Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
File:                     UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft (raw, json)
Hash identifier:          EMCibtHKQcp2KZ9mrEGDJ/arFOaFuOT0eetulk21jfk=
Subject key identifier:   40:F3:F2:56:06:5E:16:F0:03:73:6E:86:AF:8F:AB:FE:57:BA:0F:84
Authority key identifier: 50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5
Certificate issuer:       /CN=A91F65FA/serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5
Certificate serial:       0357
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
Manifest number:          0350
Signing time:             Sat 13 Jun 2026 00:58:06 +0000
Manifest this update:     Sat 13 Jun 2026 00:58:06 +0000
Manifest next update:     Sat 20 Jun 2026 00:58:06 +0000
Files and hashes:         1: UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl (hash: 0lArG9ijVt+0j8fklICG+TyTC/foRJmAejefDybPI6o=)
                          2: 84365644062E11EDA95B3143C4F9AE02.roa (hash: gqN7UWMyX0CPgI9L0kIUiJFyQbeTEOCGXadnvfS1PPo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl
                          rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855 (0x357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F65FA, serialNumber=503B9241464DF97D2A0099963E633E1087EFDDC5
        Validity
            Not Before: Jun 13 00:58:06 2026 GMT
            Not After : Jun 20 00:58:06 2026 GMT
        Subject: CN=6a2cab1e-c77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:a0:76:54:b6:cc:d9:bb:c0:02:a4:2f:bf:
                    76:17:d7:9d:a9:09:30:4e:78:39:a3:15:18:76:62:
                    82:13:1b:97:c3:42:35:b4:d8:1a:a8:9c:32:e5:12:
                    15:4b:b8:4c:a9:65:6a:7a:2f:c1:d3:d9:e6:0c:5a:
                    28:72:6f:e7:30:3f:8c:b4:8c:c5:56:d1:7b:69:0e:
                    8f:82:19:fe:9e:35:f8:27:06:2e:43:bd:92:2c:58:
                    ed:7a:34:41:c1:77:f9:76:6d:a5:c6:61:16:af:9a:
                    6e:e6:d2:8d:99:3c:8a:35:d9:8c:42:77:8f:ca:1e:
                    04:91:e5:d1:6f:e8:ce:7b:65:60:db:cf:f9:25:53:
                    b0:37:10:be:97:0b:45:e3:1f:43:d6:4c:28:62:44:
                    46:4a:4f:e9:73:b8:7b:80:84:12:65:f3:eb:c7:52:
                    82:8c:33:5b:c1:14:1a:2d:b7:a3:66:01:48:a6:aa:
                    2c:70:6c:f7:78:04:77:29:15:c7:51:b8:0b:cd:58:
                    0f:07:06:6d:3d:c7:e7:34:07:b9:da:da:4e:3a:e8:
                    04:61:dd:43:17:ec:93:09:59:ac:18:c3:32:e0:a5:
                    22:91:de:75:e9:c0:64:3c:87:8c:f5:a7:13:09:24:
                    d6:be:5c:0b:35:49:50:a1:01:25:c6:aa:8b:a6:d6:
                    60:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F3:F2:56:06:5E:16:F0:03:73:6E:86:AF:8F:AB:FE:57:BA:0F:84
            X509v3 Authority Key Identifier:
                keyid:50:3B:92:41:46:4D:F9:7D:2A:00:99:96:3E:63:3E:10:87:EF:DD:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDuSQUZN-X0qAJmWPmM-EIfv3cU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65FA/9A702622062B11EDAA1EEC3DC4F9AE02/UDuSQUZN-X0qAJmWPmM-EIfv3cU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:19:9a:c3:07:8d:e5:a4:2c:0e:05:ca:29:b4:78:cc:78:6b:
         8d:d2:1e:bf:cf:a7:8c:6b:71:9f:9c:d9:2d:7b:71:b2:bd:f4:
         78:79:7d:67:da:3b:ba:13:6f:78:57:79:24:41:8f:57:d7:a5:
         e2:16:16:a6:20:df:47:fd:b0:b0:84:02:75:fc:99:59:a6:38:
         25:54:94:21:2f:ed:da:81:f0:c6:e2:04:3a:1d:0f:4c:49:a7:
         e8:68:5d:27:64:59:18:f6:e0:d7:ce:c6:28:e9:ac:f5:d1:39:
         98:f5:0b:45:88:72:81:24:55:5b:2c:3b:e7:04:12:97:f6:81:
         bc:3e:0b:6b:a0:c3:f2:32:c1:c1:f7:3d:ac:a3:48:0a:c2:e7:
         4d:7d:a4:69:bf:42:08:37:83:73:5d:78:bc:25:ea:94:37:e7:
         09:a8:27:09:93:0b:c6:d4:95:35:d0:63:77:83:65:b4:7a:71:
         1b:0d:8b:f9:89:7d:20:45:58:8d:d4:60:12:52:66:c9:e0:f0:
         e6:63:25:29:7c:48:26:40:68:68:40:51:1e:2a:20:99:5d:51:
         c5:60:c8:53:ea:45:79:16:02:6a:f2:50:2b:66:58:30:8e:e6:
         0f:3e:ab:aa:a8:91:f0:31:6d:42:26:fb:12:dd:03:1e:58:9c:
         ad:d4:aa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:49:39 2026 by rpki-client