Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
File:                     UylwC03drZ4_zcMnP00Y0-MEXcA.mft (raw, json)
Hash identifier:          QM49sYNI91zxWZFrDq76ji1+wA24IOBvsrtJU+041as=
Subject key identifier:   42:FB:50:E1:03:5A:15:C4:C8:35:1F:CF:A1:9D:D7:0C:45:9F:72:F9
Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
Certificate issuer:       /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Certificate serial:       0989
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
Manifest number:          1A88
Signing time:             Tue 12 May 2026 17:16:20 +0000
Manifest this update:     Tue 12 May 2026 17:16:20 +0000
Manifest next update:     Tue 19 May 2026 17:16:20 +0000
Files and hashes:         1: UylwC03drZ4_zcMnP00Y0-MEXcA.crl (hash: DfrVbRAAiBMm/nQcBw/a0NmaQ1cuIsFon2EE0ivKh54=)
                          2: 31414558B0D511EFB17B942FC4F9AE02.roa (hash: TPRC+7x5lgG5CgncwF7KDW3EDTJUB3LlrULYz9MveMM=)
                          3: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (hash: leVQ3s1GExMxigU8EEYZc0TFMeUDxFJChsNZNDW6QyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl
                          rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2441 (0x989)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B09, serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
        Validity
            Not Before: May 12 17:16:20 2026 GMT
            Not After : May 19 17:16:20 2026 GMT
        Subject: CN=6a036064-2530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:a1:79:62:5e:6f:e6:43:9b:c4:2a:ba:4f:
                    da:5f:bd:87:79:1a:c3:8a:94:dc:99:e5:33:5a:ef:
                    21:68:3c:c0:91:a1:95:88:b0:64:db:e9:61:ac:d8:
                    9c:b7:e6:d7:3e:7c:50:cd:87:4c:7f:b8:f8:5d:2d:
                    16:b8:00:b3:e6:56:3e:6f:e8:68:9b:8b:9b:96:48:
                    1a:52:79:2b:a9:d0:0a:77:45:4c:c9:cc:54:4b:c3:
                    50:ec:c7:a1:35:5e:a3:b6:0a:70:e8:8a:6d:83:30:
                    b6:46:2b:d9:57:75:6e:80:18:cc:70:5f:42:77:39:
                    72:bb:95:88:db:b5:87:03:2e:91:0b:4f:23:46:43:
                    be:86:76:8b:85:bd:d1:1c:11:0b:e4:31:c1:95:1d:
                    5c:ef:6e:45:ba:1e:fd:e1:4b:32:32:a1:57:f1:26:
                    0a:89:f6:dc:12:f0:23:44:ed:55:22:cb:d4:7b:ba:
                    d1:43:6c:1a:63:00:c4:9a:72:4c:d0:9d:4c:e5:a6:
                    06:9f:93:e7:79:12:4e:69:ae:85:b6:38:ed:b6:80:
                    01:3d:07:37:1f:83:dd:e3:f5:f6:dd:96:26:7c:2c:
                    2c:89:57:1a:10:bb:38:cc:83:02:81:0e:ed:67:1a:
                    5e:56:29:38:91:03:85:09:d8:08:6d:65:ff:d1:82:
                    23:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FB:50:E1:03:5A:15:C4:C8:35:1F:CF:A1:9D:D7:0C:45:9F:72:F9
            X509v3 Authority Key Identifier:
                keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:df:73:ae:00:f2:66:da:58:52:31:d7:3e:d5:c4:35:cb:fb:
         27:20:54:2f:ea:fa:b8:75:d9:91:83:db:9b:b4:32:34:08:b8:
         0c:ac:bf:6d:80:8e:be:a2:ab:99:77:6a:d2:cb:1a:4a:06:b7:
         12:8d:f9:51:a7:aa:5e:f0:32:f3:34:2e:e6:40:bc:3f:5f:61:
         97:7d:8b:92:48:74:d0:0c:10:e5:ca:0b:2d:9f:09:46:1f:bd:
         ea:0d:6d:e3:46:4a:8b:b1:b2:24:f4:ec:33:0a:6b:90:bb:d3:
         69:d2:97:be:05:69:7f:34:19:7d:8e:35:3c:b5:ed:66:06:b8:
         8d:60:f8:ff:b2:b6:33:5c:4b:3d:28:b3:a1:58:0d:c7:8c:c4:
         1d:32:3f:35:c4:79:b1:48:ca:e1:36:13:cb:b3:39:68:67:ee:
         4e:66:fb:03:38:04:8e:fa:75:9e:5c:07:d8:a1:f0:b3:3e:db:
         45:f5:f9:43:83:7f:c6:5d:7f:18:24:ea:8d:af:11:c3:68:27:
         6f:55:51:59:c6:c9:e4:81:16:07:25:b6:bc:ed:df:51:a6:ec:
         8d:2e:55:21:f4:02:34:a1:98:72:b0:43:4d:dc:ac:16:a3:ee:
         ca:5a:b3:3e:f3:84:45:4a:82:c9:11:a6:81:67:37:ec:62:9d:
         71:47:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:27 2026 by rpki-client