Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
File:                     uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json)
Hash identifier:          FU+50qGZr3qa7q/y/19B1yrdzK0Us5SnYG0T/i/1b7A=
Subject key identifier:   43:DC:2D:FB:DE:BF:90:23:DA:FF:6F:17:79:32:21:9C:7D:5D:30:C2
Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36
Certificate issuer:       /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
Manifest number:          0121
Signing time:             Wed 13 May 2026 05:58:19 +0000
Manifest this update:     Wed 13 May 2026 05:58:19 +0000
Manifest next update:     Wed 20 May 2026 05:58:19 +0000
Files and hashes:         1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: lNYw/741VJ1eW97hwKlxgA0YzxncW8ISyt9GmK1LCBs=)
                          2: B035E67615D311F09BAD2971C4F9AE02.roa (hash: FXgcqSwIcOtjJXrtuwb30InUYea2PVbqiaYnf/D8IVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
        Validity
            Not Before: May 13 05:58:19 2026 GMT
            Not After : May 20 05:58:19 2026 GMT
        Subject: CN=6a0412fb-3269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6f:ca:b8:00:3b:8b:e2:7b:84:64:3a:a4:3a:
                    d8:b5:27:1b:c5:91:eb:8e:4a:c4:64:be:2a:b1:83:
                    0b:90:7c:c5:29:57:13:08:08:21:7a:c2:25:c8:02:
                    bd:16:0d:cf:d9:e5:58:86:09:ec:83:81:72:ec:7c:
                    5e:39:0c:c6:7f:57:35:d4:de:d8:f2:b1:19:ab:b9:
                    eb:fc:5c:a4:71:92:70:e6:bf:9f:3c:59:85:93:7a:
                    69:fc:c8:78:96:40:43:13:3c:ad:c3:d2:88:b1:e6:
                    80:d4:ef:14:38:e5:24:57:d2:5c:e7:42:0e:f5:1f:
                    0e:9a:45:d8:7d:e8:ab:ea:12:6d:3e:96:73:58:f5:
                    a6:7e:18:05:4c:9c:84:33:c0:7d:50:54:1d:aa:13:
                    42:66:49:53:9e:40:47:86:96:28:09:a4:0d:6a:63:
                    ab:f8:3d:36:7c:d2:28:36:57:17:b2:40:4b:b6:17:
                    59:16:42:34:20:35:cf:e7:b8:aa:d0:96:d9:eb:2b:
                    99:2e:61:d7:33:89:64:af:00:c4:e3:42:22:1f:c6:
                    5b:c3:ae:4c:43:4d:22:2b:0e:73:2a:80:d9:b7:f3:
                    18:63:84:df:77:31:96:25:f4:e8:77:3e:81:54:81:
                    29:15:16:c5:75:43:41:c7:eb:1b:e8:60:31:2d:b5:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DC:2D:FB:DE:BF:90:23:DA:FF:6F:17:79:32:21:9C:7D:5D:30:C2
            X509v3 Authority Key Identifier:
                keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:4f:b9:c2:4a:52:50:c4:2e:8a:f8:17:65:2f:3f:de:d9:46:
         5a:fa:80:3d:99:fb:78:f9:5c:1b:e1:30:54:70:17:d1:2a:b2:
         72:98:8d:28:6a:0d:b1:9c:bc:59:fe:c8:cd:d9:73:d5:a8:0a:
         ec:3c:61:d4:94:ba:3e:3e:3d:5a:9b:c3:71:d4:e1:94:26:26:
         27:01:88:a3:fb:39:ba:8c:19:b0:33:6e:25:0a:42:ac:ea:5e:
         fa:8f:82:1c:6a:d6:1d:05:30:d2:55:85:f3:51:6e:3b:15:28:
         14:c2:2e:e4:bb:cb:c4:fd:29:93:3c:96:ab:46:54:2b:92:e0:
         bf:16:a0:df:d8:50:b6:7d:d3:2e:cd:fa:3f:0d:72:92:42:4f:
         c3:8d:90:da:52:4c:25:6c:83:b5:cc:c1:6c:4a:ae:65:f4:ee:
         8c:66:f6:eb:f6:32:0d:7e:9d:07:a8:90:24:58:be:1c:b4:82:
         d4:36:8b:27:bb:ea:2b:75:56:fa:2f:dc:81:b7:23:91:12:64:
         b3:9a:48:cf:88:24:74:65:0d:93:7f:c6:19:c4:38:02:1f:79:
         69:40:f5:68:17:e1:ec:09:07:de:1d:c2:3a:68:93:7e:5f:57:
         d2:72:61:29:5c:19:5a:8b:89:e0:82:05:89:16:9a:52:95:d7:
         06:d4:f4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:54:53 2026 by rpki-client