Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
File:                     NU4yud4OVpoZUal7kyAZ9oijUKw.mft (raw, json)
Hash identifier:          7k/K1wL+38yFEcjO0I+ODsOZz0GEGDAL79U576zEFig=
Subject key identifier:   06:BD:AC:54:76:6F:12:31:DB:EE:CE:74:EC:84:0D:38:EA:A7:B8:4D
Authority key identifier: 35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC
Certificate issuer:       /CN=A912442A/serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
Manifest number:          B5
Signing time:             Mon 01 Jun 2026 01:29:32 +0000
Manifest this update:     Mon 01 Jun 2026 01:29:32 +0000
Manifest next update:     Mon 08 Jun 2026 01:29:32 +0000
Files and hashes:         1: NU4yud4OVpoZUal7kyAZ9oijUKw.crl (hash: FHIvaoYSGrgYHyioCrrHtVAmEI/GbgPNgRFKKnPsdKE=)
                          2: 19D89DB656F311F083F53B5DC4F9AE02.roa (hash: sqaF/L7BkPPx01J6zjZJOWgkKgNdgKGuBKXecAoTrY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 01:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=354E32B9DE0E569A1951A97B932019F688A350AC
        Validity
            Not Before: Jun  1 01:29:32 2026 GMT
            Not After : Jun  8 01:29:32 2026 GMT
        Subject: CN=6a1ce07c-48e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:1e:2d:77:7d:33:11:ff:97:6b:26:ab:85:
                    cc:33:89:24:57:73:d3:8c:c8:7e:86:b7:30:96:8f:
                    a6:73:b9:2d:6e:aa:24:5c:6b:e1:1d:7a:2c:d2:72:
                    02:a1:e3:0c:59:36:6f:f1:f0:aa:cb:9e:23:42:e5:
                    16:a5:c4:81:a9:b1:fc:26:20:22:88:56:b2:e9:f0:
                    4e:b5:54:3b:23:f5:00:ca:f8:37:c5:1e:85:6e:56:
                    c8:47:f7:bd:6f:a3:64:1d:2e:53:dc:fe:c7:84:98:
                    34:81:d0:94:e8:71:a6:0b:c9:31:be:11:c2:6f:42:
                    e6:da:95:01:26:48:f1:5f:a4:fa:e1:7a:41:5a:d5:
                    46:0a:2a:ec:2c:de:e2:62:3f:7a:b4:c8:5f:17:28:
                    0b:dc:0e:b9:45:d2:73:f3:d2:76:b6:c7:56:20:a9:
                    8a:90:73:5d:be:60:cd:c0:bd:7d:ba:26:7e:9a:df:
                    98:69:b9:28:5d:b4:e1:43:d9:0c:85:d7:44:a4:3e:
                    2d:f4:2c:ba:c0:c7:a9:8e:31:04:15:93:04:0a:d9:
                    6c:b7:72:b5:ee:6f:14:a9:54:f9:61:d8:f3:44:67:
                    69:81:9a:60:b1:be:a2:78:43:5d:76:ee:5b:55:41:
                    a0:80:51:62:78:de:d9:f3:21:e8:07:63:4b:f9:b2:
                    20:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BD:AC:54:76:6F:12:31:DB:EE:CE:74:EC:84:0D:38:EA:A7:B8:4D
            X509v3 Authority Key Identifier:
                keyid:35:4E:32:B9:DE:0E:56:9A:19:51:A9:7B:93:20:19:F6:88:A3:50:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NU4yud4OVpoZUal7kyAZ9oijUKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/55EBB8584E3B11F09C125547C4F9AE02/NU4yud4OVpoZUal7kyAZ9oijUKw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:01:9c:53:83:18:89:24:4b:83:f8:0e:e7:b5:72:80:12:c4:
         35:2c:3f:47:01:81:43:f2:4f:b7:e4:c9:b7:01:39:0f:00:ce:
         05:8b:7d:36:14:b4:0f:3b:d6:67:28:ca:be:05:24:7e:52:a1:
         e3:75:ea:3f:83:dc:7d:a5:10:82:dc:11:af:1a:c7:a4:30:1e:
         b7:07:95:3d:a8:ff:06:da:d7:67:57:9d:b7:34:41:fb:a7:ce:
         37:db:8e:b5:9f:08:7b:2f:75:df:e3:6d:2b:34:be:43:bb:bf:
         9f:1e:8c:45:0f:1f:c3:02:45:28:ae:fe:9c:17:9c:94:aa:cd:
         46:bc:bf:4f:ac:22:94:57:46:09:53:db:08:31:86:80:d2:16:
         a6:88:78:20:d4:00:34:bd:e5:8f:de:1c:84:c1:9d:40:ec:5d:
         f7:47:db:de:a3:32:ed:77:f8:12:15:1c:21:21:50:fc:13:16:
         cb:41:8e:03:4e:f9:53:e3:69:cd:cf:0a:0c:e0:4b:8a:11:69:
         55:99:a3:8d:6e:f8:f3:04:c0:28:a8:6d:65:ff:32:02:cc:f2:
         78:9e:60:9b:3b:fe:74:50:b6:ed:1c:44:f7:fe:e9:7b:47:50:
         c3:0b:9e:e4:df:30:bd:5f:ec:30:e5:88:a1:34:1c:d7:a5:93:
         15:84:78:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:38 2026 by rpki-client