Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
File:                     U8Dn8GiqHvADoL7ipdUtvInc37g.mft (raw, json)
Hash identifier:          sY9n84QEa21fa4frO4fYPoSUa8WDICDfu8CvUDuvnjI=
Subject key identifier:   D2:37:08:64:E8:7B:BA:34:41:6A:12:5E:D1:40:E6:9D:FE:D8:0C:E7
Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8
Certificate issuer:       /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
Manifest number:          01D7
Signing time:             Thu 21 May 2026 03:41:18 +0000
Manifest this update:     Thu 21 May 2026 03:41:17 +0000
Manifest next update:     Thu 28 May 2026 03:41:17 +0000
Files and hashes:         1: U8Dn8GiqHvADoL7ipdUtvInc37g.crl (hash: xyAHO2Y+TTFcjG4kYP2pnofITntkPJe5UW3BbHmtJwo=)
                          2: FEB0698C941C11EE89E27567C4F9AE02.roa (hash: a+RIiZqMp/fVJY+AvxuouvP96FqCt281LrQilfoncLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl
                          rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91109A3, serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8
        Validity
            Not Before: May 21 03:41:17 2026 GMT
            Not After : May 28 03:41:17 2026 GMT
        Subject: CN=6a0e7ede-4b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:cb:8c:2e:bb:57:9b:a6:b9:5f:f3:25:c1:
                    4f:e4:42:9c:bc:f7:b1:7b:41:b3:8b:e9:75:4b:99:
                    e3:6f:89:55:49:46:24:ab:8f:a2:08:01:3f:91:bf:
                    44:76:04:d9:d0:7f:8c:f3:6c:b4:ef:4c:c4:09:f8:
                    f4:6f:4e:47:6c:5a:2a:7a:d1:ee:1d:ff:8a:3f:f7:
                    8e:13:50:59:e7:c5:70:88:5f:e9:8e:3b:35:aa:8d:
                    44:5d:7c:b0:f7:ab:02:e9:4c:19:8c:3d:82:30:b8:
                    29:6f:f2:53:72:05:ef:0d:b6:3c:b4:f7:28:ac:4e:
                    33:2b:fd:30:a4:d5:b8:7b:f8:1b:13:0d:32:f5:ff:
                    59:a1:a7:37:9b:d0:a6:13:5b:95:84:60:4a:0e:83:
                    ba:8e:a1:29:de:94:32:de:a7:89:bf:b7:de:1a:0d:
                    b5:b5:49:80:88:8f:e4:06:15:17:c2:66:e2:17:78:
                    04:ab:14:4c:3d:dd:a6:a3:e3:c5:c9:09:bc:e7:af:
                    5b:60:47:b7:88:4c:a4:73:03:31:9d:77:21:7c:cd:
                    48:9f:ca:2b:a2:5f:c4:80:16:3d:43:67:8a:9c:b1:
                    a6:60:56:53:ee:fe:db:4a:96:fb:52:25:9e:00:03:
                    d7:24:6a:52:bc:a1:35:c9:2c:ba:93:2e:52:42:64:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:37:08:64:E8:7B:BA:34:41:6A:12:5E:D1:40:E6:9D:FE:D8:0C:E7
            X509v3 Authority Key Identifier:
                keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:79:b4:f9:a4:9d:9d:70:fc:db:9b:e7:bb:6e:e3:47:66:b9:
         42:38:e0:43:39:bf:cb:be:4c:ff:b8:dc:c4:6e:8f:01:17:85:
         05:aa:e1:1e:5b:5f:3a:18:97:af:43:74:85:70:96:af:bd:07:
         80:1f:65:9d:4c:d8:5f:8a:f2:ce:a7:f4:fb:2b:a3:4e:85:d6:
         c2:9f:92:c7:ef:7e:1f:ed:f6:21:7d:5b:77:ba:00:0d:b7:5b:
         5a:b5:48:31:7c:c1:7f:16:8a:0e:5b:80:f3:b0:89:e0:db:d8:
         3e:b5:ee:54:0b:d9:f1:e4:32:41:d5:dc:78:f7:9d:f0:a0:fb:
         2f:17:e7:50:7a:81:3c:76:cb:6f:8a:d5:e7:a4:c8:75:57:a2:
         10:db:0b:0c:ee:63:e8:60:9b:9b:14:ac:34:64:3a:82:b8:b2:
         1a:1f:05:5e:57:eb:ee:a9:02:98:52:8c:13:85:9f:27:49:30:
         66:b9:18:b2:7f:81:cf:43:e1:dd:28:41:dc:f0:0e:17:9d:2e:
         5b:3e:85:78:dd:4b:29:20:60:e5:28:45:44:84:51:23:ef:2c:
         07:2d:b3:78:cb:e0:3d:13:9c:95:ee:0f:1f:53:26:db:12:e4:
         8d:ae:4e:9a:8d:f4:33:bd:f5:96:c4:7c:06:15:16:d1:bd:c1:
         4f:5b:32:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:04 2026 by rpki-client