Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
File:                     _UnAZPyj6S3swYqPUElLIfwB8lY.mft (raw, json)
Hash identifier:          MlsxT/zW4e+edwpgupO159yIzLtsFv7A69kPHd/Mbps=
Subject key identifier:   30:41:E4:E8:2A:1A:E2:1A:10:B7:5C:01:3A:9D:F1:36:AF:2E:6F:9F
Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
Certificate issuer:       /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
Manifest number:          0250
Signing time:             Thu 21 May 2026 02:28:11 +0000
Manifest this update:     Thu 21 May 2026 02:28:11 +0000
Manifest next update:     Thu 28 May 2026 02:28:11 +0000
Files and hashes:         1: _UnAZPyj6S3swYqPUElLIfwB8lY.crl (hash: 09slRTmStN5qUgb1MZ3V7jZ1pqEfYpRpwdyVO6WJohE=)
                          2: 05F11BACDF4A11EDA4190947C4F9AE02.roa (hash: KoscC2+CKPk9KEZZ95MIfhzhcgEnyjRIFFpZQcedXxs=)
                          3: 358556D2D98F11EDA9A38028C4F9AE02.roa (hash: /K4XbNVu4etnNSZ7BxaN1k4jj6OscZNd232IO+CgOm0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl
                          rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91934DE, serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
        Validity
            Not Before: May 21 02:28:11 2026 GMT
            Not After : May 28 02:28:11 2026 GMT
        Subject: CN=6a0e6dbb-bf50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:d4:97:d6:e8:7e:f5:ec:1e:55:0f:12:27:
                    75:e0:7b:dd:b7:a2:b0:54:04:3d:db:05:37:5d:a8:
                    4b:d0:45:b3:b7:56:1b:82:94:f5:b1:f4:83:0c:62:
                    ea:66:12:4c:5b:04:c0:1e:8a:b2:89:17:8d:92:c5:
                    5b:4a:69:85:dd:2a:dd:2b:0a:51:0f:dd:cd:25:82:
                    c7:82:4a:44:02:bf:3f:fd:d5:fd:ef:43:ed:31:8b:
                    d1:7c:14:08:7e:a4:26:72:2f:03:07:25:89:8a:96:
                    86:92:9e:aa:ce:49:68:6b:71:2b:ab:30:b6:93:da:
                    09:c3:59:6c:66:5a:14:65:81:ed:b4:68:c1:db:94:
                    47:59:80:c9:e0:ac:ca:1d:3f:80:e6:d7:24:b7:2a:
                    b3:b3:ca:21:e1:66:76:f0:cf:66:9b:97:0a:93:49:
                    f6:20:0a:d4:27:5d:bc:33:04:e1:35:a6:fd:d0:b9:
                    68:3d:56:2e:e4:83:09:46:bc:22:bf:6e:70:88:3f:
                    f0:67:b6:2e:bb:10:0a:6b:aa:87:dc:8a:84:a1:22:
                    66:7b:03:18:2a:1a:74:6e:fe:1a:05:d5:16:20:e1:
                    1e:83:e6:1e:bf:8a:fe:88:f3:b0:1b:19:56:13:24:
                    ec:e9:2f:e1:a9:aa:c7:7c:d8:b1:4a:75:f2:f0:e9:
                    ea:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:41:E4:E8:2A:1A:E2:1A:10:B7:5C:01:3A:9D:F1:36:AF:2E:6F:9F
            X509v3 Authority Key Identifier:
                keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:bc:ef:da:eb:6c:e8:1f:d3:51:34:6c:69:ec:6e:7a:46:d4:
         b6:5f:22:0a:de:da:ee:e9:74:fa:f3:73:a5:59:58:4a:62:8c:
         bd:b3:6a:70:39:49:98:3e:3e:f3:25:16:60:4b:15:f8:a4:e0:
         07:7c:ec:7b:69:90:ec:cb:36:5f:ff:32:e9:a6:4d:8f:08:22:
         7f:a2:53:46:5f:66:71:04:82:0e:e2:33:3d:d2:d9:27:f4:95:
         fd:e2:4a:e5:96:92:7d:b2:c8:6c:ef:42:57:ff:1e:ea:c0:74:
         f7:a5:f7:af:62:c3:f5:b1:30:c7:b9:ce:49:f7:73:49:04:a3:
         bf:13:31:d7:e4:d2:36:63:1b:68:6e:3d:b5:2e:76:80:cd:ad:
         ff:6e:c3:c5:b9:51:c0:23:bc:99:4f:95:00:75:b7:aa:e8:62:
         4c:41:18:5f:f6:11:0d:2b:e0:92:12:06:df:5c:f4:23:a2:34:
         ff:4c:ab:e1:17:39:e5:25:1f:d9:f1:d2:72:68:d6:f3:c2:39:
         5e:a6:b6:26:aa:42:8c:14:fd:02:22:ed:8a:e9:8d:1d:0f:c2:
         e3:d4:59:f6:60:a7:15:1d:6f:ca:08:6b:f3:8c:49:21:b0:3b:
         e4:6c:31:66:28:5d:a5:8f:29:db:3c:ed:8b:80:b7:7c:18:b8:
         f5:e1:7b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:38 2026 by rpki-client