Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
File:                     uftCI-sDug7mzge0ZgIXr69xbV0.mft (raw, json)
Hash identifier:          ZxdTlPh67GcHpo6X/wZe6PSY3sZelibzBJJJq7VlFi0=
Subject key identifier:   7E:CB:B8:6A:2E:F8:33:30:A3:84:2D:84:B8:CC:AF:C8:6B:6C:CB:B2
Authority key identifier: B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D
Certificate issuer:       /CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D
Certificate serial:       072B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
Manifest number:          0722
Signing time:             Wed 20 May 2026 21:57:02 +0000
Manifest this update:     Wed 20 May 2026 21:57:01 +0000
Manifest next update:     Wed 27 May 2026 21:57:01 +0000
Files and hashes:         1: uftCI-sDug7mzge0ZgIXr69xbV0.crl (hash: vykIXO0A0LDFPW2ptu1Mo8X7Mt7dghZ3osnpOOuTYRk=)
                          2: F5250AEAB57011F0A97B9E77C4F9AE02.roa (hash: cJ6ClHoJnIBJ/+Oi+qhInxZPrOApd8f0+KJb59HyFQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl
                          rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835 (0x72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D5A2, serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D
        Validity
            Not Before: May 20 21:57:01 2026 GMT
            Not After : May 27 21:57:01 2026 GMT
        Subject: CN=6a0e2e2e-c9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:24:1d:c5:b3:4a:28:36:52:80:a6:76:31:
                    bb:58:4f:08:d3:49:db:83:5b:4f:5c:a4:78:47:b8:
                    67:a2:fc:79:f5:d7:c7:4c:9f:03:c4:b1:cf:80:b3:
                    8f:b3:2f:84:9d:38:04:71:54:1e:73:65:61:21:0f:
                    ec:b4:0e:5a:63:75:14:84:a6:34:f0:be:b8:5c:7c:
                    b0:9a:dd:d1:bb:bc:f6:15:c9:60:61:9e:0d:87:af:
                    51:2d:31:89:76:a1:a8:e5:8e:ba:3a:10:cd:8b:77:
                    80:d1:b1:fc:20:14:e6:47:96:44:1a:24:e6:d1:ea:
                    6e:4c:cb:e3:e1:d6:ae:60:2f:3c:17:de:24:97:2d:
                    e4:dc:a1:d8:83:ac:eb:9d:81:47:f6:6b:77:25:51:
                    77:a6:a9:ea:d9:e5:58:b2:f0:61:ff:34:5a:55:02:
                    30:08:d8:50:9f:76:74:de:0e:2f:d3:10:d5:cf:87:
                    8d:ae:2a:21:25:cb:66:11:4c:96:36:99:bb:31:e3:
                    5a:dc:e3:83:95:09:3b:81:dc:05:db:84:58:50:f2:
                    da:fd:70:96:87:0c:ec:c8:7a:d5:4e:dc:8e:80:cd:
                    cf:db:06:aa:05:a9:c2:b0:12:34:ac:fe:2c:16:cd:
                    88:40:7e:6a:14:dd:02:d8:22:0a:57:6b:bf:7a:e5:
                    a6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CB:B8:6A:2E:F8:33:30:A3:84:2D:84:B8:CC:AF:C8:6B:6C:CB:B2
            X509v3 Authority Key Identifier:
                keyid:B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:af:d9:c4:7d:4d:40:7f:ae:a7:a6:9f:d9:30:32:6f:cb:18:
         8b:bb:93:5b:07:79:a8:35:02:b5:c2:68:6d:85:a0:92:fb:96:
         36:f5:68:de:94:33:a9:41:72:92:bc:92:46:b7:cb:86:a8:7f:
         34:18:cb:ff:24:66:e9:37:22:20:4f:eb:c3:04:da:e9:35:7c:
         07:01:79:7d:58:11:7d:1b:a9:8d:4b:60:22:1f:fb:53:5d:92:
         e2:c1:65:49:56:67:fb:de:4b:9d:84:f9:7e:b3:76:6b:c6:02:
         f9:28:40:18:9f:6b:ea:84:f2:a7:8f:14:82:86:c0:35:a9:f8:
         41:a1:a1:3b:4f:ab:43:1e:25:28:1b:43:d3:77:39:53:a4:a9:
         0b:01:51:be:9f:26:a9:b5:c9:da:40:1f:16:b8:99:35:14:03:
         b6:40:3a:7d:2e:df:21:0f:a6:73:c5:af:f0:10:bb:31:c6:8a:
         bc:00:43:e3:4c:a6:29:84:25:5e:08:c0:ed:08:0d:f5:bc:8b:
         a6:b2:eb:e3:40:0f:3b:54:76:2e:95:20:c3:60:ee:71:09:60:
         4c:28:20:fd:cb:b4:50:07:d3:d7:87:e2:7b:e8:97:d2:59:1f:
         79:17:dd:10:b0:1c:3d:7a:2b:fa:30:40:c2:07:d1:a1:ee:0a:
         01:5d:86:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ1QTIxMTAvBgNVBAUTKEI5RkI0MjIzRUIwM0JBMEVFNkNFMDdCNDY2MDIxN0FG
QUY3MTZENUQwHhcNMjYwNTIwMjE1NzAxWhcNMjYwNTI3MjE1NzAxWjAYMRYwFAYD
VQQDEw02YTBlMmUyZS1jOWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuxEkHcWzSig2UoCmdjG7WE8I00nbg1tPXKR4R7hnovx59dfHTJ8DxLHPgLOP
sy+EnTgEcVQec2VhIQ/stA5aY3UUhKY08L64XHywmt3Ru7z2FclgYZ4Nh69RLTGJ
dqGo5Y66OhDNi3eA0bH8IBTmR5ZEGiTm0epuTMvj4dauYC88F94kly3k3KHYg6zr
nYFH9mt3JVF3pqnq2eVYsvBh/zRaVQIwCNhQn3Z03g4v0xDVz4eNriohJctmEUyW
Npm7MeNa3OODlQk7gdwF24RYUPLa/XCWhwzsyHrVTtyOgM3P2waqBanCsBI0rP4s
Fs2IQH5qFN0C2CIKV2u/euWmlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7LuGou
+DMwo4QthLjMr8hrbMuyMB8GA1UdIwQYMBaAFLn7QiPrA7oO5s4HtGYCF6+vcW1d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDVBMi9DMjFBNTM4Njgw
QjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVnN216Z2UwWmdJWHI2OXhi
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VmdENJLXNEdWc3bXpnZTBaZ0lYcjY5eGJWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDVBMi9DMjFBNTM4NjgwQjgxMUVCQkVCMTlFODNDNEY5QUUwMi91ZnRDSS1zRHVn
N216Z2UwWmdJWHI2OXhiVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFa/ZxH1NQH+up6af2TAyb8sYi7uTWwd5qDUCtcJobYWgkvuWNvVo3pQzqUFy
krySRrfLhqh/NBjL/yRm6TciIE/rwwTa6TV8BwF5fVgRfRupjUtgIh/7U12S4sFl
SVZn+95LnYT5frN2a8YC+ShAGJ9r6oTyp48UgobANan4QaGhO0+rQx4lKBtD03c5
U6SpCwFRvp8mqbXJ2kAfFriZNRQDtkA6fS7fIQ+mc8Wv8BC7McaKvABD40ymKYQl
XgjA7QgN9byLprLr40APO1R2LpUgw2DucQlgTCgg/cu0UAfT14fie+iX0lkfeRfd
ELAcPXor+jBAwgfRoe4KAV2GPA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:16:08 2026 by rpki-client