Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
File:                     uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json)
Hash identifier:          cb9GBixglV3x/qZ8U4ApUAE7JWmviw7lzmOiQWlWG7c=
Subject key identifier:   F9:AF:C0:44:DF:6A:74:B3:BF:F3:FE:96:18:F2:5E:A0:2D:C7:10:F7
Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36
Certificate issuer:       /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
Manifest number:          0125
Signing time:             Thu 21 May 2026 05:54:10 +0000
Manifest this update:     Thu 21 May 2026 05:54:10 +0000
Manifest next update:     Thu 28 May 2026 05:54:10 +0000
Files and hashes:         1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: Cjbf/YvB1cRMBveBBbrOMnyxtRJX/vC2DfgLtw62Z0I=)
                          2: B035E67615D311F09BAD2971C4F9AE02.roa (hash: FXgcqSwIcOtjJXrtuwb30InUYea2PVbqiaYnf/D8IVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
        Validity
            Not Before: May 21 05:54:10 2026 GMT
            Not After : May 28 05:54:10 2026 GMT
        Subject: CN=6a0e9e02-e32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:b9:a9:af:d8:71:e2:34:e9:11:61:af:02:
                    09:70:af:09:e5:3a:1b:0e:64:05:62:cd:49:a1:d2:
                    f7:df:79:b1:34:2b:e7:89:31:59:12:23:34:7f:de:
                    6f:ca:06:68:3f:69:f5:ad:97:66:78:4c:09:df:68:
                    8e:76:b8:bc:12:0f:8e:a3:7b:e8:7c:bf:d7:03:81:
                    ed:e0:06:ad:4e:90:5d:1c:d1:48:15:72:f9:c0:00:
                    11:15:42:96:af:ea:a4:a9:55:b3:c1:3f:2c:ed:49:
                    43:75:c1:b9:a5:5d:f8:9a:9b:3f:fa:6b:ca:e4:01:
                    4a:de:75:a5:01:7c:1a:d6:0c:3d:3c:af:e9:e7:d5:
                    6d:d5:b6:e2:81:1c:f9:1d:95:71:b4:18:37:a0:94:
                    2a:1f:9e:17:bc:56:e4:7f:34:bb:2c:5e:fa:bb:71:
                    03:0a:23:10:4b:c4:c6:d8:f9:85:4c:5f:41:20:11:
                    ec:37:09:57:a2:45:c9:90:98:fe:ce:d0:56:09:47:
                    54:55:5a:6e:9a:61:e1:03:ac:dd:50:b6:71:1a:64:
                    ea:67:14:49:e6:91:1d:e8:73:03:f5:7b:77:d1:f5:
                    7b:b3:4e:51:46:d6:99:22:82:f8:23:d8:c5:c2:c0:
                    f4:8d:af:3e:ca:81:9d:d5:ce:be:9e:d0:ff:94:ce:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AF:C0:44:DF:6A:74:B3:BF:F3:FE:96:18:F2:5E:A0:2D:C7:10:F7
            X509v3 Authority Key Identifier:
                keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b0:69:5a:bc:c1:76:c8:c8:e8:c4:e4:15:e0:21:f1:8b:5c:
         55:45:9b:c2:15:af:9f:40:d6:a6:47:f2:8c:f9:c1:07:d0:db:
         c1:ca:cb:f1:6c:6c:1d:20:d9:53:27:b6:2d:2b:c6:27:c6:44:
         4e:40:97:10:9c:20:40:50:92:15:4e:6b:bf:a9:27:cf:eb:3f:
         3a:05:a0:e1:2c:2d:f0:68:ed:0f:2f:05:dd:e7:0a:c5:0e:da:
         a8:e3:0d:7f:40:1f:00:33:38:0e:5a:ae:72:5c:d7:37:f6:e7:
         3a:8e:b2:e6:6f:96:78:0d:2d:6d:bc:6c:a2:ec:17:dd:6b:65:
         2e:e6:1d:7d:2e:f6:10:35:aa:f6:4e:ad:96:53:06:eb:e9:44:
         f7:73:3c:ed:17:58:52:59:3a:60:9e:2a:f5:97:e7:d8:c6:5a:
         5c:c4:15:de:f6:5e:3b:c7:ad:63:e2:e6:b3:ae:98:21:fc:99:
         a9:c8:4d:aa:7c:a6:9e:02:df:7b:07:fd:c9:9d:ba:3f:96:92:
         bc:6a:72:cd:2a:a2:c0:69:29:f2:5f:9a:36:b3:00:e7:df:c1:
         fc:09:77:45:1f:9c:46:cd:7e:c4:65:02:bc:c8:8f:a3:de:99:
         15:c3:42:79:68:de:55:c4:16:1b:b0:d7:ea:13:93:db:c3:6e:
         85:37:d2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:22 2026 by rpki-client