:db:de:87:d1:2e:8f:92:96:1e:08:76:5f:55:7d:d9:a5:8f:
         e2:ef:50:f6:af:0f:f2:16:b9:e6:4a:80:3e:41:0b:2b:94:35:
         5d:51:5d:ec:69:94:f3:57:b9:fb:af:98:e6:ea:a2:41:61:56:
         16:a4:f8:3a:aa:ca:e9:27:f9:09:6a:13:5e:e6:ac:49:bc:be:
         4d:28:ea:f9:0e:c7:54:e4:dc:e2:27:ae:7b:d6:79:6b:28:3f:
         6c:cb:52:fc:da:b8:25:ca:0e:b8:f6:79:be:44:cc:12:be:a2:
         e1:92:72:1b:94:2e:9b:70:e6:d3:b0:b6:87:00:6d:b2:8a:2b:
         bc:ee:9d:42:5b:75:4f:f3:b5:e2:e1:a9:14:cf:fa:7f:19:a2:
         1b:7d:52:c2:34:fa:47:ca:06:9e:dc:1e:76:be:99:e0:63:ea:
         ef:8f:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:38:45 2026 by rpki-client