Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
File:                     oUnn_U15BvwaY0EphlXagYXykBQ.mft (raw, json)
Hash identifier:          CaiA85Q/Oy3T3V0rw6M6unImEBWReomhNs2YZlu4PTc=
Subject key identifier:   53:C4:77:B8:F4:C7:11:5B:26:14:8E:DC:38:BF:5B:BD:F8:24:1F:F4
Authority key identifier: A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14
Certificate issuer:       /CN=A91FF639/serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
Certificate serial:       1464
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
Manifest number:          1458
Signing time:             Sat 02 May 2026 16:54:46 +0000
Manifest this update:     Sat 02 May 2026 16:54:45 +0000
Manifest next update:     Sat 09 May 2026 16:54:45 +0000
Files and hashes:         1: oUnn_U15BvwaY0EphlXagYXykBQ.crl (hash: HFMfC3EjEm/ePiVJ2zk2j/KAE970RwkjPJERvBiFqxE=)
                          2: 9D1CF15E90EE11E8960E8480C4F9AE02.roa (hash: T0Ym6/qSYZ8bInetk9oWjUHQlgplGzQpxO5OFOEk2VM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 16:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5220 (0x1464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF639, serialNumber=A149E7FD4D7906FC1A6341298655DA8185F29014
        Validity
            Not Before: May  2 16:54:45 2026 GMT
            Not After : May  9 16:54:45 2026 GMT
        Subject: CN=69f62c56-b166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:44:2d:4b:44:4d:91:bf:0c:02:c7:90:8a:
                    55:f3:3e:74:ae:86:06:6a:44:35:08:c8:3d:5e:12:
                    f9:0d:e4:eb:5b:2c:06:eb:9b:c5:e6:9c:9f:0a:9f:
                    b3:e9:23:92:67:5a:a3:9c:e0:f8:11:a5:ba:b5:0b:
                    60:1b:d7:24:52:a7:6e:c2:b0:e6:1c:d4:76:e4:47:
                    26:ba:55:3c:c9:4c:d1:53:a7:ba:80:a6:42:8b:be:
                    c5:9d:36:d7:2f:33:97:ad:2d:c3:6d:d7:2a:31:c1:
                    b8:7d:f3:45:35:f5:1c:2a:45:9f:d6:f0:2c:b0:1d:
                    45:79:6a:c6:77:d7:f4:60:f3:6e:a2:e3:91:33:c0:
                    8e:6b:c7:23:6d:35:14:43:19:d8:62:86:5b:f5:c4:
                    8e:8a:68:c3:c6:e6:0c:99:00:75:7a:a3:1d:4a:5b:
                    77:da:b3:a7:74:77:e3:24:2e:cb:83:4a:92:4e:7d:
                    a0:8e:f4:e5:de:25:c4:67:7a:5a:a0:36:79:c0:4d:
                    a3:41:12:af:f2:75:03:eb:5f:b5:f3:63:77:58:54:
                    d5:28:c7:60:72:3d:1f:20:ca:7e:16:23:e5:c7:cf:
                    8e:31:98:78:34:17:49:04:ef:8a:16:d2:62:f0:e4:
                    e6:48:18:bc:d2:cf:eb:b0:e3:d8:67:83:be:97:1d:
                    d3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C4:77:B8:F4:C7:11:5B:26:14:8E:DC:38:BF:5B:BD:F8:24:1F:F4
            X509v3 Authority Key Identifier:
                keyid:A1:49:E7:FD:4D:79:06:FC:1A:63:41:29:86:55:DA:81:85:F2:90:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUnn_U15BvwaY0EphlXagYXykBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF639/AEF068B890EC11E883C3D47BC4F9AE02/oUnn_U15BvwaY0EphlXagYXykBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:11:09:f4:58:f2:9c:40:d2:03:e7:ec:ec:e9:2e:5c:c1:ae:
         0b:73:23:4b:6d:c2:08:04:b5:83:67:6a:a8:fc:cf:48:45:a8:
         c6:ab:8b:e2:36:ab:be:34:bf:80:0d:f9:23:c6:3e:1b:94:65:
         8a:06:9f:d5:3b:06:7e:1e:ab:6f:80:e8:6d:52:d6:78:ca:6c:
         b4:7d:77:07:94:ce:6b:73:1b:64:1b:9e:60:ed:0e:09:1c:85:
         ac:e5:7b:f7:dd:ad:40:81:35:5c:af:cd:0e:f0:21:40:d3:3d:
         e2:2d:1b:75:12:1d:08:b7:b4:21:8e:d0:fa:70:2b:7b:b1:5b:
         c5:b9:99:1f:2f:ee:e4:67:b9:ed:87:b9:53:7a:4b:88:7c:0e:
         a2:fe:16:7e:02:5b:80:97:73:5e:e9:c2:83:2b:eb:f5:a2:10:
         3e:a1:08:85:7f:dd:bd:15:4a:78:ad:97:11:e5:ce:98:91:52:
         97:f7:41:61:d4:29:74:2a:2f:8d:14:63:59:15:42:17:61:ed:
         4b:55:48:c9:88:c3:be:df:f2:40:32:7f:76:8d:3c:aa:d5:e3:
         cf:8c:25:a7:31:47:77:b5:b3:d8:16:cc:42:0a:71:63:c2:98:
         7d:50:2d:e8:d7:41:f0:c8:ea:d2:d1:1a:ac:6b:48:72:fb:26:
         26:87:13:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 02:00:18 2026 by rpki-client