Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
File:                     Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft (raw, json)
Hash identifier:          Jt5XH7cxJpGx5KZHtEKrKr2eIwcPu9rcBOQRCQ8gsNk=
Subject key identifier:   3A:AD:13:38:59:8B:42:E1:64:23:DF:EA:95:7D:2F:97:FB:2E:33:E4
Authority key identifier: 53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE
Certificate issuer:       /CN=A913DC32/serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
Manifest number:          DE
Signing time:             Mon 11 May 2026 06:44:25 +0000
Manifest this update:     Mon 11 May 2026 06:44:25 +0000
Manifest next update:     Mon 18 May 2026 06:44:25 +0000
Files and hashes:         1: Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl (hash: JJrfKT5fC0PPSusIGVFm/ZeMkW7k34cLizVTiERrkxo=)
                          2: 455B2534FD0811EF85ADED79C4F9AE02.roa (hash: nE3tnNV3uG2zYt9TjdudVmkzUxyBHwB8W0/YnHDTswk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl
                          rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DC32, serialNumber=530FCD299E775B8ACB2752A03AFAA7D181E500EE
        Validity
            Not Before: May 11 06:44:25 2026 GMT
            Not After : May 18 06:44:25 2026 GMT
        Subject: CN=6a017ac9-d58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:6a:05:63:69:fd:58:73:15:f0:44:0e:49:
                    17:9d:9f:60:9c:49:58:ea:ee:b9:83:78:1d:7c:35:
                    a8:4e:d8:c1:f5:96:fc:26:68:5c:d2:c0:2b:d4:b1:
                    b7:3e:de:0b:97:f2:42:04:3d:44:fc:80:02:f8:00:
                    68:e3:33:c6:3c:e3:8a:d9:40:a7:a5:56:e5:44:7c:
                    b0:c7:6b:4a:ac:07:6e:df:c6:51:bf:05:77:f9:f1:
                    19:a9:51:3f:01:66:3a:e5:7a:dd:91:65:aa:08:88:
                    f4:22:c5:a7:a0:85:52:97:76:5a:11:53:6a:73:83:
                    0a:e6:37:71:c3:c6:e3:c5:37:77:7b:a8:88:44:c9:
                    88:8a:26:4b:30:90:0d:42:40:78:79:df:9f:43:79:
                    b0:35:58:1a:dd:97:a1:73:e5:90:4d:25:ce:89:82:
                    e5:98:ee:b2:32:81:90:41:13:15:93:12:66:86:b1:
                    0a:82:7a:1b:1b:1b:68:d7:92:ed:08:87:58:c4:2b:
                    03:ae:1e:a5:6a:21:9a:30:c9:21:3e:87:10:b8:10:
                    2b:62:8c:84:2e:3a:8e:7d:68:ef:6b:23:99:9b:fe:
                    d0:5b:7d:d8:71:91:f5:34:b6:c7:2a:4a:d5:fb:b4:
                    5f:12:a4:62:68:14:de:4d:db:0e:ef:3d:09:fc:68:
                    0a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AD:13:38:59:8B:42:E1:64:23:DF:EA:95:7D:2F:97:FB:2E:33:E4
            X509v3 Authority Key Identifier:
                keyid:53:0F:CD:29:9E:77:5B:8A:CB:27:52:A0:3A:FA:A7:D1:81:E5:00:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/840A16B0FCFD11EFADB86115C4F9AE02/Uw_NKZ53W4rLJ1KgOvqn0YHlAO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8f:08:62:66:ec:df:43:72:25:d6:f4:ad:77:c4:42:2f:79:
         8e:9e:b0:6a:5f:71:15:49:e3:4e:95:12:ec:a5:47:3a:b8:42:
         6d:9e:63:ad:23:69:f6:01:15:34:04:a7:5c:25:19:b4:3b:d8:
         f3:d8:48:22:0e:55:3f:4d:f6:ed:ac:90:14:5e:e5:3b:69:0a:
         57:17:76:da:83:93:93:92:aa:f2:56:fb:ee:83:87:37:31:30:
         99:b1:51:ad:15:a9:9c:5d:d1:9e:32:52:01:b6:b7:72:49:39:
         13:52:f4:d6:8c:cc:dd:e4:34:8c:f9:12:77:60:f2:89:d0:79:
         b9:15:7b:96:b9:b0:e9:d0:18:8e:46:b6:fd:b3:ee:47:7c:6f:
         f4:e8:95:7b:2b:78:f3:a3:9c:21:9e:1d:de:3a:91:2e:99:09:
         d7:fa:c8:b6:43:10:73:4b:d5:32:c1:06:c7:2e:d4:f3:c3:49:
         86:4e:61:3d:9d:01:26:fa:25:a1:ae:d5:8d:a6:88:8b:fc:16:
         22:fe:84:8b:37:fc:a6:68:52:d9:d9:75:e6:2e:5f:b6:bb:49:
         26:19:7f:ae:68:b7:0e:30:24:a2:19:44:03:16:4d:dd:74:45:
         0a:70:f7:02:28:3c:3d:06:ff:22:83:ec:61:f0:e4:7a:df:fb:
         68:be:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:28 2026 by rpki-client