Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
File:                     UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json)
Hash identifier:          zcvBFHgHd9qKFnbpVMKEGKC/UtIzo6XoRlF6OJZKDUc=
Subject key identifier:   75:FA:35:44:17:3E:56:E3:5B:52:D9:BC:86:41:58:09:BD:B5:CE:46
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       362F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
Manifest number:          3575
Signing time:             Tue 12 May 2026 15:19:41 +0000
Manifest this update:     Tue 12 May 2026 15:19:40 +0000
Manifest next update:     Tue 19 May 2026 15:19:40 +0000
Files and hashes:         1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: /PQyA7I2C53MmMdqbuZv5AjCDdlrlAjGEDz0tfeJgaQ=)
                          2: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: d4lTODvUkouxXVPPc6ygUkOl8NqMMqWXrGfdqtm829Y=)
                          3: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: YRii0Zo0Ii/RPFSSaW2DmXwDsKKvPuXOrEkEJHdLhV0=)
                          4: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: WNcYetTPqeiv/gJdhSaTlqe8oWCCpgSvbxYX4ELwCGg=)
                          5: 2F20ECAE554211EF82D40732C4F9AE02.roa (hash: kgR3YHk5XEHcnqdC6D3tAl758+AW2RhczADq1evpAQs=)
                          6: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: ZiJdNAI9D1fhgY+vFrSQSO5HYdO+TKWApMeaHQROAjU=)
                          7: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: effeuvJ8l3AUehdgLEWM2HD3kmQlAIDMK+QRL0CUES8=)
                          8: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: a063z56fhF465bYqQMqQ/VS6+YD1pprAbiKfQKP6c7Q=)
                          9: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: d6iO9u2ih9RRm7pMd+vjg8OegUnNhTtH4LrmCu5pQ4M=)
                          10: E48E2E94017211EBA18CC269C4F9AE02.roa (hash: mVGA78Zl2U0B3hkzOEy3AAD5vMNBI+xTYAZL5c4Orlk=)
                          11: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: kH5XvLgwYNGVU4SNZtJIVKDH6abpZgZgif4ntA/Uq98=)
                          12: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: noBQw864/f72VFx3andbpjd4W9nv+2EjSEATcB2fGbI=)
                          13: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: QN6urrq0/MRPBsyVwW06hj5Hgqfql2xPz8BmJ6v46LI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13871 (0x362f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: May 12 15:19:40 2026 GMT
            Not After : May 19 15:19:40 2026 GMT
        Subject: CN=6a03450d-bcaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ab:56:1b:4a:23:39:c4:69:ec:f9:8a:c3:e6:
                    4a:04:b0:4a:c0:c0:e3:eb:22:41:0d:61:6e:4a:fc:
                    89:56:57:e9:23:e0:a8:f4:07:3b:cd:c3:86:ec:e4:
                    fe:7c:d9:2d:e3:54:6c:7a:09:76:15:d8:87:35:d8:
                    09:a2:73:40:16:0c:e3:43:df:b8:34:74:9c:95:6d:
                    1c:69:82:da:09:68:d7:83:9d:da:27:1d:24:33:38:
                    33:2e:d5:98:e1:3b:08:ce:c9:0a:bf:b0:d5:7f:bd:
                    1e:b8:a8:ed:92:08:a6:f6:4c:eb:b4:f6:e3:a4:e3:
                    c0:45:27:13:3e:5d:24:8c:af:20:98:e3:74:76:4f:
                    89:cf:00:6b:1c:53:23:d9:4c:0e:2b:5b:b4:9d:3d:
                    63:63:e8:ac:96:7b:3b:70:cf:06:38:bf:a6:5e:5f:
                    9e:14:31:26:50:bf:e4:b2:c5:05:56:3b:ef:ac:b5:
                    3f:17:5f:1d:82:af:ae:28:76:04:18:7d:38:09:3e:
                    88:7a:8e:e8:15:22:d6:34:86:02:b8:ef:e9:a0:9f:
                    48:d5:34:f3:81:65:ad:1b:dd:eb:ee:3b:5e:45:e6:
                    13:a6:48:98:b3:b6:1c:fd:6c:99:47:6a:54:7e:0c:
                    d2:33:4a:7e:fe:9e:e2:bd:bb:88:5c:a2:15:2d:8c:
                    d3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FA:35:44:17:3E:56:E3:5B:52:D9:BC:86:41:58:09:BD:B5:CE:46
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:09:30:d7:9c:c2:38:f4:f7:87:0e:df:d2:1f:30:f3:92:3e:
         27:9c:b2:91:9d:c3:a4:5f:3a:11:e9:10:52:23:7e:29:06:73:
         da:68:ba:b0:55:39:f0:d3:b2:40:f3:6d:6a:97:d9:39:f2:9a:
         a9:b2:3f:22:c7:a6:d6:d7:4f:ef:bf:d7:4d:42:09:4d:49:ae:
         e1:21:8d:91:14:ad:df:37:13:32:8c:d5:72:af:31:81:37:79:
         75:02:ca:8f:79:63:66:54:4b:8e:84:9a:92:08:c7:17:2c:58:
         ed:52:c5:ae:b9:1d:e0:bb:76:a4:d1:dd:20:67:44:02:4e:52:
         1b:85:d3:00:c5:06:80:28:30:4b:69:07:3d:2d:f5:3e:97:20:
         0f:d0:25:62:b6:1d:7c:7e:97:d7:b4:16:fe:9b:53:77:a6:fa:
         91:36:25:c4:6b:af:4f:94:d3:8b:a0:99:87:2d:d7:53:2b:02:
         0e:1f:b8:89:0e:cd:e1:29:b2:cf:eb:0e:db:f7:2d:41:a6:43:
         31:c7:bb:4e:5c:4b:31:a1:64:9b:55:ff:f4:98:e3:7d:73:6c:
         5c:52:ee:5a:01:5b:43:90:3b:15:b5:2c:a7:9e:6c:0a:1c:be:
         d2:61:ad:74:07:a4:86:d4:51:1e:70:ba:17:26:d1:72:6c:b0:
         24:f8:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:27:55 2026 by rpki-client