Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
File:                     U_b3klO824sdFxgs5PGdOf1JnfU.mft (raw, json)
Hash identifier:          P2y1nlIpP+OLruJkelkyyRh2H7Hcl2F0BX1Eob6kCDA=
Subject key identifier:   46:A8:85:4A:D2:41:B5:59:B9:47:C6:E4:AE:65:67:B9:FF:86:A7:AA
Authority key identifier: 53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5
Certificate issuer:       /CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
Certificate serial:       06F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
Manifest number:          06EF
Signing time:             Tue 12 May 2026 22:14:01 +0000
Manifest this update:     Tue 12 May 2026 22:14:01 +0000
Manifest next update:     Tue 19 May 2026 22:14:01 +0000
Files and hashes:         1: U_b3klO824sdFxgs5PGdOf1JnfU.crl (hash: fph91iea08uRl3mmBx3b1Yn2+k1j+MW5l2Thma19/qw=)
                          2: 28D1785891E311EBA138E330C4F9AE02.roa (hash: gFr9tBtN+YsBA4oZiVIoYAd+eRR5ghbNb9orW5HThAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl
                          rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781 (0x6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340, serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
        Validity
            Not Before: May 12 22:14:01 2026 GMT
            Not After : May 19 22:14:01 2026 GMT
        Subject: CN=6a03a629-5a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:e1:11:99:61:66:b5:d4:34:c2:4c:5c:6c:
                    9b:6f:d3:ad:9b:44:36:90:e7:a7:07:2a:3e:bd:ff:
                    bd:a4:22:02:a8:69:46:16:cc:67:26:e9:4e:22:3d:
                    c3:e3:12:cc:d3:84:c4:e7:d8:a2:e0:0b:77:c9:31:
                    58:4e:0d:74:2c:a3:6d:db:29:2b:58:05:d0:42:9b:
                    7e:73:f1:fe:07:f9:2f:b7:ef:87:8c:37:bc:fc:eb:
                    39:1e:d2:d8:5f:34:2a:bd:32:f4:1d:be:41:c9:90:
                    8a:a1:7e:73:ad:00:f2:f6:f1:8b:a8:d4:6f:b6:94:
                    90:55:15:6e:f1:c1:ab:59:b2:cc:19:aa:39:95:5f:
                    2e:53:17:8e:8d:db:d4:8e:39:3a:1b:4e:df:2c:44:
                    ce:93:6a:08:06:21:37:55:e8:9f:5e:8d:a7:3d:7f:
                    2e:2a:7a:98:fb:79:d6:e5:8c:a6:3d:2b:c7:7f:46:
                    2c:fd:fb:75:3e:f1:6d:b0:2a:bd:41:56:7d:85:6d:
                    05:ab:e2:08:fc:d2:df:8f:f9:e6:ea:e6:15:2c:8a:
                    91:20:cb:73:3a:7b:a6:01:f7:d2:7f:ef:95:79:24:
                    15:6d:1c:88:cf:51:7f:a3:94:74:01:e7:97:e4:52:
                    02:20:94:52:3c:b7:7e:a5:b6:f6:4b:6a:a9:55:87:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A8:85:4A:D2:41:B5:59:B9:47:C6:E4:AE:65:67:B9:FF:86:A7:AA
            X509v3 Authority Key Identifier:
                keyid:53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:45:06:c6:82:31:41:42:88:d6:63:88:a1:40:2e:9b:8f:20:
         e2:8b:e4:07:9a:2b:31:d5:ec:83:5d:d8:a6:b7:a6:41:e8:26:
         8a:f6:68:3c:46:44:dc:d5:e7:b5:5c:26:ca:48:63:7e:1b:21:
         43:b6:d7:f5:e3:28:6b:12:34:1d:ba:bc:59:57:c4:eb:1d:2e:
         08:f8:15:12:07:7c:20:56:d1:1d:56:bc:d9:3c:ff:4d:ba:f5:
         c0:1b:f8:16:ea:4e:46:d3:1a:1e:6a:14:e6:9f:d5:11:cb:66:
         f9:9f:32:21:c9:21:65:e2:7b:5b:fa:18:b2:5b:7d:8f:3a:d0:
         bc:ec:35:92:5e:b0:58:a5:dd:af:f9:05:1d:b0:09:bf:8e:b9:
         ba:00:d0:79:ff:7e:f6:e3:05:be:c3:41:fe:4c:48:b9:72:28:
         3b:61:e8:ec:73:44:b5:a8:bb:43:13:c4:16:26:d7:4a:ba:ed:
         51:31:b4:38:0a:72:96:0e:3e:bc:b2:e9:4e:36:e0:f6:c8:81:
         93:58:3b:70:2f:d1:1f:4f:66:da:91:cc:fc:fa:a3:df:41:87:
         d6:18:86:9c:9b:a2:cc:bd:af:cd:67:f4:28:c7:d0:d6:28:d5:
         b6:a1:1b:bc:2b:b8:c6:66:75:8d:b6:0e:c5:b0:1b:78:61:25:
         cb:cf:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:16 2026 by rpki-client