Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft
File:                     Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft (raw, json)
Hash identifier:          7QuKvedKSFKOyCbUsmicCms1IoaZ1ydvsyDm/oeCKOA=
Subject key identifier:   61:20:71:0D:78:CB:90:F7:B5:2B:00:DE:A0:56:0A:86:62:BB:0A:FF
Authority key identifier: 52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E
Certificate issuer:       /CN=A913CDC4/serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E
Certificate serial:       0296
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft
Manifest number:          0288
Signing time:             Wed 13 May 2026 01:59:38 +0000
Manifest this update:     Wed 13 May 2026 01:59:37 +0000
Manifest next update:     Wed 20 May 2026 01:59:37 +0000
Files and hashes:         1: Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl (hash: 6dbetpEfEbNfb1ZLdaVuIudjO0Cei7D5oxMZM4gAcbQ=)
                          2: 2F38972E672B11EEBA84E00CC4F9AE02.roa (hash: Qu2Z6Dmd9/Rzo8XDYKdFCYmaMNlzbJyV+6G2m4jbJmo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl
                          rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CDC4, serialNumber=528F6ECE082BEB3DD0A66D91473FCC6569CD5F4E
        Validity
            Not Before: May 13 01:59:37 2026 GMT
            Not After : May 20 01:59:37 2026 GMT
        Subject: CN=6a03db0a-a811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:de:be:12:b1:5a:e9:0b:46:dd:e1:4d:2c:
                    a0:45:6d:ec:f8:26:92:17:27:56:c5:25:89:df:d5:
                    0c:06:fd:87:52:e0:fb:9e:d2:a0:66:ac:41:25:5e:
                    b3:9a:fe:b0:c5:1f:a9:aa:a6:8a:fd:04:c2:86:9d:
                    6a:16:09:36:97:a1:95:e3:39:5f:b7:2d:eb:e8:b9:
                    ac:78:68:d9:4c:a4:06:42:ec:14:24:56:8b:80:fd:
                    c9:13:5e:5b:3e:3a:59:57:8d:32:e9:1b:0c:ca:e5:
                    ba:3c:f0:12:d4:56:83:1c:c2:eb:bf:6e:4e:ea:6e:
                    dc:cf:c1:e7:7c:cb:86:d0:c4:1c:89:42:ff:36:46:
                    71:31:aa:5a:b5:9b:e7:e5:ca:9f:6f:fd:26:41:ca:
                    0e:8b:cc:4b:6b:ef:10:03:21:8f:0e:78:3e:42:99:
                    29:70:42:27:f3:82:24:73:e7:7a:b4:4c:a5:25:8b:
                    a7:f7:b5:ee:4d:e2:12:0d:60:39:8e:06:f7:6a:65:
                    08:9b:7b:4a:91:10:5f:97:3b:66:b4:6a:60:57:36:
                    5e:4c:82:1d:dd:58:e0:91:83:3a:f6:98:bf:b5:1e:
                    5a:40:31:06:8c:3a:d8:45:19:90:72:f8:c6:2b:5e:
                    fb:1e:2a:3e:77:da:16:01:70:6d:73:88:05:19:53:
                    fe:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:20:71:0D:78:CB:90:F7:B5:2B:00:DE:A0:56:0A:86:62:BB:0A:FF
            X509v3 Authority Key Identifier:
                keyid:52:8F:6E:CE:08:2B:EB:3D:D0:A6:6D:91:47:3F:CC:65:69:CD:5F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uo9uzggr6z3Qpm2RRz_MZWnNX04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CDC4/F8485F6680CA11ED85DA913DC4F9AE02/Uo9uzggr6z3Qpm2RRz_MZWnNX04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c7:26:2c:38:9e:07:41:11:20:04:fc:ad:da:e7:4a:ab:9d:
         5c:cd:8c:a4:65:a9:ff:c4:04:26:9f:d1:7d:a4:ab:6c:f9:ab:
         42:b5:13:64:4a:e9:b3:48:eb:ee:9c:f6:ab:00:ea:1e:e8:f0:
         0b:1b:88:2b:8f:7b:b3:1e:3b:a3:90:0d:bb:ac:4f:0a:d3:4e:
         f8:1c:2c:6d:94:7b:31:a5:1d:d9:21:29:6e:c9:0c:84:8a:27:
         46:16:a1:6b:68:33:06:9f:31:c0:95:ec:0e:90:83:77:5c:bf:
         b1:b5:fc:ab:48:5d:45:ba:18:fe:c3:2b:4d:4b:a1:89:a4:66:
         ae:b3:69:22:5f:bb:fd:df:db:6c:a3:d0:c0:c9:cb:ba:96:a7:
         43:09:93:34:13:96:64:33:d1:0d:31:ce:cd:b5:dc:a4:a1:a7:
         1a:10:18:94:14:ce:f8:f9:c3:2b:4e:0a:8d:1e:94:64:ef:60:
         e4:7b:14:e2:c2:a8:a1:b6:c5:de:27:75:9b:2c:cf:12:66:e6:
         73:46:81:98:05:7f:4e:68:5b:a0:0d:f2:63:d7:3e:5d:47:7b:
         23:4e:5e:c7:bf:2c:47:e2:36:a4:0d:ff:7e:8f:41:44:56:d5:
         35:5c:23:29:be:47:19:37:4e:2d:3d:99:38:37:d3:45:7f:1a:
         17:83:88:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:09:37 2026 by rpki-client