Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
File:                     Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft (raw, json)
Hash identifier:          JhFX985MQ8hWD8D0Ii+/zGjMZliUVYzy3woc4X5eI1c=
Subject key identifier:   A4:8E:60:36:8B:A2:26:5B:1A:C1:16:4C:22:FE:03:EE:85:17:AE:8A
Authority key identifier: 52:5E:D5:31:69:81:A5:0B:DC:02:AC:5B:D3:C5:AF:D4:11:61:49:7F
Certificate issuer:       /CN=A9159558/serialNumber=525ED5316981A50BDC02AC5BD3C5AFD41161497F
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
Manifest number:          0E
Signing time:             Tue 19 May 2026 08:59:44 +0000
Manifest this update:     Tue 19 May 2026 08:59:43 +0000
Manifest next update:     Tue 26 May 2026 08:59:43 +0000
Files and hashes:         1: Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl (hash: btRws1pnWt/VcSqtI1ZSVrRh3b9QI0+P228prHCPwgw=)
                          2: C8CE775E435C11F18454B6E5B6833773.roa (hash: plcT4dsgJqUos2P4lyFZDl4QJQLWQP6vKlNauLCZCuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl
                          rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159558, serialNumber=525ED5316981A50BDC02AC5BD3C5AFD41161497F
        Validity
            Not Before: May 19 08:59:43 2026 GMT
            Not After : May 26 08:59:43 2026 GMT
        Subject: CN=6a0c267f-36be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5f:5d:70:02:3b:38:f4:d4:2b:bb:6d:96:a0:
                    17:f7:fa:c3:f7:36:af:ad:0b:49:f8:f2:57:85:68:
                    5d:a2:3a:73:12:29:1b:15:64:12:0a:49:30:c3:bf:
                    5d:95:5e:73:e9:2a:c5:62:2b:d2:ff:17:9a:71:c9:
                    63:77:50:6d:6e:c8:65:69:1c:1f:47:d3:06:8b:4e:
                    fd:ad:e8:a2:70:3f:4f:d4:1e:23:f4:e9:33:44:00:
                    e1:98:58:2b:4d:0d:3d:3c:8e:6c:1e:6d:81:cf:c4:
                    f6:87:e5:aa:6b:9c:48:3c:f3:a3:94:4f:3a:34:42:
                    e9:31:e2:9f:d3:71:13:06:a7:f4:0f:58:17:b7:a9:
                    7a:17:d8:fe:e6:96:87:1f:fc:e8:15:2e:80:ac:90:
                    1b:9f:9c:ed:cf:65:4e:da:5e:67:d4:c5:d2:22:33:
                    72:dc:ac:93:34:74:e4:c2:4e:d7:93:d1:d6:8a:0f:
                    63:39:df:ed:d1:49:2e:e7:6d:48:70:d0:da:e2:dc:
                    b4:47:a7:39:50:3f:00:a8:9a:6e:d0:7c:36:f5:ca:
                    ce:c6:43:da:e9:ed:ff:f5:02:04:3c:1b:fb:05:bc:
                    25:86:a6:8e:4d:72:51:1e:3a:c9:af:82:a7:dc:27:
                    ff:77:39:64:33:0e:4a:ca:71:ae:26:d4:5b:6a:20:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8E:60:36:8B:A2:26:5B:1A:C1:16:4C:22:FE:03:EE:85:17:AE:8A
            X509v3 Authority Key Identifier:
                keyid:52:5E:D5:31:69:81:A5:0B:DC:02:AC:5B:D3:C5:AF:D4:11:61:49:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:3c:45:7a:9d:28:16:ad:16:8a:94:65:c0:a0:2e:81:87:cc:
         89:6b:79:3b:a1:e1:5e:c3:45:73:f9:75:26:ef:17:73:ad:f5:
         e7:f4:d4:24:8f:29:01:63:c8:29:3b:76:3d:0f:8f:3c:4c:bc:
         d1:54:63:dd:1a:06:6a:4a:24:b4:17:2d:6a:94:fc:c1:0f:d4:
         ca:31:1f:4c:b7:f6:f2:b0:4b:b1:dd:3b:11:ed:ff:92:06:48:
         d5:6c:4d:99:04:41:1b:99:12:b9:df:b1:0c:72:20:41:64:d3:
         af:f3:35:44:7f:a0:bc:b2:b3:df:5e:82:5d:26:f2:84:a6:52:
         6f:9b:81:8f:8a:4d:f6:47:c3:9e:e2:a8:f4:c5:48:01:a7:cf:
         b0:bd:7c:98:7c:6e:8f:3a:22:62:dd:58:64:93:b8:47:32:88:
         8e:10:b9:91:58:ad:d9:dc:f9:d6:cf:7a:48:fe:be:bf:2a:e7:
         e6:12:80:15:cf:ac:0f:9d:fc:8c:19:95:ac:63:f9:f8:09:49:
         7b:f4:90:61:19:b2:3c:84:8a:0f:9d:6f:06:30:12:45:79:02:
         e5:41:7d:2f:ce:a8:84:be:87:ef:d9:cf:5e:fb:9d:1c:a8:df:
         c5:c6:b3:8b:b4:e0:50:8d:45:6d:5e:1d:06:b2:a8:80:5d:94:
         ea:8b:a6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:29 2026 by rpki-client