Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
File:                     uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft (raw, json)
Hash identifier:          9KQ+cyWFTuwORA3mDQLTtpw+bBFnjkrao0XO756AVaU=
Subject key identifier:   BF:E0:0F:14:38:99:8C:BB:5D:B3:D8:50:5B:BC:75:7D:34:E9:B6:1D
Authority key identifier: B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2
Certificate issuer:       /CN=A9133E16/serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
Certificate serial:       099D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
Manifest number:          099D
Signing time:             Tue 12 May 2026 20:02:56 +0000
Manifest this update:     Tue 12 May 2026 20:02:56 +0000
Manifest next update:     Tue 19 May 2026 20:02:56 +0000
Files and hashes:         1: uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl (hash: bzsFvjOoNuRqT9lXiAZ08+cAkUYCgG4beTqFDSSxpHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2461 (0x99d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=B9A0BEFF92AF7CDE190085052F1F4F1F92BDA4F2
        Validity
            Not Before: May 12 20:02:56 2026 GMT
            Not After : May 19 20:02:56 2026 GMT
        Subject: CN=6a038770-bba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:53:e4:47:3b:e5:63:ac:1a:df:b4:43:89:ff:
                    0e:dd:4f:e9:e5:87:03:f0:be:29:df:8c:61:5e:ee:
                    8e:f6:cb:84:80:22:a2:21:55:49:44:c2:fe:09:51:
                    8a:2a:2b:83:a1:39:b7:d4:9e:f4:58:c5:5a:ba:79:
                    79:f8:c6:c5:66:3b:8b:62:21:88:f8:04:69:c4:f4:
                    34:fc:a6:09:b8:7b:5d:b2:12:d8:48:69:47:c2:86:
                    4b:fe:46:a0:c4:f3:1f:b2:0e:9d:46:bd:fb:01:ef:
                    11:10:74:e9:39:93:de:6d:75:cc:e3:ea:f5:b2:56:
                    50:41:7d:0e:bc:ba:65:87:5a:e9:7a:51:1e:ab:6d:
                    b8:bd:14:80:1d:9e:97:57:35:73:52:92:8c:9d:de:
                    bf:13:17:74:36:98:66:af:0e:8e:f2:89:64:19:82:
                    2a:34:4a:82:4b:e5:58:61:5d:ea:c5:26:92:9b:81:
                    2c:d2:d0:9a:ce:f7:a2:d0:2b:de:f6:de:90:f9:12:
                    ae:b8:76:a3:26:f6:7a:49:3a:5c:5f:1b:b1:d7:bf:
                    59:eb:ae:c8:a5:bb:ca:7e:0e:7e:4d:59:fe:de:7b:
                    31:09:d7:d7:0c:16:c4:c6:7b:c8:8b:ff:af:e9:6c:
                    5f:3a:c9:8c:16:27:58:8c:67:43:03:89:52:f0:89:
                    60:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E0:0F:14:38:99:8C:BB:5D:B3:D8:50:5B:BC:75:7D:34:E9:B6:1D
            X509v3 Authority Key Identifier:
                keyid:B9:A0:BE:FF:92:AF:7C:DE:19:00:85:05:2F:1F:4F:1F:92:BD:A4:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/D5094FA6AC7411EA86EA9F48C4F9AE02/uaC-_5KvfN4ZAIUFLx9PH5K9pPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:60:67:e9:05:e6:55:ce:4b:47:a4:93:95:83:fc:b8:85:95:
         12:82:a2:55:4e:f0:8a:47:f4:72:e9:db:00:df:fa:61:5d:68:
         b9:7f:a7:21:bd:7f:c5:b5:cd:8c:d6:4a:12:cf:b6:c8:cd:6d:
         dd:d3:a4:96:af:16:5a:30:9d:42:b7:65:ec:51:3c:01:1d:49:
         d5:bc:15:fd:6f:2e:5a:14:52:0e:98:2e:3a:f8:e4:a1:00:d7:
         16:13:82:f4:4a:94:cb:58:2d:2b:f3:eb:69:eb:b4:df:f0:90:
         1b:08:cf:15:6b:30:fa:19:c9:60:9a:3f:60:81:25:75:d4:ab:
         4d:ad:21:ce:46:d3:f4:a9:5c:14:be:ea:17:ce:ab:f3:f3:88:
         96:44:b3:6e:68:11:1f:8d:27:56:99:25:06:58:5c:de:5f:6d:
         db:fe:03:02:0f:19:92:cb:10:e0:0a:1d:31:7f:44:2d:94:1a:
         df:b7:d5:17:6e:27:77:28:04:45:8a:e1:94:3c:d4:01:c7:74:
         2f:65:6c:ae:74:54:01:e0:ab:45:89:f9:31:0f:a0:16:a0:98:
         65:11:e0:0a:b4:0f:bc:fa:ee:d0:34:e6:a1:94:d6:b2:e8:e9:
         cb:16:b8:2d:ef:c5:e3:7f:ed:41:fc:d4:d5:69:ab:a2:bd:d1:
         bd:69:57:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:14:25 2026 by rpki-client