Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
File:                     01UDTjnACz53K-oBQambzhQnrfQ.mft (raw, json)
Hash identifier:          LrCFPKuF0OpNFYv92OBn0bbCU7imgrPA9YpruBP/4k0=
Subject key identifier:   99:FB:AA:61:C8:87:2B:77:77:9C:7C:0D:9B:E3:F0:65:87:1C:10:FE
Authority key identifier: D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4
Certificate issuer:       /CN=A916537A/serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
Manifest number:          26
Signing time:             Thu 21 May 2026 09:02:30 +0000
Manifest this update:     Thu 21 May 2026 09:02:29 +0000
Manifest next update:     Thu 28 May 2026 09:02:29 +0000
Files and hashes:         1: 01UDTjnACz53K-oBQambzhQnrfQ.crl (hash: 3prUwcnsChHleWtDE6k/BiCIycLg7RYCvfZhTY2M7Sw=)
                          2: 58EE9E1227E311F1A1CB4281AA833773.roa (hash: yPIdqNt/dpH6aJ38rvENnZ/i7R2Mb/uLxcqBp1Vco0I=)
                          3: B32ED56A27EB11F1BCE516B1AC833773.roa (hash: Z+wnvZGdyya/p79JNqeHLnyos7VD9XGeNRtgVLhtA0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl
                          rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 09:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916537A, serialNumber=D355034E39C00B3E772BEA0141A99BCE1427ADF4
        Validity
            Not Before: May 21 09:02:29 2026 GMT
            Not After : May 28 09:02:29 2026 GMT
        Subject: CN=6a0eca25-ea87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:92:d1:b0:23:6d:0c:b0:c5:14:48:d5:cd:13:
                    66:4a:f1:cd:25:01:ad:6e:d4:96:8b:bf:9c:63:e5:
                    25:24:92:f2:82:74:bc:bd:2a:45:24:72:81:1c:e6:
                    cc:04:9d:1a:c1:e3:5a:62:7f:88:19:46:9d:18:fe:
                    a7:2a:cd:c7:68:af:72:1f:84:33:17:b1:52:7c:18:
                    0f:c1:35:c9:e6:3b:a6:76:ba:78:e3:3a:81:24:fb:
                    24:5d:66:e8:89:b3:64:b2:57:37:b2:35:45:a4:40:
                    3b:17:08:6a:1f:a1:dd:60:b8:35:4a:65:5d:07:eb:
                    88:8d:fb:84:48:c6:45:40:27:fa:58:2e:4e:a0:67:
                    e1:73:d5:6e:a3:2d:ef:ac:63:42:2c:e6:05:79:7b:
                    77:01:9f:d1:71:be:64:b4:e5:73:4c:7e:80:18:e2:
                    29:c3:5e:87:1b:db:2a:d7:06:d8:b4:60:1f:2d:a9:
                    a5:54:50:7b:ca:99:01:87:a3:ae:45:57:e2:2c:b5:
                    40:d1:c0:f4:fa:2c:00:1d:98:ba:0c:d3:15:7c:5e:
                    0a:b6:8b:07:8f:32:9f:7e:08:ae:28:d9:4a:f0:c2:
                    ac:40:b5:0e:84:08:08:4a:5a:5a:21:eb:54:ee:e0:
                    b8:b0:15:c9:6d:39:ac:e8:e7:3d:00:27:7d:05:b6:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FB:AA:61:C8:87:2B:77:77:9C:7C:0D:9B:E3:F0:65:87:1C:10:FE
            X509v3 Authority Key Identifier:
                keyid:D3:55:03:4E:39:C0:0B:3E:77:2B:EA:01:41:A9:9B:CE:14:27:AD:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/01UDTjnACz53K-oBQambzhQnrfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916537A/9619284E276A11F1A891B17FC2833773/01UDTjnACz53K-oBQambzhQnrfQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:85:64:69:d6:b8:89:47:33:f3:89:76:52:fa:43:d9:b1:70:
         27:c4:10:5d:28:fd:7a:41:2d:44:a5:df:da:d2:7b:43:6e:19:
         12:d0:06:b2:a6:d9:10:ba:72:b2:36:96:fd:8d:f3:42:4f:a3:
         1e:b2:f8:5b:fe:a5:26:ec:bb:63:a2:74:64:1d:4d:d4:2f:ff:
         64:39:9c:a7:ba:4e:f5:95:88:ae:77:a2:df:a9:8f:d1:34:82:
         8e:45:e1:4e:f5:91:59:fe:19:dd:c9:3e:82:70:45:75:d9:a4:
         c1:3d:43:4e:9f:5f:ed:53:71:de:7a:59:be:fc:7c:12:cd:71:
         65:b6:cf:a2:80:36:71:00:52:77:e5:66:ba:bb:8d:be:6b:d0:
         b1:44:9e:3e:ca:c8:cd:b6:96:1b:b9:a9:05:33:84:24:f5:e6:
         44:b0:4d:09:00:65:58:b1:72:1e:e1:62:83:7d:45:b0:9d:b8:
         e0:a8:25:15:8f:66:b6:8f:d3:65:5f:2a:f2:1b:92:cc:7c:79:
         63:75:ea:1b:52:cd:99:cd:86:17:2c:95:e8:a8:8e:e1:de:71:
         82:4b:0b:0b:88:aa:c6:fa:4a:a2:4b:1f:83:d0:d1:6e:9a:d0:
         32:58:57:c0:24:0d:59:dd:f3:b6:86:26:ca:53:08:2f:e0:64:
         67:f9:29:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:24:43 2026 by rpki-client