Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
File:                     uH-tZU7EIXxlANDwaxm-MZ09rfc.mft (raw, json)
Hash identifier:          URTIG4Ci6S9BlQJnCCcDRrZcA2Tu4kqSrr4eJyIuang=
Subject key identifier:   34:2F:6D:62:7D:11:C1:29:C2:40:14:B5:A3:06:EA:28:2D:19:42:BB
Authority key identifier: B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7
Certificate issuer:       /CN=A9155725/serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
Manifest number:          D8
Signing time:             Mon 11 May 2026 06:49:43 +0000
Manifest this update:     Mon 11 May 2026 06:49:43 +0000
Manifest next update:     Mon 18 May 2026 06:49:43 +0000
Files and hashes:         1: uH-tZU7EIXxlANDwaxm-MZ09rfc.crl (hash: ClvZ+hKQmJ6ytu03OjvWyMe4OwPgQ84QrjW8q4K/oC4=)
                          2: 7621BEA0084611F08BEB2E2DC4F9AE02.roa (hash: ekv9lLMJowy0tTt5Vgk8NN5c2QvrR8UHcRzo+mWEFnI=)
                          3: 753F0588084611F08BEB2E2DC4F9AE02.roa (hash: GvdeGH0sSCGiMmyFpeTDGYKnqtnBqjejK6ik65LVhK4=)
                          4: 75A4B2D4084611F08BEB2E2DC4F9AE02.roa (hash: YxGLaTIXF5/4zegk0ebGTbG3KkMe3GF8/cFOY/M/JZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl
                          rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155725, serialNumber=B87FAD654EC4217C6500D0F06B19BE319D3DADF7
        Validity
            Not Before: May 11 06:49:43 2026 GMT
            Not After : May 18 06:49:43 2026 GMT
        Subject: CN=6a017c07-616b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b1:c2:e8:47:4d:56:1b:e0:2f:86:83:6b:01:
                    5c:98:f8:96:52:b6:44:fb:2a:20:10:e6:f4:ec:4f:
                    4a:dc:10:55:f4:11:40:a2:b6:af:44:a6:b0:97:f2:
                    ec:d0:32:7f:89:5d:6a:f8:73:29:92:f3:57:a5:f0:
                    2b:eb:e2:0c:de:4f:4a:b2:7c:33:98:7b:60:75:00:
                    17:cb:ac:be:6b:c5:c4:c3:04:b3:74:f4:92:26:d7:
                    17:ec:07:3a:75:2a:ae:e4:2e:e0:f0:c2:06:64:91:
                    f4:41:c2:96:24:13:cf:d6:27:b4:d7:6c:6f:a1:dd:
                    4f:07:ff:24:d3:d5:18:70:cf:c7:37:71:5c:cf:8d:
                    d4:ac:98:06:7b:51:e3:f0:40:9f:e3:be:9c:61:cd:
                    7b:0a:20:a0:32:ae:a9:a4:3b:47:2b:c3:ae:34:2d:
                    99:42:d7:34:2c:2f:fa:db:06:86:2c:12:50:dd:0c:
                    33:e1:c6:17:9a:08:4e:38:fe:4f:a7:88:e3:75:6c:
                    60:c6:3e:9d:2f:98:7f:2a:02:3a:59:0e:8f:ae:21:
                    9b:7c:8c:b7:14:ac:71:45:c7:7e:0f:14:2e:e1:61:
                    d2:d3:df:a5:6b:37:12:6f:42:0d:1d:fe:fb:bc:68:
                    87:e3:8a:f5:f2:de:bf:44:af:c0:a5:28:8f:05:be:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2F:6D:62:7D:11:C1:29:C2:40:14:B5:A3:06:EA:28:2D:19:42:BB
            X509v3 Authority Key Identifier:
                keyid:B8:7F:AD:65:4E:C4:21:7C:65:00:D0:F0:6B:19:BE:31:9D:3D:AD:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/uH-tZU7EIXxlANDwaxm-MZ09rfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155725/801BCAA6083A11F09FF1D074C4F9AE02/uH-tZU7EIXxlANDwaxm-MZ09rfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:dd:d7:71:89:91:81:aa:68:38:ec:39:7f:3a:aa:d1:61:36:
         87:c0:97:28:f1:71:79:65:92:a8:a4:86:78:9e:6c:69:9a:d3:
         6b:c5:03:62:26:ea:06:94:db:df:46:dc:bd:37:29:a2:ad:4d:
         74:4f:41:eb:ea:43:ce:fc:9e:ef:d0:76:33:d5:be:6d:6b:d7:
         6b:e3:05:c7:c6:eb:bd:57:28:76:b0:bc:8c:b5:14:c8:b3:55:
         90:44:a6:4f:e1:09:47:60:1f:e5:7a:02:7c:9c:23:b9:df:4b:
         0c:dc:a9:1f:a8:6b:3c:92:dd:e2:45:77:6c:48:f2:46:9e:a4:
         a5:29:31:5d:f2:39:36:5f:e6:91:27:15:24:a5:7e:80:a3:24:
         ed:2d:63:11:de:3c:b5:e7:37:2a:3f:fe:26:37:6e:50:cd:21:
         12:cc:7f:83:b6:8e:2a:99:ba:2c:12:1f:0b:1d:56:26:41:0e:
         51:af:a8:99:d1:bf:b2:76:11:81:6c:b0:96:41:0d:bf:f8:6a:
         00:98:91:76:b1:dd:5f:52:09:04:c3:35:86:0b:76:09:52:e5:
         4a:94:31:bd:a9:97:e4:0a:85:2e:bd:de:32:6f:fb:a9:49:00:
         5e:43:1b:f8:80:b8:66:eb:f6:b7:c3:ca:8c:71:2d:3b:61:46:
         dd:0b:ac:6f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU3MjUxMTAvBgNVBAUTKEI4N0ZBRDY1NEVDNDIxN0M2NTAwRDBGMDZCMTlCRTMx
OUQzREFERjcwHhcNMjYwNTExMDY0OTQzWhcNMjYwNTE4MDY0OTQzWjAYMRYwFAYD
VQQDEw02YTAxN2MwNy02MTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqLHC6EdNVhvgL4aDawFcmPiWUrZE+yogEOb07E9K3BBV9BFAoravRKawl/Ls
0DJ/iV1q+HMpkvNXpfAr6+IM3k9KsnwzmHtgdQAXy6y+a8XEwwSzdPSSJtcX7Ac6
dSqu5C7g8MIGZJH0QcKWJBPP1ie012xvod1PB/8k09UYcM/HN3Fcz43UrJgGe1Hj
8ECf476cYc17CiCgMq6ppDtHK8OuNC2ZQtc0LC/62waGLBJQ3Qwz4cYXmghOOP5P
p4jjdWxgxj6dL5h/KgI6WQ6PriGbfIy3FKxxRcd+DxQu4WHS09+lazcSb0INHf77
vGiH44r18t6/RK/ApSiPBb5HKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQvbWJ9
EcEpwkAUtaMG6igtGUK7MB8GA1UdIwQYMBaAFLh/rWVOxCF8ZQDQ8GsZvjGdPa33
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTcyNS84MDFCQ0FBNjA4
M0ExMUYwOUZGMUQwNzRDNEY5QUUwMi91SC10WlU3RUlYeGxBTkR3YXhtLU1aMDly
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3VILXRaVTdFSVh4bEFORHdheG0tTVowOXJmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTcyNS84MDFCQ0FBNjA4M0ExMUYwOUZGMUQwNzRDNEY5QUUwMi91SC10WlU3RUlY
eGxBTkR3YXhtLU1aMDlyZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATd3XcYmRgapoOOw5fzqq0WE2h8CXKPFxeWWSqKSGeJ5saZrTa8UDYibqBpTb
30bcvTcpoq1NdE9B6+pDzvye79B2M9W+bWvXa+MFx8brvVcodrC8jLUUyLNVkESm
T+EJR2Af5XoCfJwjud9LDNypH6hrPJLd4kV3bEjyRp6kpSkxXfI5Nl/mkScVJKV+
gKMk7S1jEd48tec3Kj/+JjduUM0hEsx/g7aOKpm6LBIfCx1WJkEOUa+omdG/snYR
gWywlkENv/hqAJiRdrHdX1IJBMM1hgt2CVLlSpQxvamX5AqFLr3eMm/7qUkAXkMb
+IC4Zuv2t8PKjHEtO2FG3Qusbw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:10:08 2026 by rpki-client