Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
File:                     U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json)
Hash identifier:          +yJjUSjUpRKoa2M1bHKkCBLtDWeYsEyF4zh9614ozDk=
Subject key identifier:   A0:7A:66:58:6D:51:E6:02:DB:C9:8F:23:DA:32:A6:34:73:D4:1F:B9
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Certificate issuer:       /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial:       0E0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
Manifest number:          0DA0
Signing time:             Mon 04 May 2026 17:59:19 +0000
Manifest this update:     Mon 04 May 2026 17:59:18 +0000
Manifest next update:     Mon 11 May 2026 17:59:18 +0000
Files and hashes:         1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: Br4RqsKSmSef8nAb5QLe59TsW8FevG4J1IXKVoGCe34=)
                          2: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /mnlEhnqqNNmaXEyoXT4uNGbhSnUFbs7WLtZHVUC6k0=)
                          3: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: +ssH2defg7geLitGvHOS2gEb7jt8aMnauRLoSwyGqos=)
                          4: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: fFNn+D8a+9BaecelYFnpv1pf8zkcnuV1ywYcbNcNMB4=)
                          5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: 42dKv4sjx0XRqkeI33DpCxr1YPHwmnsJzTMy3OeU/bA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
                          rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3596 (0xe0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
        Validity
            Not Before: May  4 17:59:18 2026 GMT
            Not After : May 11 17:59:18 2026 GMT
        Subject: CN=69f8de77-b4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:cb:26:db:93:84:9e:9b:2d:12:74:8a:f6:
                    da:44:3d:69:f5:f8:a0:17:e4:18:5a:f2:7a:47:18:
                    71:18:c5:73:42:54:6e:6d:7c:1e:86:ad:56:7f:78:
                    fa:91:3c:c2:a9:c1:db:50:e1:07:b8:b2:96:8f:a2:
                    d9:d5:bf:17:6f:f6:e0:7f:01:53:51:11:ab:4f:4e:
                    a6:7c:3c:df:d6:30:94:c3:cd:82:1f:50:cd:a1:45:
                    de:38:47:e9:18:68:8f:15:a6:c1:a3:87:f7:2f:89:
                    aa:45:dd:02:e3:06:7c:1e:06:1e:18:9c:8f:9c:43:
                    ce:93:1f:5d:99:15:07:3e:4b:31:39:02:08:c0:25:
                    6a:fe:e0:96:55:dd:f5:8f:e9:a0:cd:d8:7e:07:2d:
                    3e:c1:72:47:b6:6e:6a:e7:71:8d:13:9c:26:fd:d9:
                    f5:b0:a5:45:b7:17:0f:59:29:49:43:2e:65:69:1d:
                    fd:40:9a:05:a1:87:40:7a:45:bd:03:92:f3:93:0d:
                    63:df:52:04:5e:38:ed:d8:67:a8:06:a7:b7:8d:4f:
                    cb:09:d4:7b:c4:16:0a:6a:2b:f9:c4:78:67:cd:e9:
                    18:2f:17:d8:ca:c0:4b:84:ab:f2:88:27:a4:f9:30:
                    3d:06:4d:7a:53:c5:ca:57:fa:e3:57:b0:ab:13:28:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:7A:66:58:6D:51:E6:02:DB:C9:8F:23:DA:32:A6:34:73:D4:1F:B9
            X509v3 Authority Key Identifier:
                keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fc:48:b0:7c:c2:e7:43:63:ed:78:a0:bd:80:4b:77:4e:c7:
         7c:79:d2:05:b6:30:f5:44:6a:c7:d8:f6:15:ed:87:d0:c4:a9:
         7e:cb:db:50:79:6d:2c:6c:6e:7d:a1:e4:ce:4f:78:cc:34:14:
         f3:99:b2:5d:04:d3:14:c4:be:45:b0:42:73:4b:78:be:1f:d3:
         aa:ac:ea:2f:3b:73:b9:bb:55:01:6e:c6:d3:39:26:c7:c7:d5:
         23:5b:26:e4:e8:99:d9:7d:d1:09:14:93:87:09:27:9d:b0:3f:
         76:b2:7c:00:99:b2:e8:cb:c1:7a:a3:23:c1:f8:72:3b:e4:45:
         26:d6:ef:65:c0:37:60:b0:74:fe:21:4c:2e:ae:82:eb:02:3a:
         7c:27:d9:ae:b3:bb:ab:06:3e:c1:bd:0e:5f:cd:9a:b1:a6:74:
         7f:2b:72:5b:86:44:cf:3c:85:df:f9:da:5c:42:8f:80:ec:49:
         ed:c7:11:c0:97:b2:bf:18:0b:9f:f7:ce:ba:90:3d:12:8a:ba:
         15:bf:41:6d:96:f1:77:24:6b:1e:fe:b6:eb:91:bf:bc:b7:38:
         b0:2e:37:3a:d1:8b:ca:4b:3b:63:ec:eb:7e:43:38:ad:5c:cb:
         5b:43:24:93:0d:3f:06:d8:13:b5:79:18:4a:1c:b5:66:cd:b3:
         4a:10:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:26:39 2026 by rpki-client