Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
File:                     _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json)
Hash identifier:          U1Z2pgfyXK8UEbTjFLvu89BBKRUK1ILstxoOWHEKwKQ=
Subject key identifier:   A3:54:45:6A:E3:95:0A:BE:A5:FE:F6:94:A5:61:51:F6:27:1D:69:4F
Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68
Certificate issuer:       /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
Certificate serial:       35B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
Manifest number:          357F
Signing time:             Sat 06 Jun 2026 14:28:38 +0000
Manifest this update:     Sat 06 Jun 2026 14:28:37 +0000
Manifest next update:     Sat 13 Jun 2026 14:28:37 +0000
Files and hashes:         1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: jorSpmyaNgoh8UVS9oKyYK3kG/xxRXttEdJTRqUMcN4=)
                          2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: XBUaXxbl5beMfJKKd1d1AjiKQNSMzNu7XbP3LC5jZ1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 14:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13745 (0x35b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368
        Validity
            Not Before: Jun  6 14:28:37 2026 GMT
            Not After : Jun 13 14:28:37 2026 GMT
        Subject: CN=6a242e96-75c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:3d:cf:46:e9:27:fa:e2:0e:2a:04:92:45:
                    4e:57:2a:8f:ec:d9:d0:e2:07:6b:44:08:bc:b2:67:
                    9c:26:ad:9f:1d:ce:eb:89:b5:83:ff:dd:dc:74:aa:
                    a1:36:01:b4:2e:11:bc:38:a1:9c:4b:6b:63:79:35:
                    48:86:16:8c:47:9b:26:9f:c8:40:78:f2:03:2e:12:
                    c3:0d:e0:b3:e6:6f:6d:ef:03:b4:3f:46:2c:7c:aa:
                    62:f5:07:2a:fa:b2:2b:f3:5c:47:1c:87:38:5d:77:
                    11:0e:17:0d:79:e6:9c:14:1b:c7:84:e1:8d:02:81:
                    ff:53:a8:d3:32:da:85:38:eb:a8:be:a5:18:df:40:
                    cb:cb:6f:23:29:ea:c3:4c:ac:29:c6:8e:e4:12:d0:
                    6e:a2:59:48:5a:f0:a9:ef:7b:41:e7:1d:a9:ed:cf:
                    91:8b:a8:c2:d8:82:69:a5:60:61:e5:12:14:b3:8f:
                    2f:ca:21:4e:4e:57:20:79:d5:8e:0a:d7:c0:a7:23:
                    ea:56:9f:e9:86:92:7f:09:cd:88:27:5f:6e:af:5d:
                    42:cc:d0:da:59:4e:15:14:ce:9c:9a:e5:a1:51:8a:
                    eb:74:14:50:58:8f:6f:86:4e:97:8b:02:e6:54:9c:
                    29:89:71:79:b7:84:c5:44:b0:3a:a4:b2:f8:38:6a:
                    13:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:54:45:6A:E3:95:0A:BE:A5:FE:F6:94:A5:61:51:F6:27:1D:69:4F
            X509v3 Authority Key Identifier:
                keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8c:8f:26:07:bc:15:d5:d5:38:70:30:67:83:c5:d7:11:d2:
         4e:3c:ae:9b:64:dd:af:d3:77:12:79:33:4f:53:8a:54:29:b9:
         2a:45:b9:23:95:be:32:3a:e6:fd:10:97:23:26:3d:47:90:a0:
         74:59:2e:f6:fa:aa:db:29:de:08:d6:0f:02:6f:21:e7:2e:49:
         06:b9:77:89:01:3e:4a:f2:65:4d:0d:aa:71:33:d6:9a:43:dd:
         dd:0b:2c:b5:61:de:99:f9:5f:f6:3e:0e:78:7c:31:4b:bf:81:
         6c:e2:f1:10:48:27:34:a8:65:5a:ad:d9:29:9a:00:7f:19:98:
         65:57:0a:78:e3:83:51:c5:02:86:b9:1b:9b:e9:da:ca:9d:08:
         39:ff:c6:e2:1b:f7:dc:45:d7:c8:d5:c7:cc:ce:d4:37:bd:b5:
         99:bf:9c:0d:49:8b:58:52:73:69:a3:b3:1e:c4:77:2a:61:9a:
         ae:4f:4f:2a:a2:24:4b:1d:07:a3:41:7e:7a:6d:38:ba:96:a4:
         1a:3b:60:0d:5b:4d:f8:ef:9b:76:f1:73:f6:45:48:fb:48:fe:
         f6:a7:52:99:99:b2:a9:8a:71:28:81:c5:17:fa:24:0e:3d:d8:
         9e:08:08:67:32:96:02:0d:cc:f0:70:24:25:1c:04:31:e0:b6:
         3c:da:a9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:04:21 2026 by rpki-client