Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
File:                     UhRr8Q81lfF6kjn1NmTdbAE-L58.mft (raw, json)
Hash identifier:          bDXIcImwEL6efOCDQ4gZSA1T3jGB0wgOcUz4qN2Qazc=
Subject key identifier:   02:B7:D5:DF:32:A5:D7:98:E1:AB:C3:58:FE:D7:B0:6D:8F:F1:FF:36
Authority key identifier: 52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F
Certificate issuer:       /CN=A912B8A1/serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
Certificate serial:       03C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
Manifest number:          03BD
Signing time:             Tue 23 Jun 2026 00:43:46 +0000
Manifest this update:     Tue 23 Jun 2026 00:43:46 +0000
Manifest next update:     Tue 30 Jun 2026 00:43:46 +0000
Files and hashes:         1: UhRr8Q81lfF6kjn1NmTdbAE-L58.crl (hash: xt6mdI5orpaGUBaA2vEzDtOWR9Pcb3hVhcd2d8teJ98=)
                          2: 1A922B26DCD711EC87E30728C4F9AE02.roa (hash: coEyMl+P01v1R2i2iJg1fuZlCEmmrFGit4S5nWc09Hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl
                          rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 00:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963 (0x3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B8A1, serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
        Validity
            Not Before: Jun 23 00:43:46 2026 GMT
            Not After : Jun 30 00:43:46 2026 GMT
        Subject: CN=6a39d6c2-c991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:d4:74:eb:9c:f2:c9:3a:ba:b8:cd:f2:eb:
                    84:cf:1b:8e:19:2b:33:14:06:78:d7:ea:cc:7d:3c:
                    10:a5:09:d2:40:ed:4b:79:bb:48:51:19:1f:08:f8:
                    ae:77:ff:cf:bb:2b:7a:51:68:4f:e6:dc:69:a1:1d:
                    2e:e5:27:2e:27:a8:c9:08:46:10:73:00:1f:91:f5:
                    ad:a7:24:7c:11:7f:b9:2e:a4:11:5c:de:98:39:ca:
                    3c:68:61:af:6f:f8:45:0b:7d:04:2c:77:91:e2:e1:
                    27:8d:a8:38:ad:f5:22:40:2c:5b:08:f9:39:2a:8d:
                    c0:0a:cc:12:6b:60:cf:58:81:8b:79:36:16:6a:86:
                    ae:c5:ff:77:f5:fb:9e:38:c4:56:7a:00:0d:40:2c:
                    e4:e3:e6:82:2b:b8:05:d2:28:70:6c:69:4b:aa:3b:
                    56:c9:49:58:d4:a9:fb:aa:a0:fe:c4:6b:41:a5:6e:
                    08:1f:6e:fb:9d:8f:2e:47:1b:19:de:33:ca:dc:a3:
                    e9:30:f7:f0:ab:54:21:66:e7:8d:ec:c4:6c:f5:95:
                    4d:d6:0b:ca:6b:64:d9:21:3b:32:80:0a:41:69:ff:
                    6c:4a:d7:a6:19:4f:70:89:44:69:6d:c6:f6:38:34:
                    fe:21:55:fd:6e:58:93:5a:52:1a:59:1f:80:be:96:
                    c8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B7:D5:DF:32:A5:D7:98:E1:AB:C3:58:FE:D7:B0:6D:8F:F1:FF:36
            X509v3 Authority Key Identifier:
                keyid:52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:51:ec:13:bd:ea:eb:33:d8:91:ff:97:f2:f4:eb:79:c4:94:
         e5:0c:1f:6e:f0:2f:5d:1c:a4:0a:9d:cd:cc:f7:8b:7d:c9:08:
         10:1b:ed:52:cc:f0:e1:42:7a:a7:71:d0:c8:b2:1c:26:5b:6e:
         01:7e:86:02:c5:7d:b4:72:75:36:2d:51:54:35:af:7a:31:d5:
         5a:0d:3d:78:80:29:87:df:a1:e1:9d:da:35:0b:54:43:45:fd:
         22:c1:e3:16:c8:40:c1:e9:3c:34:4c:fc:f8:97:7d:20:cc:2b:
         f4:d3:fe:22:bc:54:fa:7c:12:f5:7f:5f:76:b3:02:8c:fe:33:
         1e:c4:37:6a:12:07:36:12:af:e4:2d:6c:08:b0:6a:67:29:06:
         27:91:f6:7d:81:8e:1c:b5:aa:20:8f:2e:34:97:c7:67:b4:a9:
         94:e0:d5:a2:13:df:ee:08:ab:01:fc:4f:52:3d:97:4c:f6:35:
         58:67:8e:51:8f:76:e5:53:ad:4c:13:bc:a5:28:ae:20:13:0c:
         5f:c0:f3:ce:58:79:86:7c:0c:8f:36:77:c0:b3:dd:dc:05:44:
         95:3d:9c:37:ac:5a:8f:24:20:63:4b:92:f1:b7:55:a5:8d:9a:
         cf:73:12:9b:07:1e:de:84:cf:98:50:02:7c:ab:6b:ed:1f:21:
         1f:30:42:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:31 2026 by rpki-client