Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
File:                     R_UMlYv5z1RcYBresE-KBeEB2aU.mft (raw, json)
Hash identifier:          xmH67xd4B5WBZo2AF3TnrpRPDp7pWeTlPkz/4EebGE8=
Subject key identifier:   35:E9:EF:39:B8:D1:7E:C3:4D:F4:F2:B7:6D:4A:52:E5:B2:0B:CB:74
Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
Certificate issuer:       /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
Manifest number:          01A3
Signing time:             Mon 11 May 2026 04:15:54 +0000
Manifest this update:     Mon 11 May 2026 04:15:53 +0000
Manifest next update:     Mon 18 May 2026 04:15:53 +0000
Files and hashes:         1: R_UMlYv5z1RcYBresE-KBeEB2aU.crl (hash: aw9mS+11JCO1eb4ICEfV0aGufpOc+WSvoemZ6ehQB2Q=)
                          2: 0F778EDCEBB411EE9D86095BC4F9AE02.roa (hash: h/OwSIHosa0hSGtUAMFoRQJH1IunWAz+X50+i3Y6izk=)
                          3: 0F0A0C72EBB411EE9D86095BC4F9AE02.roa (hash: hrpObnCPcxRMCt15cylb8b70cp9YbT6TW8DLiHpGHoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl
                          rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153490, serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
        Validity
            Not Before: May 11 04:15:53 2026 GMT
            Not After : May 18 04:15:53 2026 GMT
        Subject: CN=6a0157fa-be6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:b7:fc:1b:03:45:7a:1d:c3:40:0f:ef:f3:
                    65:b7:5c:f3:04:2d:89:94:6b:cb:d7:b9:ea:93:6f:
                    86:74:76:f0:22:25:b3:3a:93:14:8a:1e:70:5d:6f:
                    57:0c:a7:43:41:54:31:c7:da:f6:41:3d:53:8a:23:
                    6a:b1:01:43:80:f5:44:1f:4b:d3:d4:54:11:33:b1:
                    27:fd:9c:3c:7d:e1:d8:c0:95:34:5a:d1:37:cd:8d:
                    f4:14:c4:7b:d0:39:65:5a:38:3f:6a:2d:9f:1c:53:
                    4d:1e:d5:bc:76:20:17:21:59:26:b0:86:24:65:b8:
                    0b:d8:11:c1:a4:ab:1e:f4:4f:92:0f:df:02:5e:01:
                    e6:b9:77:d6:f0:cc:d2:b0:af:5e:f9:f1:3e:16:63:
                    26:61:0c:05:a2:b7:4a:e4:7c:89:d9:29:fa:71:35:
                    ed:03:88:af:dc:95:d2:07:5a:08:6f:73:60:d0:ee:
                    9a:bb:50:a1:6a:8d:7d:8d:d8:06:5e:7e:b6:82:32:
                    e4:55:ed:cf:a9:83:2f:51:14:c2:f3:f2:e9:e3:94:
                    2b:52:8a:ce:c4:8f:bc:dd:4f:3b:7f:43:e7:2d:d7:
                    99:54:d0:c9:01:b1:9c:fd:33:22:f3:84:a3:58:59:
                    0f:4a:5b:a4:95:88:1f:ff:d6:f2:fe:7f:86:5f:cf:
                    cf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E9:EF:39:B8:D1:7E:C3:4D:F4:F2:B7:6D:4A:52:E5:B2:0B:CB:74
            X509v3 Authority Key Identifier:
                keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:9d:53:ef:3c:33:0d:8f:23:0e:58:f7:5f:a2:1f:a3:40:60:
         f2:3b:29:ec:8a:ad:19:41:ab:7a:be:79:a9:2f:18:fc:81:e9:
         04:5d:5d:82:eb:ac:07:7d:21:49:2e:ec:93:69:5a:ec:93:04:
         13:10:aa:07:a0:f8:52:5b:a4:82:91:ff:02:b9:23:a6:9e:70:
         e1:5e:58:e8:41:b1:42:0c:07:13:3a:33:0e:f4:e5:2e:19:5c:
         ff:cb:79:f6:85:5a:c5:bc:1b:db:d8:a9:51:ee:bb:2f:41:e4:
         d4:91:28:a4:94:f3:8b:75:f5:7a:26:2a:4e:6f:f8:f8:b6:81:
         39:a0:f9:ce:68:8d:b9:1a:d0:a4:09:28:d6:38:a1:d8:a6:79:
         ab:23:b0:40:93:a0:da:43:61:d0:7e:30:86:7e:ad:b0:52:5e:
         e8:39:5f:7a:1f:59:c5:3c:46:63:d5:67:95:7a:bd:7a:48:1c:
         8c:91:14:5e:61:2d:9d:eb:40:ae:f0:fc:34:66:8d:4c:7e:36:
         35:3c:bd:ba:48:83:f8:e5:73:43:aa:77:b6:f5:5f:ca:94:f3:
         b5:89:ad:d5:83:d8:70:4a:36:0d:2a:b8:09:24:a1:40:2c:19:
         ac:74:54:f6:60:6a:54:3e:75:a2:a9:9c:c0:69:16:3b:52:3a:
         6e:9d:bc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:56:56 2026 by rpki-client