Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
File:                     UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft (raw, json)
Hash identifier:          /dkIcswYqfP8vmduLg33zEUdF986IjfijTVQYesHbNk=
Subject key identifier:   0D:C8:A2:2C:6C:D0:08:DB:A0:54:4E:C0:6A:E5:08:BC:08:27:29:12
Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13
Certificate issuer:       /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
Manifest number:          BC
Signing time:             Sat 13 Jun 2026 07:04:13 +0000
Manifest this update:     Sat 13 Jun 2026 07:04:13 +0000
Manifest next update:     Sat 20 Jun 2026 07:04:13 +0000
Files and hashes:         1: UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl (hash: bBuIn8G0F/IX/YhpCFXYUVIlERcwPPvl23KkHPZ/Hk8=)
                          2: 0745DA884A3C11F0AFF98454C4F9AE02.roa (hash: HFBzqsB1ywMD+JWUEHOpXWYJ4PzPIFvuRP9SLPHmgeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813
        Validity
            Not Before: Jun 13 07:04:13 2026 GMT
            Not After : Jun 20 07:04:13 2026 GMT
        Subject: CN=6a2d00ed-2d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:22:74:76:f3:31:d3:ba:dc:9f:16:cc:19:fd:
                    7b:db:0d:22:96:28:49:a8:4d:ed:6d:eb:be:2d:c3:
                    25:ea:a0:dc:a2:3d:c7:08:b3:a4:a2:86:88:e9:46:
                    2f:e7:4f:ac:15:bc:5c:27:68:a9:c3:9d:29:94:8a:
                    b0:46:f0:47:8e:f4:d1:cc:96:54:9f:44:c5:7e:09:
                    51:f6:a9:9e:57:08:99:0c:1f:ed:03:4a:48:d5:c4:
                    67:38:0e:54:ad:06:c2:4d:7e:39:12:9f:6c:15:ae:
                    05:3f:82:78:3e:fe:8d:8d:d2:74:1f:95:69:5c:69:
                    6d:c0:12:c8:32:32:08:22:00:47:d4:e3:8b:5c:5e:
                    3f:56:87:c7:7e:5c:5a:8b:0b:ef:18:68:6f:58:50:
                    f9:28:a8:fd:bd:94:30:09:5b:16:fe:5d:d7:a3:ed:
                    f0:80:4f:84:b8:45:de:44:b6:31:b7:18:41:23:4a:
                    37:63:08:dd:b8:0e:58:b2:27:34:db:55:db:39:48:
                    00:9e:34:f1:e6:09:2d:69:eb:4d:44:13:38:d0:de:
                    7f:f1:81:45:f8:32:cc:80:b9:0d:9f:df:44:a0:8a:
                    d8:13:ff:f2:b1:e1:aa:a0:0b:9e:ca:32:b1:b4:9d:
                    6d:9f:7b:70:71:92:5b:03:08:c9:b3:e8:13:a8:0d:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C8:A2:2C:6C:D0:08:DB:A0:54:4E:C0:6A:E5:08:BC:08:27:29:12
            X509v3 Authority Key Identifier:
                keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:00:44:57:eb:33:71:4e:8e:39:19:01:00:87:07:15:6a:43:
         db:b0:bb:18:35:70:f1:d4:63:1d:2c:44:e2:1f:db:12:bf:fe:
         f6:ec:7b:ca:d6:a2:5f:d4:1e:83:b9:cb:07:33:e5:05:ea:08:
         47:f6:fb:ac:6b:85:26:56:cc:b9:38:05:94:f1:7e:3b:3a:4f:
         1c:46:e8:4a:48:78:38:e0:ed:93:05:37:99:68:2f:9b:52:c9:
         91:f3:01:c8:1a:4b:c3:e0:a6:c8:b1:53:8b:83:f4:de:02:c9:
         fc:12:ea:ca:16:96:b8:86:33:e4:7f:c1:f6:32:f7:2f:96:4c:
         0f:af:26:ca:97:a7:1f:50:90:6e:17:0d:5f:23:c3:71:d3:ca:
         9d:96:8a:07:e4:b9:60:ed:15:e6:f5:f0:ae:23:3a:50:14:c9:
         ca:31:de:ba:8b:b7:a5:b3:42:16:4c:61:1b:9e:3e:da:20:3c:
         5f:ad:55:31:0d:b1:08:ea:80:36:e1:a7:87:b0:28:ff:e9:7b:
         e9:c2:05:86:1c:74:ff:66:25:f5:cc:e6:62:bc:85:a2:5c:f7:
         c8:ec:5e:e3:ee:17:b7:19:04:b9:3d:cf:44:87:a6:3f:3b:da:
         47:58:da:af:05:a5:b8:ed:6c:7d:7e:3d:ff:82:7e:2e:e0:01:
         4e:ec:56:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:55:27 2026 by rpki-client