Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
File:                     UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json)
Hash identifier:          3gersGsN7q/VM6ZgjT9hejyg5JBzuUgJg6h2l79ABdc=
Subject key identifier:   DA:95:E9:AF:AD:8A:61:9A:84:03:C1:76:44:AF:B7:D8:34:72:88:5D
Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66
Certificate issuer:       /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266
Certificate serial:       0BD7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
Manifest number:          0BAF
Signing time:             Fri 12 Jun 2026 19:07:09 +0000
Manifest this update:     Fri 12 Jun 2026 19:07:09 +0000
Manifest next update:     Fri 19 Jun 2026 19:07:09 +0000
Files and hashes:         1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: BrjbRz4giP0K4FUr4HSXzs2KmFONaYcVBUt9Z5Fg6qM=)
                          2: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: STVj2nhR43tdaUjvSJVzwF108t0kdD6iF4pS76haPJU=)
                          3: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: GKFcFl36b7LnjNX4oCJ7zVjBqwtdvTCKUrd14r3mvVc=)
                          4: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: y3tBCZ/zj5uXK4iELgDoXwmRBCPYOm3bLLdNGBDaIUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl
                          rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3031 (0xbd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266
        Validity
            Not Before: Jun 12 19:07:09 2026 GMT
            Not After : Jun 19 19:07:09 2026 GMT
        Subject: CN=6a2c58dd-c407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5f:b3:2b:0f:c4:27:e3:0d:77:6c:af:16:82:
                    38:69:d4:4f:0b:e5:6e:c5:9a:26:81:84:05:75:34:
                    f4:3e:74:9f:89:8c:05:75:50:e1:b0:96:5e:4d:0e:
                    44:4c:68:c0:22:a5:70:42:ef:f4:bd:53:30:08:58:
                    cc:58:a4:3b:f1:cf:da:64:93:ce:f2:93:a2:24:b3:
                    12:94:33:1e:af:df:6b:37:aa:6b:1b:4a:1f:ac:c5:
                    91:6c:7c:43:16:21:29:66:18:9d:a3:85:6f:8b:76:
                    1b:5c:63:04:dc:79:e0:77:4e:ca:3f:1d:72:a1:31:
                    33:dd:b7:57:a8:e2:33:e1:1a:81:35:40:c7:8b:58:
                    30:8a:a3:7f:02:49:16:6c:37:04:89:ab:cb:a8:56:
                    90:90:93:88:6f:56:60:0e:b1:75:76:43:29:9b:28:
                    2b:c2:b6:19:9a:83:63:0a:1c:26:c3:ca:d6:2e:ca:
                    a7:a2:0e:98:43:5f:24:2d:81:48:2c:a6:4d:1b:35:
                    aa:15:ac:ff:eb:5c:b6:6a:62:b6:88:65:c1:1e:f2:
                    82:19:17:06:99:79:db:81:41:15:28:bd:90:71:09:
                    83:43:a6:d9:01:a2:c9:14:4e:49:69:3c:de:a3:ce:
                    75:70:f2:74:17:29:04:9a:59:e5:ee:e6:ff:57:37:
                    17:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:95:E9:AF:AD:8A:61:9A:84:03:C1:76:44:AF:B7:D8:34:72:88:5D
            X509v3 Authority Key Identifier:
                keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:08:c9:33:14:d7:f2:e7:9f:e3:e6:2a:9f:8c:5a:c7:8b:47:
         e2:4e:dc:db:0d:88:3e:5a:4c:f0:94:d9:6f:20:b2:8c:ce:41:
         3c:4d:30:ff:4e:87:5a:84:64:0b:86:d1:13:80:eb:31:f7:c9:
         90:1e:0b:1e:90:33:bc:b1:72:f5:00:41:6d:e1:f6:b1:b3:2d:
         99:67:bf:39:a6:81:8c:ef:8c:46:1a:07:2e:38:21:15:8e:2b:
         40:14:ad:f9:44:9e:64:d5:0f:68:d5:b9:39:f9:44:4d:78:09:
         6a:68:57:15:ed:87:ad:3b:d7:53:18:ef:a7:39:51:68:d3:f0:
         9e:15:2e:0a:ab:ee:31:fe:e3:49:49:62:76:6f:20:e9:34:41:
         39:2d:04:b5:32:b5:c4:74:70:40:0c:95:e0:4f:46:90:4f:c3:
         80:96:b2:dc:1c:2f:34:99:41:05:71:2d:43:74:c5:b0:c0:88:
         b0:c2:3f:7e:e6:a0:47:9b:27:1e:d5:43:61:44:26:20:5d:16:
         01:96:df:6f:78:8f:d1:29:47:e0:dc:66:1a:c6:9c:eb:48:95:
         6c:f1:b6:74:81:43:6e:e4:8f:93:dc:8f:45:fe:a6:9b:65:01:
         9a:54:24:63:39:fd:39:2b:6f:48:48:5b:68:2d:11:53:75:22:
         f6:16:8c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:22:21 2026 by rpki-client