Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
File:                     UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json)
Hash identifier:          VgjQ+1FRkMaCOIR1Nr3WM/8iRLI3qxiXX4zBrofKq5w=
Subject key identifier:   1E:AE:41:0A:8F:35:0C:1A:2D:C2:74:B5:AE:EF:49:10:D8:BA:2A:26
Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0
Certificate issuer:       /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
Certificate serial:       0B0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
Manifest number:          0B04
Signing time:             Wed 20 May 2026 19:22:14 +0000
Manifest this update:     Wed 20 May 2026 19:22:14 +0000
Manifest next update:     Wed 27 May 2026 19:22:14 +0000
Files and hashes:         1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: zrSwwLZmPjeRAgrhUwydclr6vtN6tU+tNu38gSMPY2E=)
                          2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: bP8YW/usVEPebr8yo+q/K5uFmrIVy5PiorRcfqJheHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl
                          rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2830 (0xb0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0
        Validity
            Not Before: May 20 19:22:14 2026 GMT
            Not After : May 27 19:22:14 2026 GMT
        Subject: CN=6a0e09e6-7846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:85:eb:d8:cd:b2:6b:4a:db:8b:8f:03:31:29:
                    3c:06:33:bc:3d:e2:12:88:70:e9:a8:d8:11:68:4e:
                    81:42:72:97:cc:61:18:0b:ca:fc:db:78:64:02:b3:
                    51:1f:0c:c5:d5:54:7b:43:48:3e:52:07:29:e8:0d:
                    f4:0d:2a:ac:bd:b3:05:50:4b:db:bc:fb:d0:df:c6:
                    5f:6e:c2:60:6a:24:24:a1:0f:fa:67:10:ec:dd:d5:
                    f5:b3:06:fd:c6:97:4c:bb:4d:3a:17:89:61:fe:a5:
                    03:ef:74:fe:27:d6:49:0f:4e:aa:1d:43:d4:1e:d7:
                    35:ad:c7:39:4b:6f:02:68:48:81:a4:a9:12:e3:f2:
                    52:6d:76:79:02:9b:52:3c:d4:28:4a:17:ee:87:fb:
                    97:ed:a3:73:25:c1:e7:6e:7d:d6:1c:13:74:18:0e:
                    bc:94:35:c2:06:02:c4:fc:65:c6:f6:0c:6e:58:ea:
                    7c:bc:56:6b:0f:aa:8c:96:c4:9c:9e:a3:22:d5:e7:
                    01:21:ed:bc:07:51:fc:6e:a6:88:c6:b7:8d:c1:ee:
                    d2:db:35:45:0e:d1:9d:60:1b:30:3e:55:10:f1:14:
                    3e:c6:28:cc:93:60:26:d4:70:b1:a7:72:7b:16:e9:
                    b0:1c:9e:72:25:c7:d8:8b:3f:82:6d:44:90:36:b1:
                    ad:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AE:41:0A:8F:35:0C:1A:2D:C2:74:B5:AE:EF:49:10:D8:BA:2A:26
            X509v3 Authority Key Identifier:
                keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:78:9f:a9:7c:46:00:83:b7:4e:20:7e:0c:3a:1f:00:8b:51:
         a7:c9:61:db:f8:27:2a:f2:22:a1:a1:b2:f3:8a:66:3b:73:0c:
         db:be:c0:1c:d7:2a:41:b0:32:5a:ba:7f:29:ff:a5:10:72:d3:
         db:12:af:76:2f:39:80:a2:c8:c3:1e:c4:10:3f:42:ae:36:37:
         21:9c:0b:cf:d5:0c:1e:4d:00:0a:74:ce:89:47:9a:d3:66:a3:
         ca:33:26:2f:89:67:fe:88:ce:04:95:42:69:cd:0f:80:f8:58:
         a4:81:c0:a3:ce:a6:7d:4c:80:f8:8c:a9:7a:19:ab:63:c3:c5:
         e9:0f:f5:fe:ea:83:a2:b0:af:a8:78:0d:bb:cd:7e:80:44:27:
         25:d8:f3:0d:4b:20:74:26:22:ac:e9:9b:b8:6b:70:3e:99:e9:
         aa:28:81:36:11:d4:b1:82:e5:8d:14:2e:fb:91:b7:3c:da:c0:
         63:c8:4d:fa:ce:4f:34:90:30:19:66:b6:52:f3:7d:9d:e6:4e:
         07:ba:26:26:de:fb:b5:88:bf:d8:a0:16:7a:f9:19:62:d2:1c:
         56:1c:4c:2d:89:ff:82:e8:6a:dd:8c:96:39:42:08:82:c0:b5:
         50:a3:ad:0c:2f:45:18:84:ff:b7:c2:71:7e:84:98:f2:67:a8:
         11:9d:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:22 2026 by rpki-client