Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
File:                     ULpjuT-CkSle5HAxuWtFzaXCSw0.mft (raw, json)
Hash identifier:          OoU0i/GF9tTcmJ2Pc/81JwmcPn/EsOG0RC1hOuXQjXQ=
Subject key identifier:   37:1F:BE:CD:04:3B:D7:E7:AD:4B:DA:BE:3A:24:2B:86:74:33:28:53
Authority key identifier: 50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D
Certificate issuer:       /CN=A9199CFF/serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
Manifest number:          0104
Signing time:             Mon 01 Jun 2026 06:56:35 +0000
Manifest this update:     Mon 01 Jun 2026 06:56:34 +0000
Manifest next update:     Mon 08 Jun 2026 06:56:34 +0000
Files and hashes:         1: ULpjuT-CkSle5HAxuWtFzaXCSw0.crl (hash: 0A4frWWjpWBHbAvaHgn9ej7ztNlRCzKP0u3QSwQdvA4=)
                          2: 42D62828962711F0B74FEE0CC4F9AE02.roa (hash: dEqBDGsqeiUN91FwP/nGNGZY5s+Bv1LRGDa/upjDjdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl
                          rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199CFF, serialNumber=50BA63B93F8291295EE47031B96B45CDA5C24B0D
        Validity
            Not Before: Jun  1 06:56:34 2026 GMT
            Not After : Jun  8 06:56:34 2026 GMT
        Subject: CN=6a1d2d23-bc9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:00:09:a0:6e:7e:c7:ed:31:9b:dc:57:65:
                    74:ff:0a:b1:32:69:de:63:d4:56:74:ef:53:68:39:
                    fd:e3:e8:ee:d2:ae:ac:1a:0f:57:67:2b:78:52:16:
                    15:3b:24:80:13:fe:33:7c:af:ae:da:32:ea:86:e2:
                    7f:be:e9:ae:c0:ff:6d:1f:76:f8:b5:00:d0:75:3b:
                    56:f9:a3:84:34:13:0f:b8:03:14:8b:d5:78:35:d4:
                    89:01:c8:2d:9c:c7:0b:b1:66:e2:93:15:8d:37:aa:
                    86:38:99:5e:c2:ab:00:73:4f:98:de:c3:05:6c:5e:
                    19:04:9b:93:3b:7f:c6:37:2b:c7:ed:c3:86:a0:4f:
                    78:f5:2c:ef:e7:f6:60:71:40:be:db:e5:8b:dd:8c:
                    c3:1d:a5:a0:e8:2a:b3:93:87:c8:c5:19:2c:e3:11:
                    87:f3:84:8d:2b:0f:7f:93:dc:1c:f2:75:a2:7a:d7:
                    6e:6b:2c:00:f6:36:2d:9d:8d:ec:90:71:b6:6a:5b:
                    38:18:a1:46:ad:2b:ef:8d:e9:8d:75:eb:53:c4:f9:
                    55:7d:ea:4c:4b:c7:7c:f6:1a:c2:de:87:70:45:fd:
                    92:e7:54:be:cb:a3:10:35:29:98:aa:c5:ec:65:01:
                    4d:47:fe:39:b9:1f:d3:d2:aa:de:47:6d:71:1c:6c:
                    4f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1F:BE:CD:04:3B:D7:E7:AD:4B:DA:BE:3A:24:2B:86:74:33:28:53
            X509v3 Authority Key Identifier:
                keyid:50:BA:63:B9:3F:82:91:29:5E:E4:70:31:B9:6B:45:CD:A5:C2:4B:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ULpjuT-CkSle5HAxuWtFzaXCSw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/2AE16A58D7E011EF8B173D2FC4F9AE02/ULpjuT-CkSle5HAxuWtFzaXCSw0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:79:da:d1:59:7d:f8:28:69:9b:56:cc:ec:55:bd:06:d8:71:
         6f:8e:41:a8:48:14:ff:74:71:fc:6c:af:13:fa:4a:b4:5b:54:
         be:ca:e6:48:fb:c9:2e:8e:1c:94:ee:1d:65:a0:42:56:e7:4a:
         a4:4b:ec:81:cd:b8:d4:c5:75:94:a8:75:3e:67:70:47:e0:1f:
         b3:e5:c3:d4:9e:7f:8d:4f:01:87:a2:cf:5a:8d:d3:85:75:32:
         07:05:d6:20:c6:7b:94:78:5a:f9:b1:58:e9:d2:4c:4e:04:23:
         95:78:c7:5a:1d:9d:d9:df:09:07:84:23:36:e7:de:98:9e:41:
         06:2c:28:b3:ab:f3:e8:53:7d:ea:27:0a:8e:2c:bc:53:20:17:
         dc:b2:5a:95:61:20:d6:b1:45:89:b1:c6:f8:84:74:95:c1:f5:
         56:2b:b2:ca:77:44:46:4f:c1:7d:38:af:d6:02:6f:69:38:dd:
         91:56:c1:01:c8:6f:d8:46:ef:76:09:dc:5c:ab:28:06:07:d8:
         c4:7e:96:93:28:13:61:40:39:58:32:03:b6:de:bf:fb:2d:bf:
         46:17:d9:b6:43:9f:48:5b:1d:b4:56:ad:b3:0e:5f:d6:f7:58:
         9c:dc:9c:46:f8:ea:85:45:fb:b0:32:6f:d1:21:f9:21:9b:52:
         42:36:c1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:58:12 2026 by rpki-client