Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
File:                     ujlCdcT_j47yNHSaNvKhkTknlVs.mft (raw, json)
Hash identifier:          uxaCYzWTpUPnCysdvwpFH3N0l8TaCwfKQZ4Z/9gfluY=
Subject key identifier:   4C:A2:93:3D:41:78:08:FD:DF:94:9D:C6:E7:B3:B3:BB:AB:40:52:F5
Authority key identifier: BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B
Certificate issuer:       /CN=A9158E7B/serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
Manifest number:          51
Signing time:             Mon 11 May 2026 08:26:43 +0000
Manifest this update:     Mon 11 May 2026 08:26:43 +0000
Manifest next update:     Mon 18 May 2026 08:26:43 +0000
Files and hashes:         1: ujlCdcT_j47yNHSaNvKhkTknlVs.crl (hash: TXC/OleVrJlvPmJ73JV6Q6RyEKzptNBdG24jQY5MdLY=)
                          2: B1921BE21D1C11F19ECA08BE103D8C67.roa (hash: WobrnjAcJid+qQ3zmSqPJbNrzTm76HPt3Dd40mnXzdk=)
                          3: B2897A041D1C11F19ECA08BE103D8C67.roa (hash: VQAnAshqNaJSS0rUq9sVC9WDtf0AoAAQTcJNc9J4oxg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl
                          rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E7B, serialNumber=BA394275C4FF8F8EF234749A36F2A1913927955B
        Validity
            Not Before: May 11 08:26:43 2026 GMT
            Not After : May 18 08:26:43 2026 GMT
        Subject: CN=6a0192c3-ddaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e8:21:9b:85:7c:66:96:04:ac:66:94:71:36:
                    25:8f:c0:0a:a1:02:2a:85:94:2d:0b:40:1d:9c:99:
                    3f:d3:d7:e0:83:1e:e5:d6:a7:73:c7:d4:21:1b:3d:
                    8a:f2:9b:4e:20:44:e2:a5:39:87:dc:f1:8c:fb:69:
                    6e:a6:0c:a2:43:1c:c7:0a:61:3e:6d:be:e4:4f:fd:
                    76:9a:4c:09:56:01:2a:20:fc:43:80:df:72:8a:87:
                    75:52:10:57:3f:c6:7d:2e:3f:96:5d:6d:d5:49:29:
                    9f:5f:d8:0a:0a:ff:a6:b1:b5:38:a7:30:2b:b0:84:
                    05:d2:42:a6:af:53:e7:7c:49:93:e8:b8:64:c7:1c:
                    19:ca:22:46:a2:13:6b:cb:7d:62:9b:cd:e0:f6:9b:
                    9a:7b:12:3a:24:08:b4:e8:cc:ab:6e:04:d2:cd:b1:
                    d4:84:60:8b:ab:ea:dc:91:46:eb:cd:9f:f7:a6:21:
                    0c:d4:75:f0:6a:8a:fb:b4:7d:41:52:e2:ce:be:0b:
                    f0:1c:ad:9b:11:4b:15:14:de:41:df:40:33:ee:d8:
                    c2:b4:6c:5d:09:43:c4:f6:ca:fe:47:d2:5d:9d:30:
                    68:9e:3a:b9:d8:cf:27:23:64:d2:c5:a7:83:f8:47:
                    c4:4d:9a:11:2d:ae:a0:f5:0c:b2:bb:c0:57:66:0f:
                    72:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A2:93:3D:41:78:08:FD:DF:94:9D:C6:E7:B3:B3:BB:AB:40:52:F5
            X509v3 Authority Key Identifier:
                keyid:BA:39:42:75:C4:FF:8F:8E:F2:34:74:9A:36:F2:A1:91:39:27:95:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujlCdcT_j47yNHSaNvKhkTknlVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E7B/511B3B1AD99A11F08D4938B065D3641D/ujlCdcT_j47yNHSaNvKhkTknlVs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:69:76:a0:86:60:97:3a:6d:9a:d0:51:3a:15:ca:a6:ab:56:
         41:43:fc:35:6a:d3:f5:8c:3d:7e:06:cf:ed:8d:ff:2e:cd:c2:
         9f:02:dd:5c:b9:54:16:6f:6c:e7:ac:2c:55:77:24:4e:92:82:
         c5:61:cc:9b:44:21:21:95:63:a9:64:78:77:64:7b:27:d1:e5:
         d4:16:55:c9:1e:96:1a:2a:e0:55:c0:8b:5c:54:f0:f2:1c:8d:
         ae:a3:de:28:da:9c:79:9f:02:1f:90:18:88:e7:4c:4f:d4:58:
         52:c5:64:8e:11:82:56:e3:6a:c3:a1:31:02:b4:81:ac:93:d1:
         73:c2:1c:3f:dc:59:1b:1d:d7:76:54:12:cf:42:d0:f3:79:ad:
         19:79:31:24:b9:ad:de:ed:5a:02:c8:44:90:92:c0:8c:df:3b:
         c2:5a:a3:b7:38:fd:5f:77:8c:09:39:00:4f:07:de:7a:43:4a:
         37:2e:d9:88:28:40:12:4d:a7:77:c5:ca:78:59:bf:11:60:0a:
         7b:22:0b:c4:65:f1:29:dd:57:33:06:9c:1a:10:6f:79:e5:f7:
         51:4c:17:84:55:30:2a:6d:5c:c1:9a:93:4b:96:36:81:6a:f1:
         90:b0:7e:57:ee:89:88:d1:46:e6:4f:bf:c7:3f:b3:2b:09:f7:
         87:73:a0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:13:15 2026 by rpki-client