Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
File:                     UoaLCQH1W0B4uRpzRRym0iMSyKs.mft (raw, json)
Hash identifier:          Dr3V2FHqBsR8KIFqU6tgTBtyoPn5w3OqBFItxJu/8aE=
Subject key identifier:   93:E3:B6:1E:C5:AC:28:70:E8:20:C6:BE:79:09:45:FB:CD:82:CC:B7
Authority key identifier: 52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB
Certificate issuer:       /CN=A913E2B3/serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
Certificate serial:       0CC7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
Manifest number:          0CB5
Signing time:             Tue 12 May 2026 18:32:48 +0000
Manifest this update:     Tue 12 May 2026 18:32:47 +0000
Manifest next update:     Tue 19 May 2026 18:32:47 +0000
Files and hashes:         1: UoaLCQH1W0B4uRpzRRym0iMSyKs.crl (hash: Sav9EtViICd3M69rdzzX3B6ca3EQfer53EjCPoL5fNs=)
                          2: 3AB1E0D44ED511ED84336740C4F9AE02.roa (hash: 1xwZmu+W4i/TCA6GArfnAsx0Zkop8Nq8b1/wjpzQ/QY=)
                          3: 399AB6DA4ED511ED84336740C4F9AE02.roa (hash: 2gHhqtDJfKR0qJzs+P2axW63JoLu4G8a5q6M2TKtmYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl
                          rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3271 (0xcc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E2B3, serialNumber=52868B0901F55B4078B91A73451CA6D22312C8AB
        Validity
            Not Before: May 12 18:32:47 2026 GMT
            Not After : May 19 18:32:47 2026 GMT
        Subject: CN=6a037250-3009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:cb:97:a7:bf:a9:32:91:7f:42:e4:ee:e6:
                    55:37:4d:49:3c:72:30:52:1f:b3:2f:99:98:a5:84:
                    11:3d:8c:61:4f:32:57:33:8b:b1:ae:d3:6c:1c:42:
                    e6:6c:00:a1:de:cd:d3:05:fe:f6:57:74:3e:01:0f:
                    60:1f:8a:69:9d:bb:f5:8f:37:72:34:3a:83:bf:1e:
                    7b:28:58:25:da:d2:de:19:ae:cc:de:cc:f8:8f:16:
                    ed:4b:1f:e4:fb:bd:9b:0a:4f:80:41:70:6b:0c:ae:
                    11:3c:b5:aa:cc:00:bf:c0:c4:90:d5:58:93:47:fc:
                    2c:50:f8:bf:3f:15:85:96:76:26:81:b5:a9:76:f7:
                    16:07:61:d8:4f:a5:e6:c3:0d:26:2c:61:1e:0f:89:
                    d1:53:6b:d3:f4:ae:b8:08:62:19:19:a8:7b:5e:c1:
                    fc:8f:e7:0f:dc:6b:ef:97:01:1d:0b:7b:67:7b:9d:
                    81:3e:94:d8:88:23:c3:85:55:6f:10:d8:a3:54:50:
                    e7:19:a0:e1:b7:4e:87:48:da:5c:30:e0:17:49:85:
                    82:7d:ae:24:22:21:40:62:d8:38:b9:2b:f3:a6:3d:
                    ea:e0:c1:de:2d:00:6e:8d:42:1d:50:c1:53:2a:38:
                    1d:8f:b2:b8:d1:95:94:1c:df:c9:2c:13:60:c0:15:
                    b2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E3:B6:1E:C5:AC:28:70:E8:20:C6:BE:79:09:45:FB:CD:82:CC:B7
            X509v3 Authority Key Identifier:
                keyid:52:86:8B:09:01:F5:5B:40:78:B9:1A:73:45:1C:A6:D2:23:12:C8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoaLCQH1W0B4uRpzRRym0iMSyKs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E2B3/20E67DD812F411EA89420430C4F9AE02/UoaLCQH1W0B4uRpzRRym0iMSyKs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0e:b5:5f:b3:28:22:fd:f1:52:fd:f6:f7:9f:05:49:99:7d:
         02:70:36:01:c6:87:38:79:5e:f6:0c:db:4e:83:80:b3:04:3c:
         75:d7:61:ac:d6:3b:82:c8:70:db:76:ff:1e:7d:c6:f7:c4:19:
         73:98:80:0c:4f:9a:13:3f:8b:c8:76:9b:73:fc:52:76:6a:e6:
         5d:03:92:fc:ca:f2:cf:81:32:cc:e5:85:57:b6:42:b0:31:7e:
         56:85:dd:37:c0:7d:e7:1c:e1:3f:d0:bd:b1:b7:3c:82:4d:c9:
         a5:9b:ca:a2:97:dc:90:cf:2d:c5:f8:c0:3b:fb:9d:37:fa:d7:
         fb:50:d1:c2:0b:c2:01:86:fd:04:a8:86:4d:08:73:90:61:03:
         9c:d1:87:77:a4:25:ce:ca:a5:aa:be:c7:a5:c3:a0:8f:55:2a:
         fb:9c:0d:9b:64:99:e5:db:df:eb:f4:08:10:4f:32:32:f5:76:
         cc:9c:39:9f:9e:2e:e0:00:01:97:99:e2:bb:e6:56:d8:d2:9d:
         7f:4f:45:0d:5e:af:39:15:e3:9a:9b:8e:be:fc:09:fa:f5:2a:
         f6:b8:b3:5c:e7:cb:7c:13:6f:32:b6:32:4c:c1:34:8b:45:78:
         c8:43:3b:6e:f6:75:f0:73:ae:c4:18:e4:28:d3:0f:da:7b:df:
         96:70:14:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:44:13 2026 by rpki-client