Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
File:                     UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json)
Hash identifier:          GtqNqum+x3EnpvrQP/v8YQizKOOf1LVsHWPOWTJB7sU=
Subject key identifier:   BD:32:1C:18:77:A4:FC:C6:6F:38:EB:A5:A5:96:7A:25:56:D8:20:40
Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
Certificate issuer:       /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Certificate serial:       02E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
Manifest number:          02CB
Signing time:             Thu 21 May 2026 01:30:00 +0000
Manifest this update:     Thu 21 May 2026 01:30:00 +0000
Manifest next update:     Thu 28 May 2026 01:30:00 +0000
Files and hashes:         1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: TwNh9o+Xn+B9nEtz4NGB1NY9BGT/iG05daVA44zZRWE=)
                          2: B288EC9C870811F0A371DD81C4F9AE02.roa (hash: 0BOrDnShuL/QhrZ0gDHGyMtGSNIca2cAczupvc+0+QU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
                          rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 737 (0x2e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
        Validity
            Not Before: May 21 01:30:00 2026 GMT
            Not After : May 28 01:30:00 2026 GMT
        Subject: CN=6a0e6018-0998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ac:41:79:52:18:4a:ae:47:67:9a:9d:f8:bf:
                    bb:57:09:18:50:73:0c:65:29:4b:27:9f:a4:0d:cc:
                    b9:6c:02:32:6d:22:39:aa:6b:8d:f2:04:0f:a5:5a:
                    3b:29:5d:ef:7c:89:3e:97:6a:72:3f:a2:62:91:1d:
                    0c:d3:fb:93:61:13:3d:31:d2:8a:54:03:43:82:93:
                    31:fc:81:93:17:fa:43:80:41:fb:9c:cb:f5:6d:01:
                    94:e9:af:0f:63:d1:f8:0d:b1:45:b2:df:5a:f7:19:
                    61:2c:ba:63:2c:51:cf:24:3e:cb:32:74:85:f7:c5:
                    38:10:8b:51:20:1c:5e:93:97:78:48:ea:f9:30:82:
                    46:71:94:58:98:86:66:b6:ca:7d:76:2e:06:3d:47:
                    99:5b:10:d2:cd:86:dd:16:f0:1b:7f:dc:9e:55:a3:
                    2f:84:b0:aa:93:85:34:67:c7:f6:5e:4c:5b:4e:ee:
                    52:eb:1f:2f:72:36:f4:51:c5:ae:f3:72:fb:4c:47:
                    20:90:74:63:25:0f:03:97:40:23:50:dc:e7:99:f4:
                    59:4e:b5:32:34:40:88:c8:f5:59:bd:89:7e:bd:1d:
                    86:0c:84:12:1e:5f:f9:db:d5:f8:20:ea:ba:79:92:
                    8f:23:74:b6:87:0e:c5:45:fe:0f:23:72:54:ed:9d:
                    5b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:32:1C:18:77:A4:FC:C6:6F:38:EB:A5:A5:96:7A:25:56:D8:20:40
            X509v3 Authority Key Identifier:
                keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:54:37:ff:ef:98:e8:71:66:8e:12:e4:d1:31:97:eb:67:e6:
         fd:c4:a5:00:8c:7f:bf:37:63:33:3c:bb:d3:9f:60:77:47:e3:
         1d:d8:8e:25:21:51:dd:4e:38:f7:73:30:da:f0:34:f5:ec:d4:
         8e:c4:ea:36:1b:8d:7c:ee:70:b1:83:6d:f2:eb:94:fe:c7:67:
         50:17:ce:59:59:ab:c6:0e:54:69:2d:36:0d:5a:3e:83:c6:fe:
         c7:be:33:f0:12:e9:d3:4f:c5:86:eb:6f:67:15:18:a7:7b:55:
         44:c6:6b:c7:6e:35:b3:d3:af:7e:f0:05:aa:c9:de:0f:c8:2c:
         70:37:a0:5f:14:19:35:70:d7:87:e2:62:9e:25:b4:e6:79:6b:
         08:24:e2:2d:12:5e:3d:c1:38:fc:90:43:ef:79:fa:f3:94:b2:
         12:86:3c:7a:24:dc:9a:2a:9f:bb:9c:3b:61:f7:8f:3b:5a:5a:
         ed:7a:98:f5:dd:ab:b1:6d:0e:5d:45:e9:aa:6f:68:48:ae:f6:
         78:e0:97:02:64:32:bf:36:b5:cf:e9:0b:eb:a9:d7:c5:20:cc:
         67:9a:c4:ca:cd:7d:9f:98:6d:78:7e:cc:23:a0:b7:50:6d:40:
         ba:5d:2f:45:86:66:fa:70:92:5c:b1:84:8e:48:8c:92:85:bf:
         2c:4e:65:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJBRDYxMTAvBgNVBAUTKDUzMzJGOUFGMzA1MkNGM0Y4NUVBQkREMEFBRDY4MTUy
Mzk1MkU2NTYwHhcNMjYwNTIxMDEzMDAwWhcNMjYwNTI4MDEzMDAwWjAYMRYwFAYD
VQQDEw02YTBlNjAxOC0wOTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7KxBeVIYSq5HZ5qd+L+7VwkYUHMMZSlLJ5+kDcy5bAIybSI5qmuN8gQPpVo7
KV3vfIk+l2pyP6JikR0M0/uTYRM9MdKKVANDgpMx/IGTF/pDgEH7nMv1bQGU6a8P
Y9H4DbFFst9a9xlhLLpjLFHPJD7LMnSF98U4EItRIBxek5d4SOr5MIJGcZRYmIZm
tsp9di4GPUeZWxDSzYbdFvAbf9yeVaMvhLCqk4U0Z8f2XkxbTu5S6x8vcjb0UcWu
83L7TEcgkHRjJQ8Dl0AjUNznmfRZTrUyNECIyPVZvYl+vR2GDIQSHl/529X4IOq6
eZKPI3S2hw7FRf4PI3JU7Z1bPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0yHBh3
pPzGbzjrpaWWeiVW2CBAMB8GA1UdIwQYMBaAFFMy+a8wUs8/heq90KrWgVI5UuZW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkFENi9ENjRGNEU5QzNB
RjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6LUY2cjNRcXRhQlVqbFM1
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V6TDVyekJTenotRjZyM1FxdGFCVWpsUzVsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkFENi9ENjRGNEU5QzNBRjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6
LUY2cjNRcXRhQlVqbFM1bFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIVQ3/++Y6HFmjhLk0TGX62fm/cSlAIx/vzdjMzy7059gd0fjHdiOJSFR3U44
93Mw2vA09ezUjsTqNhuNfO5wsYNt8uuU/sdnUBfOWVmrxg5UaS02DVo+g8b+x74z
8BLp00/FhutvZxUYp3tVRMZrx241s9OvfvAFqsneD8gscDegXxQZNXDXh+JiniW0
5nlrCCTiLRJePcE4/JBD73n685SyEoY8eiTcmiqfu5w7YfePO1pa7XqY9d2rsW0O
XUXpqm9oSK72eOCXAmQyvza1z+kL66nXxSDMZ5rEys19n5hteH7MI6C3UG1Aul0v
RYZm+nCSXLGEjkiMkoW/LE5l8g==
-----END CERTIFICATE-----
Generated at Thu May 21 11:15:34 2026 by rpki-client