Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
File:                     UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft (raw, json)
Hash identifier:          Oi1K+hGhKbkG3b3798sN8Y6zWFS2BNBOigx2/l0CZYQ=
Subject key identifier:   9E:D9:FF:4E:77:6C:62:12:CA:B3:40:56:D4:3F:6B:D5:ED:CF:BB:84
Authority key identifier: 51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4
Certificate issuer:       /CN=A91201F1/serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
Manifest number:          3A
Signing time:             Mon 11 May 2026 08:49:10 +0000
Manifest this update:     Mon 11 May 2026 08:49:10 +0000
Manifest next update:     Mon 18 May 2026 08:49:10 +0000
Files and hashes:         1: UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl (hash: ILuqy3K/FnCPEGlMJjhynStuw9psuv+kP9UW/lB1gL0=)
                          2: D93132D6019811F1B6B26F14666F56BC.roa (hash: Kdauw0gJZUlOd9cLWCyN/Fmo1Dvhpdel9pLxOkR1eyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl
                          rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91201F1, serialNumber=5173F8A10A85CE11543D7441286B5D6E2EE753C4
        Validity
            Not Before: May 11 08:49:10 2026 GMT
            Not After : May 18 08:49:10 2026 GMT
        Subject: CN=6a019806-61f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:39:17:dd:c7:e4:4e:e6:21:cc:b4:86:f8:6f:
                    ad:09:d7:66:8f:54:00:8f:86:9e:c5:0b:45:96:e8:
                    4d:a7:20:86:66:65:05:89:76:48:fe:3c:2b:75:e9:
                    10:1b:8f:59:7d:63:d4:9b:83:1d:49:a7:49:d3:ac:
                    73:a2:f1:32:b8:3f:c1:a3:26:58:d1:ec:25:2c:29:
                    cd:98:54:ee:bf:d1:11:69:0d:e7:8c:d6:98:92:df:
                    f4:92:1a:e9:90:68:7f:73:8b:86:24:77:17:74:88:
                    a5:5e:ab:7b:75:6e:70:24:96:db:69:2a:2f:3d:d8:
                    37:66:88:32:87:38:12:37:ca:ce:2f:c4:3d:9a:b9:
                    14:da:a3:71:88:86:52:1a:ac:35:8d:75:27:9b:a8:
                    fe:f5:7b:de:51:b1:b3:7e:3a:ab:7f:d0:87:9c:85:
                    91:07:9d:9a:3c:63:ac:73:b4:51:6c:a5:eb:69:4e:
                    4a:3e:da:c1:c3:4e:9f:3e:23:5e:40:53:c8:09:1b:
                    3c:96:2c:34:44:da:44:54:70:f1:ad:15:03:26:ab:
                    71:90:e8:d0:ae:1b:96:f9:53:60:d2:38:4a:09:c2:
                    67:70:bd:a3:f7:22:3a:81:98:88:df:09:8a:68:c4:
                    d3:e8:cc:e1:c8:89:4f:8b:8c:99:12:51:9b:15:ae:
                    d6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D9:FF:4E:77:6C:62:12:CA:B3:40:56:D4:3F:6B:D5:ED:CF:BB:84
            X509v3 Authority Key Identifier:
                keyid:51:73:F8:A1:0A:85:CE:11:54:3D:74:41:28:6B:5D:6E:2E:E7:53:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91201F1/738F3A6800DA11F1BE3B4206756F56BC/UXP4oQqFzhFUPXRBKGtdbi7nU8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:9c:22:1a:28:c4:47:08:f8:6e:f9:44:1d:5b:16:9f:10:e6:
         47:7c:56:da:ab:33:3f:c1:77:2c:75:1a:89:42:56:36:8f:f6:
         51:6e:44:ee:04:40:13:49:e9:e8:06:52:d2:a4:dc:fc:82:ff:
         ab:f5:da:d0:e3:d5:6c:5c:c9:6a:42:18:50:da:c1:f1:2e:7d:
         c1:7d:e5:7d:cb:15:ef:ab:de:0d:88:28:30:72:af:a9:aa:1e:
         aa:cf:ae:a1:b6:f7:f0:63:87:8d:8f:04:3f:e8:a7:43:20:53:
         95:f6:59:fc:c5:b4:d9:a1:b6:81:47:b5:d2:14:d6:38:87:48:
         94:76:04:9a:02:1b:f1:74:98:51:0d:26:7b:bb:21:8f:15:06:
         4f:88:23:32:7e:e5:b7:89:c4:d3:eb:8f:03:30:7d:e6:fd:b6:
         5e:54:5c:67:01:da:e6:36:4d:16:b6:8d:28:30:8a:17:d1:39:
         32:0b:b9:3e:26:01:3f:7f:32:eb:02:62:78:54:0a:53:bb:9b:
         8c:20:cd:af:5e:43:16:62:55:5f:b4:a7:0b:4b:90:9e:3f:42:
         ab:c0:88:a7:32:c6:1b:84:14:b7:7a:52:3b:ce:86:c6:63:c4:
         39:37:08:f7:79:92:50:cf:c8:a2:f4:1e:6d:ec:92:d8:58:3e:
         06:15:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:13:56 2026 by rpki-client