Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
File:                     UHF-n6DMN8QGf4M-kPt-chDzxZM.mft (raw, json)
Hash identifier:          TMSv+HHhPLN8X/dNSFtTQe4fyKPfwdfkAuDuM2XwYgk=
Subject key identifier:   41:99:71:7E:F5:16:78:F3:88:23:4B:3E:F5:46:69:17:86:FC:99:1F
Authority key identifier: 50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93
Certificate issuer:       /CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593
Certificate serial:       0823
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
Manifest number:          081A
Signing time:             Wed 20 May 2026 21:09:28 +0000
Manifest this update:     Wed 20 May 2026 21:09:28 +0000
Manifest next update:     Wed 27 May 2026 21:09:28 +0000
Files and hashes:         1: UHF-n6DMN8QGf4M-kPt-chDzxZM.crl (hash: ehRL0IKyQ3+S5pfPfmLGBVLJ1SDWqlLakIF9ncYzZxo=)
                          2: BDAC3ACA1E7111EB93874336C4F9AE02.roa (hash: Fs+wJCtSlXLyDLA5Jgh5KCmg3uh+8nfqlZjrLNA7VBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl
                          rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083 (0x823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917552B, serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593
        Validity
            Not Before: May 20 21:09:28 2026 GMT
            Not After : May 27 21:09:28 2026 GMT
        Subject: CN=6a0e2308-8dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:21:41:a5:2f:1f:03:b6:72:aa:b7:6c:c8:
                    07:dc:82:f4:f4:c0:22:7a:ed:7f:4d:15:f6:07:37:
                    af:c1:67:c0:ea:39:25:33:e7:18:08:11:3f:39:9f:
                    a5:a4:87:4c:03:3a:e7:45:d9:33:5f:ef:ba:70:0e:
                    12:53:d6:e4:21:b0:4d:ac:99:7c:5f:ec:e4:98:63:
                    12:34:27:63:af:b5:2d:f3:1f:8f:95:b7:75:98:f6:
                    a7:77:86:f7:a6:90:f0:0a:69:c4:2d:2f:30:23:af:
                    74:e9:09:11:a5:53:21:1f:97:57:25:0e:80:79:27:
                    64:a5:a9:bd:83:25:ec:a0:d6:67:32:d2:c6:c0:83:
                    14:06:19:92:c6:96:13:8f:fd:03:36:c1:6d:74:48:
                    49:39:b4:6c:7c:9c:07:10:7b:77:03:53:df:4e:7c:
                    bc:f4:6b:5f:8e:bd:5e:1a:5d:c9:e9:b0:5d:dc:dc:
                    82:03:1e:d6:6a:ee:73:d6:8e:4f:25:b3:08:4c:7e:
                    5b:b7:d0:04:ed:ac:a0:6b:b2:e8:1c:38:86:b1:1a:
                    9a:30:22:67:f4:c4:66:db:a2:57:8b:cd:ec:4a:ca:
                    f7:3d:f9:64:ea:20:b8:fe:6c:f5:29:b6:8a:5c:fa:
                    9d:61:61:69:10:d9:90:d7:96:e1:2c:68:b5:1b:80:
                    08:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:99:71:7E:F5:16:78:F3:88:23:4B:3E:F5:46:69:17:86:FC:99:1F
            X509v3 Authority Key Identifier:
                keyid:50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ec:ae:d5:3b:5e:74:d7:4e:c5:7a:ae:44:5e:d5:ca:8e:99:
         9c:52:17:b9:c4:65:e0:e3:30:40:9c:c9:38:19:32:29:06:a5:
         a9:fe:e5:dd:44:b4:68:e4:94:de:3e:01:46:71:58:ab:46:cb:
         75:d6:8d:d2:c0:af:9d:84:d9:c9:06:ad:e3:6a:ce:c8:ac:e7:
         54:aa:41:25:55:1a:25:0f:88:4b:3f:2f:93:9d:11:63:10:2f:
         66:37:f1:22:72:29:6d:8f:32:6c:93:23:68:5c:9a:60:73:69:
         10:ce:91:98:eb:1a:e3:43:93:c0:78:1e:b3:ce:b1:4b:22:43:
         14:94:4a:90:d7:de:a0:08:86:0e:d7:e9:bb:06:6a:b8:86:a4:
         49:98:9f:6e:70:3d:32:2c:aa:48:3e:3c:3d:2a:e9:df:ba:b6:
         ad:08:07:77:dd:61:8e:b0:45:14:23:21:4d:fa:87:bc:01:eb:
         51:ce:57:57:a2:2b:e6:80:1f:d9:3d:8f:fc:3e:a6:0f:44:39:
         ec:2a:c1:47:27:a5:6b:11:0f:10:44:d0:b2:1b:91:76:88:c5:
         ef:36:88:ec:a7:90:d8:a6:a0:5e:4c:a4:87:67:b8:32:11:54:
         c0:03:77:a2:04:a9:37:45:cf:69:17:2b:f3:0a:d3:dd:d1:81:
         b0:1f:1c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:03:13 2026 by rpki-client