Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
File:                     u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json)
Hash identifier:          eJBMgp/ATJBRF7r2F2ppDKsdb6BbLBFASfMrroXPkLE=
Subject key identifier:   1B:74:ED:9F:4B:A4:67:AF:3C:55:3E:80:08:35:69:17:41:31:4D:B4
Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70
Certificate issuer:       /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70
Certificate serial:       050A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
Manifest number:          0503
Signing time:             Sun 05 Jul 2026 00:04:53 +0000
Manifest this update:     Sun 05 Jul 2026 00:04:53 +0000
Manifest next update:     Sun 12 Jul 2026 00:04:53 +0000
Files and hashes:         1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: Tlk4zc0EMvPsm4sAoVwpFvYUbWe1dLLxusvGM0OoomY=)
                          2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: 9CfqYYl4auSjx9zjrb6Pvsma7el5RM6zCTL8hx3B2ss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl
                          rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 00:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1290 (0x50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70
        Validity
            Not Before: Jul  5 00:04:53 2026 GMT
            Not After : Jul 12 00:04:53 2026 GMT
        Subject: CN=6a499fa5-b16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:23:b7:3d:a5:52:97:e9:c7:8b:df:c1:99:14:
                    78:1a:3c:5b:94:b0:6e:bb:93:1c:5e:8b:2c:99:83:
                    82:d2:a1:6b:1f:61:fe:9e:80:98:6a:7c:81:de:ca:
                    03:68:f6:2d:ef:0e:e2:86:af:7e:fd:98:58:e1:9f:
                    8c:2a:7c:3f:82:3d:73:fe:73:ec:4e:61:d6:a9:f0:
                    1b:ae:c4:52:37:cf:db:78:65:f8:62:76:ad:e0:a0:
                    ac:64:f8:c8:59:fd:1d:ce:98:d4:00:5e:a3:3d:2d:
                    50:6e:0a:67:1a:07:73:72:8b:e2:2f:3d:eb:09:7f:
                    3a:6d:18:ac:f2:ef:52:44:1a:88:9f:25:a7:21:93:
                    54:19:3c:d8:dd:bd:df:97:91:85:02:36:54:97:6c:
                    94:27:cf:c9:90:33:94:71:39:bd:94:67:94:b9:7b:
                    88:97:32:ee:93:a2:d5:2c:38:32:96:87:bf:81:ca:
                    44:a1:75:e2:3f:0b:48:e0:75:28:12:77:99:04:5c:
                    07:04:f3:19:3c:c8:ab:a3:b5:16:6a:27:dc:d3:05:
                    f9:7b:5a:45:64:14:8d:39:c2:45:b6:83:42:43:bb:
                    10:a7:af:02:49:4e:31:81:d5:aa:af:0f:30:c9:f4:
                    ad:ca:70:5c:f5:32:83:1e:5b:64:3a:ba:46:19:7e:
                    eb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:74:ED:9F:4B:A4:67:AF:3C:55:3E:80:08:35:69:17:41:31:4D:B4
            X509v3 Authority Key Identifier:
                keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:9c:f2:e4:32:82:e5:0f:4b:93:31:0d:23:70:5c:c7:37:42:
         e7:bf:f6:a5:eb:a3:f7:ef:48:84:c2:d2:f3:5f:5e:31:9b:3c:
         51:19:76:58:3c:43:97:d1:30:04:c3:78:c8:70:1d:74:8a:53:
         3b:b0:16:86:ce:a9:29:64:d8:5f:fa:d6:00:6c:4c:1c:0d:31:
         70:a7:2d:f2:4f:3f:b7:b5:86:95:3c:f1:39:69:ae:51:fb:cc:
         74:63:9d:cf:5f:6d:b5:29:c1:01:18:9e:87:0a:5d:a2:5f:70:
         0e:80:72:fd:ec:a3:3d:0b:96:e2:94:f3:b5:ec:d1:96:1a:7e:
         2f:32:e4:d5:38:1e:13:71:41:91:26:a5:1e:b9:fa:cc:8b:42:
         d8:1b:45:65:f8:9f:ef:8a:4b:c1:e3:90:b5:bd:da:86:de:76:
         58:75:46:6e:01:0d:eb:cd:10:21:26:2c:fa:5f:0c:7a:d1:31:
         a9:a2:08:38:4b:6d:c5:92:e8:77:c7:d3:ab:54:ab:d0:3d:f0:
         cc:f4:42:d4:4c:bf:8d:ef:44:db:60:b0:8e:6d:b7:0b:21:04:
         e4:29:2c:d2:5c:1a:8b:c7:6c:e8:04:7c:6b:65:a9:24:85:6c:
         98:9a:66:84:86:c7:4f:ac:dd:96:78:c2:ed:f0:b8:07:b3:9c:
         fa:53:7e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:41:03 2026 by rpki-client