Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
File:                     UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft (raw, json)
Hash identifier:          FFN1c2EVbsGxf/Ko/6gSCXUsdGQ6H83TzjZkGJzSc2w=
Subject key identifier:   BE:F3:78:E6:C3:B2:5B:C9:34:72:31:9B:BE:47:2A:AD:AA:A4:E7:5E
Authority key identifier: 51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4
Certificate issuer:       /CN=A9160DDD/serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
Manifest number:          74
Signing time:             Thu 21 May 2026 07:57:58 +0000
Manifest this update:     Thu 21 May 2026 07:57:57 +0000
Manifest next update:     Thu 28 May 2026 07:57:57 +0000
Files and hashes:         1: UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl (hash: 4HsK5Zk91ZQayRlvlviEEPJ0uX/EfZErAluQSxp1Qok=)
                          2: 575015502DAF11F19D6369A7A5833773.roa (hash: T+vt5kY0tw2A88NgzBRfDGJQYYb/MnavpW5x/gtyd4Y=)
                          3: 6AF2E1BE2DAF11F19CE413ADA5833773.roa (hash: LJvWmBYl/Gn4+TkwFCWffQRxkN5cLI3ct0U1dzazLmg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl
                          rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DDD, serialNumber=51A68EDD2DF2B7BFF67A66109BD739CA9BB238C4
        Validity
            Not Before: May 21 07:57:57 2026 GMT
            Not After : May 28 07:57:57 2026 GMT
        Subject: CN=6a0ebb06-f282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:33:7a:d4:c9:25:ec:2e:2b:c9:3c:d3:d7:
                    c8:94:fe:6f:d7:47:42:c8:c4:c8:d7:8c:cd:1f:97:
                    e2:00:bd:3b:87:34:62:f7:75:a9:9a:4e:b1:f1:b9:
                    8a:1e:55:4b:b6:5c:22:2f:79:09:70:5f:87:66:52:
                    a8:16:4c:bf:61:37:67:95:b0:85:d6:a3:cb:9e:72:
                    a8:9d:2f:1a:4b:62:54:57:bd:35:34:e2:59:26:07:
                    a8:63:d4:69:ac:40:ff:da:e4:5b:1d:4d:89:ae:d2:
                    07:da:99:5a:64:bb:73:1a:2b:70:82:9d:05:4d:0d:
                    c8:e3:2c:04:b5:d3:c9:e9:9f:ae:04:b0:66:3a:28:
                    88:0f:54:b0:7c:ba:bb:68:8c:ca:d4:a0:47:24:61:
                    b2:a8:22:a3:aa:1f:8a:0b:53:03:84:9c:ec:0a:ca:
                    28:ca:5a:42:7b:b6:9d:59:54:77:51:a6:95:2e:70:
                    c6:e0:40:ae:47:ef:f0:62:d5:28:6f:ea:e5:c2:ab:
                    d6:11:6d:5f:3a:0d:78:41:55:05:1d:94:c9:31:3c:
                    81:d5:78:91:4b:ae:60:db:ce:f2:4a:6f:da:08:cb:
                    f5:83:c1:5a:13:0e:93:c2:5b:8d:45:77:1d:6b:bb:
                    cb:97:5c:e1:7a:91:15:54:db:13:fb:33:b3:aa:63:
                    dd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F3:78:E6:C3:B2:5B:C9:34:72:31:9B:BE:47:2A:AD:AA:A4:E7:5E
            X509v3 Authority Key Identifier:
                keyid:51:A6:8E:DD:2D:F2:B7:BF:F6:7A:66:10:9B:D7:39:CA:9B:B2:38:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UaaO3S3yt7_2emYQm9c5ypuyOMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DDD/34824B9EB33C11F0B95D4054C4F9AE02/UaaO3S3yt7_2emYQm9c5ypuyOMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:36:5d:49:cd:b0:52:70:91:be:f7:e2:90:d4:28:2a:ff:2d:
         f5:c8:df:59:5a:b6:f2:cc:06:73:41:3b:22:32:3f:89:a1:c8:
         78:ae:03:00:7b:be:2e:fd:f4:17:64:4e:22:fa:9c:d3:2a:40:
         89:10:ba:7e:db:3f:9e:ba:b9:2f:70:a5:35:9b:78:0d:2b:4e:
         23:e4:1b:6a:9c:9d:94:2d:21:cd:d7:f8:12:c4:33:1c:75:98:
         60:b3:0a:0f:20:c4:e0:3f:ec:9a:f9:ce:59:dc:ac:65:76:1f:
         35:c9:bf:c7:ee:96:9c:25:77:b2:a2:bb:38:0f:d7:13:45:cf:
         4d:c7:bf:16:c2:91:c3:29:f5:ca:a0:cb:39:62:f4:01:74:a7:
         4b:43:8c:ad:5c:0c:96:91:1e:30:1f:13:b1:ea:66:fb:1c:54:
         33:28:87:f5:36:c2:fe:3c:f2:98:0d:35:18:50:b2:be:72:75:
         00:30:96:9f:61:9b:6a:9a:cc:9e:c8:09:b1:81:19:04:6c:f6:
         83:9f:4d:b6:f3:d2:ee:53:47:fc:bb:8f:f7:ce:fe:df:96:2f:
         bf:70:be:a7:cc:5f:5e:db:fe:57:aa:ae:e4:40:22:c1:12:81:
         25:fb:14:12:84:81:a6:9d:d4:45:62:32:ac:95:d8:af:9a:0a:
         d2:8b:6b:50
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MERERDExMC8GA1UEBRMoNTFBNjhFREQyREYyQjdCRkY2N0E2NjEwOUJENzM5Q0E5
QkIyMzhDNDAeFw0yNjA1MjEwNzU3NTdaFw0yNjA1MjgwNzU3NTdaMBgxFjAUBgNV
BAMTDTZhMGViYjA2LWYyODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFzzN61Mkl7C4ryTzT18iU/m/XR0LIxMjXjM0fl+IAvTuHNGL3damaTrHxuYoe
VUu2XCIveQlwX4dmUqgWTL9hN2eVsIXWo8uecqidLxpLYlRXvTU04lkmB6hj1Gms
QP/a5FsdTYmu0gfamVpku3MaK3CCnQVNDcjjLAS108npn64EsGY6KIgPVLB8urto
jMrUoEckYbKoIqOqH4oLUwOEnOwKyijKWkJ7tp1ZVHdRppUucMbgQK5H7/Bi1Shv
6uXCq9YRbV86DXhBVQUdlMkxPIHVeJFLrmDbzvJKb9oIy/WDwVoTDpPCW41Fdx1r
u8uXXOF6kRVU2xP7M7OqY92dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvvN45sOy
W8k0cjGbvkcqraqk514wHwYDVR0jBBgwFoAUUaaO3S3yt7/2emYQm9c5ypuyOMQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwRERELzM0ODI0QjlFQjMz
QzExRjBCOTVENDA1NEM0RjlBRTAyL1VhYU8zUzN5dDdfMmVtWVFtOWM1eXB1eU9N
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVWFhTzNTM3l0N18yZW1ZUW05YzV5cHV5T01RLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw
RERELzM0ODI0QjlFQjMzQzExRjBCOTVENDA1NEM0RjlBRTAyL1VhYU8zUzN5dDdf
MmVtWVFtOWM1eXB1eU9NUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQANNl1JzbBScJG+9+KQ1Cgq/y31yN9ZWrbyzAZzQTsiMj+Joch4rgMAe74u/fQX
ZE4i+pzTKkCJELp+2z+eurkvcKU1m3gNK04j5BtqnJ2ULSHN1/gSxDMcdZhgswoP
IMTgP+ya+c5Z3Kxldh81yb/H7pacJXeyors4D9cTRc9Nx78WwpHDKfXKoMs5YvQB
dKdLQ4ytXAyWkR4wHxOx6mb7HFQzKIf1NsL+PPKYDTUYULK+cnUAMJafYZtqmsye
yAmxgRkEbPaDn02289LuU0f8u4/3zv7fli+/cL6nzF9e2/5Xqq7kQCLBEoEl+xQS
hIGmndRFYjKsldivmgrSi2tQ
-----END CERTIFICATE-----
Generated at Thu May 21 10:19:46 2026 by rpki-client