Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft
File:                     uV2VSq65WdNCfBB2qfV98hw4v8w.mft (raw, json)
Hash identifier:          OUPBxBpn5/71OMSS/SLnVmZFgdyzn3YcOiGLJgVT0FI=
Subject key identifier:   AA:20:F7:6E:B2:28:2D:2F:AC:53:07:A7:B0:77:34:DE:BA:FC:0F:91
Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC
Certificate issuer:       /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC
Certificate serial:       2775
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft
Manifest number:          2753
Signing time:             Wed 20 May 2026 15:40:17 +0000
Manifest this update:     Wed 20 May 2026 15:40:16 +0000
Manifest next update:     Wed 27 May 2026 15:40:16 +0000
Files and hashes:         1: uV2VSq65WdNCfBB2qfV98hw4v8w.crl (hash: 3n3N6kbtsvvJwvRJjgbvrObKo6INb9MgkKoCP2EH5E4=)
                          2: 94688318A57B11EA964E0C3DC4F9AE02.roa (hash: PNtKCmkc0ae9t2OX47XtGc6SBA7Wvx4xMNhiw/SXXkY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10101 (0x2775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD28, serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC
        Validity
            Not Before: May 20 15:40:16 2026 GMT
            Not After : May 27 15:40:16 2026 GMT
        Subject: CN=6a0dd5e1-14ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:77:e7:ff:00:84:72:2a:73:7e:7b:3e:29:
                    2f:bc:42:43:69:78:b3:a1:51:08:69:0c:7b:ea:82:
                    1f:6d:28:30:7a:46:d7:34:52:81:e9:42:da:84:0f:
                    db:d7:1f:fc:05:54:4c:5d:f7:c8:fb:56:37:cf:63:
                    f4:89:19:ef:a9:e3:22:96:c2:a5:50:de:80:5d:19:
                    40:e8:df:37:93:2f:c0:36:df:db:3e:ce:0f:3d:2a:
                    b6:f5:4d:5c:21:b9:ef:8b:a0:2b:39:4d:7d:f3:eb:
                    f0:d4:69:5e:a2:f2:fa:29:22:67:5e:40:cc:5e:eb:
                    50:3c:2a:b2:45:d6:2b:9d:dc:33:5c:c6:22:20:34:
                    17:b6:e4:b5:9d:49:c6:d3:ed:da:c5:24:ca:6d:3c:
                    ac:d9:d0:f9:ee:b0:c8:a3:af:be:5b:5d:ef:25:c8:
                    8d:b2:19:1d:a7:51:dc:f1:d4:e8:23:bf:8f:2c:24:
                    ad:03:fb:0f:86:ea:58:43:d9:9a:c3:3a:29:dc:d5:
                    92:dd:c5:e8:b9:f0:b8:c1:3e:05:2c:c9:00:cf:46:
                    65:d5:25:10:28:6f:a2:db:37:d1:38:51:2f:d0:81:
                    c9:03:9e:b0:75:7b:e9:c7:8d:dd:da:0f:0b:71:a0:
                    f6:9e:0a:a5:8f:06:f8:50:f9:ec:e4:1a:21:41:d7:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:20:F7:6E:B2:28:2D:2F:AC:53:07:A7:B0:77:34:DE:BA:FC:0F:91
            X509v3 Authority Key Identifier:
                keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:82:28:71:eb:d8:79:7c:ef:a3:82:98:a8:fd:3f:f1:08:38:
         cc:5c:6b:7d:ce:f4:9f:0f:c1:b3:12:85:60:4d:23:30:ea:c7:
         56:55:57:03:65:98:40:25:bf:45:42:1f:91:0a:a6:78:26:88:
         c7:66:7e:66:1c:6f:2f:33:85:29:b1:4f:cc:1b:e3:e8:83:81:
         69:fd:68:49:b4:f3:e2:cd:a6:af:5f:a3:b7:de:08:a2:17:b4:
         2f:9c:0b:a0:76:cc:05:93:f3:69:ce:40:ea:27:50:b1:3f:54:
         ee:bf:b0:90:92:f7:0b:00:c5:c7:bd:06:e0:74:d9:aa:04:a7:
         2d:89:74:f7:8f:09:4c:31:05:4e:a5:cb:d3:96:03:96:32:a3:
         61:1a:9a:4f:06:fd:54:5c:9d:d5:ab:5a:14:c5:32:b9:4f:c5:
         a7:ce:7f:af:85:d9:b7:01:0a:54:ce:53:e7:33:92:6b:0e:65:
         0e:53:dd:38:ac:7d:6d:84:42:b0:e0:21:9b:23:b3:ef:18:7d:
         15:b1:70:26:6b:22:4a:3c:58:26:39:36:70:e1:aa:df:fa:80:
         01:e5:58:1e:43:cf:1f:1c:33:27:e5:41:17:17:5d:e0:fb:7b:
         4e:db:6a:22:0d:c0:c5:20:de:d8:d0:d6:2b:6f:ea:29:67:54:
         d8:37:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:55 2026 by rpki-client