Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
File:                     UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft (raw, json)
Hash identifier:          I3t0VoyY0Lqvjxcx1dHTj4YTc9A5umFGs8iU9zSeslQ=
Subject key identifier:   91:07:29:C7:35:45:60:0C:C5:90:16:AB:DF:CD:66:AA:B6:A5:DB:13
Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74
Certificate issuer:       /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
Manifest number:          014E
Signing time:             Mon 01 Jun 2026 05:58:39 +0000
Manifest this update:     Mon 01 Jun 2026 05:58:38 +0000
Manifest next update:     Mon 08 Jun 2026 05:58:38 +0000
Files and hashes:         1: UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl (hash: LFlJOHP9atNyHSIgomt3CSEYnCzkDIMOEAp0StIuI0A=)
                          2: D48472829E9011EF84D96F7DC4F9AE02.roa (hash: aqdbrD7OJ2blLWFWLyQljkln+OcPA1d2ry5HZh2PUb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:58:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF2D9, serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74
        Validity
            Not Before: Jun  1 05:58:38 2026 GMT
            Not After : Jun  8 05:58:38 2026 GMT
        Subject: CN=6a1d1f8e-8561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:19:44:9d:8c:5a:8f:31:53:c8:0f:a9:d5:
                    d3:f8:40:0b:5e:2b:db:a8:60:f6:79:9a:21:4b:98:
                    e8:20:16:91:c2:57:43:44:af:8d:3a:91:8d:0f:bf:
                    9a:4d:d1:04:56:24:22:9e:1a:c3:49:84:ed:69:52:
                    e9:f5:96:80:53:f6:62:cf:f5:d9:47:51:10:c0:42:
                    ae:85:df:28:3b:88:41:fe:8c:ec:5b:c4:84:c0:16:
                    65:b1:89:aa:e8:1e:61:de:d8:be:7d:7c:6f:72:51:
                    d0:26:2d:cf:8d:69:a2:11:15:68:1b:ae:5d:55:c4:
                    33:9c:72:50:1d:3d:aa:52:e6:49:26:c0:80:74:b7:
                    e0:93:94:2a:76:25:a4:64:48:5d:c3:37:b8:89:64:
                    ea:32:23:fc:36:e8:8b:a1:bb:ce:ff:6e:76:5b:ca:
                    32:83:de:13:ce:da:c3:29:69:4c:ee:d0:2b:e7:22:
                    e0:1c:53:28:af:fb:a2:63:d2:cc:af:9c:30:47:19:
                    eb:9f:cd:9f:05:bc:59:ec:07:e0:83:70:55:ca:09:
                    39:29:99:6c:91:0f:8a:b1:60:87:82:5c:9b:b2:cf:
                    82:1b:f2:be:80:22:7f:0b:fa:8e:33:d0:26:5b:98:
                    26:29:93:04:27:11:40:b7:80:7a:4e:ec:7d:52:65:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:07:29:C7:35:45:60:0C:C5:90:16:AB:DF:CD:66:AA:B6:A5:DB:13
            X509v3 Authority Key Identifier:
                keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c0:f3:23:55:56:86:4c:ad:6a:ed:69:05:aa:99:fc:2f:b8:
         75:13:78:d8:cf:ae:a1:e0:a9:96:85:e4:63:60:d9:2c:40:b8:
         00:d4:3d:15:d3:e4:ae:2b:9e:1c:4e:f5:fe:f4:2f:fa:42:e3:
         2f:4a:6f:6f:03:c4:6b:81:aa:7b:cf:08:a7:36:05:16:71:ca:
         91:47:b8:28:aa:ed:97:7f:d6:66:f7:23:fb:14:fb:a9:94:32:
         be:5b:28:d6:5a:3f:06:7a:26:e6:e7:27:78:c7:e4:b4:df:89:
         63:32:e5:20:bd:57:37:d8:7e:cd:fa:65:21:eb:57:0d:aa:a8:
         02:48:01:81:68:2b:bc:11:20:00:62:f1:57:ea:bb:a3:a6:70:
         9b:be:eb:ad:a1:c4:bf:11:93:db:05:47:b4:9b:b1:f1:22:95:
         ff:0b:91:77:1e:1d:67:72:f1:f9:17:c0:5f:4c:f3:d9:2c:c2:
         a4:47:d5:82:f7:87:22:91:da:91:ee:5c:e9:69:6c:7e:19:32:
         1c:57:7d:30:0e:cd:e2:e6:6c:ee:78:43:db:96:39:2e:cb:eb:
         71:1a:81:6f:42:28:49:9e:83:20:60:b9:42:ba:67:e3:3d:1f:
         ca:91:9b:a0:1d:72:c6:97:ca:fc:0c:5b:92:ef:96:cb:55:4c:
         c2:08:4d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:10 2026 by rpki-client