Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
File:                     uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json)
Hash identifier:          hhuPh6HfYi14cL61S3vgzrxWHWUW4YJgNi//E2s/rws=
Subject key identifier:   EE:90:D7:27:79:39:11:41:16:9B:58:9E:81:F8:6C:C8:73:F1:88:E9
Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB
Certificate issuer:       /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
Certificate serial:       082B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
Manifest number:          1057
Signing time:             Fri 12 Jun 2026 21:04:43 +0000
Manifest this update:     Fri 12 Jun 2026 21:04:42 +0000
Manifest next update:     Fri 19 Jun 2026 21:04:42 +0000
Files and hashes:         1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: dBXrbnj8lL+YqrPlBRVFKsAJGfsFkn/g86+/F+6GxgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl
                          rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2091 (0x82b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB
        Validity
            Not Before: Jun 12 21:04:42 2026 GMT
            Not After : Jun 19 21:04:42 2026 GMT
        Subject: CN=6a2c746b-1d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:9d:2f:1d:b8:f3:d6:bd:a5:66:30:09:95:
                    45:bb:a2:43:91:94:63:07:5c:5d:0b:87:9f:7c:5a:
                    7c:d6:8f:ae:10:d6:74:23:51:84:28:e3:63:46:81:
                    18:1a:d8:3d:12:8c:38:1f:e9:4f:80:24:3d:7c:6e:
                    b1:f2:2d:0b:f9:7d:c2:51:5a:7b:80:c6:90:7b:b2:
                    e4:d3:7c:64:fa:c8:7d:0f:5e:4d:d3:8a:2c:7a:a9:
                    50:06:ed:87:b3:eb:2e:2f:93:fd:25:2b:35:a7:6e:
                    c8:c6:2b:47:18:79:11:87:32:7d:e9:17:5d:d3:b9:
                    fe:cd:b2:ba:95:d3:58:54:90:dd:e0:03:c6:30:c1:
                    94:ca:2e:04:dc:70:6e:70:58:38:ab:53:1b:2e:20:
                    fc:3d:16:aa:f0:05:2b:47:19:24:f2:bb:42:15:7d:
                    c8:f5:ab:49:e6:87:c6:c1:5e:73:a6:87:36:8b:dd:
                    23:a2:68:4a:a1:ad:34:0d:13:40:bb:e2:d4:e1:28:
                    bf:c9:7f:ce:ac:f1:db:b0:30:ca:f9:5e:92:c4:19:
                    b0:05:96:2d:ca:5f:5e:01:27:5f:79:f6:87:c3:13:
                    bb:fe:9f:7e:8a:37:e0:1d:95:f6:76:b4:b6:cd:58:
                    57:35:dd:f8:49:f7:f8:f5:0e:4e:a2:54:c5:bd:e9:
                    ac:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:90:D7:27:79:39:11:41:16:9B:58:9E:81:F8:6C:C8:73:F1:88:E9
            X509v3 Authority Key Identifier:
                keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a9:77:95:76:71:63:d8:38:3f:f6:53:e7:0a:a0:85:9d:2a:
         be:47:0a:2e:34:44:24:89:60:80:9d:81:d5:81:00:ab:30:2f:
         e5:f1:3c:50:44:ae:9e:3c:ea:d4:c2:6d:d1:8c:be:85:88:7c:
         30:4b:33:66:48:12:52:14:d7:d7:33:35:1b:0f:0f:7d:91:45:
         62:5e:10:5b:d4:23:96:7a:7a:66:bf:b6:fd:40:70:b8:08:14:
         19:32:65:6e:c4:8f:ac:eb:f1:7b:8a:ec:1d:29:5e:ef:95:dc:
         d2:ea:53:b3:c4:c4:12:45:72:13:39:90:5f:0e:d5:72:54:e3:
         bb:0f:55:66:85:4c:4e:4a:9a:9a:e6:03:a6:68:0c:93:01:f4:
         60:e7:df:a5:00:94:8a:a9:bf:15:b7:8c:49:34:06:4f:fb:0e:
         3e:b2:d6:73:02:56:f2:02:f6:13:83:71:b0:bf:3e:be:21:98:
         68:92:6d:92:04:38:0c:91:cb:49:24:62:b0:42:2f:3d:c7:49:
         de:1c:da:6c:14:16:6a:04:ff:e6:80:c9:cc:6c:da:81:99:f3:
         28:94:e0:d0:ad:56:f3:8c:57:67:53:cc:19:13:3a:96:a9:ff:
         3a:67:bf:80:0e:47:92:87:43:7f:70:6d:7c:de:18:65:72:7f:
         25:32:80:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:16:12 2026 by rpki-client