Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
File:                     u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft (raw, json)
Hash identifier:          u1eh43RiRR6OzjWWdLAT5mL2Xd9g79faEvb2sUuhgg0=
Subject key identifier:   5A:DD:B5:A0:D1:A1:2A:74:43:1A:25:4A:CB:12:0F:97:90:08:6A:13
Authority key identifier: BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0
Certificate issuer:       /CN=A91CEE85/serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
Manifest number:          016D
Signing time:             Sat 13 Jun 2026 04:52:01 +0000
Manifest this update:     Sat 13 Jun 2026 04:52:00 +0000
Manifest next update:     Sat 20 Jun 2026 04:52:00 +0000
Files and hashes:         1: u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl (hash: C3oshA0P+KpPyP8WWX1fzZOxW4OBRtpouNyyZS4SLns=)
                          2: 4D189DD4728311EFA9CECE43C4F9AE02.roa (hash: m3Jo8FCeaELT1I3nJBgJYkzF+itVMTxAlpjgG+4EtAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl
                          rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEE85, serialNumber=BBE803FB757E0C47D32045452187B74AE27111F0
        Validity
            Not Before: Jun 13 04:52:00 2026 GMT
            Not After : Jun 20 04:52:00 2026 GMT
        Subject: CN=6a2ce1f0-58fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:0a:15:06:c2:02:36:17:d2:ba:c3:fa:35:
                    a5:1d:c2:de:e7:bb:f3:aa:51:06:3f:1e:ee:5c:17:
                    27:ec:da:d5:b2:73:2b:40:b7:0e:4b:df:a0:f5:72:
                    44:33:13:4b:21:42:93:ed:be:1a:f5:1e:23:d9:df:
                    76:da:fe:61:bf:53:f9:0b:44:f1:5c:fd:06:b2:ed:
                    c0:c1:3d:ef:87:98:54:05:ea:8f:da:f2:3b:f5:48:
                    d6:98:21:94:f3:35:1e:c2:98:ce:f8:a3:15:60:d9:
                    60:a9:e5:fd:df:83:e4:9c:7f:70:83:8a:13:56:29:
                    3c:c4:ce:63:ff:6d:96:a7:5c:53:70:f0:36:3e:cd:
                    84:d0:f8:e4:d6:47:66:7c:ff:2a:51:73:26:cd:e6:
                    79:42:41:13:8c:ca:89:7b:80:1a:da:49:14:b4:a8:
                    15:8f:67:d9:97:ad:b1:45:43:d6:2d:94:60:a8:cb:
                    4f:4a:77:7d:88:51:58:9e:50:c4:0d:4f:17:19:46:
                    77:4e:0a:b0:32:91:e4:eb:3b:4c:27:44:86:41:50:
                    a3:e6:08:05:2e:aa:e5:80:2c:29:1d:aa:f4:78:f0:
                    3a:8d:50:83:5b:bf:f1:a7:f0:af:24:40:e6:19:34:
                    c8:7d:86:54:e3:49:66:2e:51:2f:df:58:64:96:c2:
                    b9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DD:B5:A0:D1:A1:2A:74:43:1A:25:4A:CB:12:0F:97:90:08:6A:13
            X509v3 Authority Key Identifier:
                keyid:BB:E8:03:FB:75:7E:0C:47:D3:20:45:45:21:87:B7:4A:E2:71:11:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-gD-3V-DEfTIEVFIYe3SuJxEfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/05A7CE6845AE11EFB435EB6FC4F9AE02/u-gD-3V-DEfTIEVFIYe3SuJxEfA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d9:13:bb:5c:6e:b1:96:56:e2:f4:ca:8f:b6:9c:14:b6:7d:
         69:c5:80:46:37:ee:77:ea:84:42:8d:33:4e:3d:dc:be:83:4e:
         c7:22:01:ff:c2:bb:97:1a:62:6d:92:e9:37:b6:d4:a7:dd:df:
         9c:f3:66:60:32:7f:bc:d8:75:97:3c:f7:34:9a:b2:8d:1f:85:
         b3:76:c8:76:6c:f1:a3:77:91:28:40:06:9f:0b:48:ad:bd:41:
         25:a5:7e:78:53:c8:10:d8:79:74:79:53:dc:ac:60:ef:c1:62:
         16:75:31:f2:8c:34:dc:e1:28:a7:98:f7:cb:8c:b4:58:78:00:
         ec:45:7a:7b:52:b1:c3:6c:61:1b:40:b0:a9:ef:23:dd:c0:e9:
         32:66:5e:24:ae:bd:ef:23:db:6c:58:c3:5d:28:3b:04:1b:da:
         01:d2:01:85:e5:2f:06:dc:2b:b6:86:d5:55:07:c9:14:36:12:
         dd:b2:ff:29:fc:5f:aa:c0:db:f7:90:28:cb:1b:c4:fc:f8:53:
         f6:f6:90:5a:17:6b:c5:9e:cf:c2:6c:7f:30:f7:7f:45:d3:00:
         63:a0:c4:40:90:cc:97:bc:99:11:2b:83:c2:57:20:f0:1c:01:
         0f:90:2c:13:c8:65:8a:c8:41:ab:16:31:e6:c3:a2:e5:af:2a:
         99:2e:be:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:27:19 2026 by rpki-client