Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
File:                     UPIOqel1rkxMhmfLV_e89XAhXJY.mft (raw, json)
Hash identifier:          J2klz0CU6V1w6Z2A9Q3ay365SqS2o1LPb0933eYuB5A=
Subject key identifier:   E3:2D:A0:BA:9C:25:26:11:F7:28:03:E0:9C:DA:33:AF:99:64:83:E0
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       2593
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
Manifest number:          24F7
Signing time:             Tue 12 May 2026 15:47:05 +0000
Manifest this update:     Tue 12 May 2026 15:47:04 +0000
Manifest next update:     Tue 19 May 2026 15:47:04 +0000
Files and hashes:         1: UPIOqel1rkxMhmfLV_e89XAhXJY.crl (hash: G0wffdjBk0bjm60HQuWJ0LfNexIBKFRTYrHhf/YDoL0=)
                          2: AFF73BD2BA0811EAB2479081C4F9AE02.roa (hash: DdZKXb4M/HY8Rw+731AG6sVTmrNxGDyuIDLl//IJ4zA=)
                          3: 554E53D4B0B811EC9BE93E24C4F9AE02.roa (hash: UpHGfUh0kotKwn90fIlxnooF4zogBZjwjsBrsKk+nCk=)
                          4: D327C18CDFEC11ED9AB6E147C4F9AE02.roa (hash: /qxQS2wqFL61pnX87hC2dTs6d/aGFT2iNa6oqURPmXU=)
                          5: 5A2BB4DE28C111E7A885571AC4F9AE02.roa (hash: SeqETIAVpr7MwdcBc+UVdbUh65jW/rT70NB3K1w2Nmw=)
                          6: D451FBE0DFEC11ED9AB6E147C4F9AE02.roa (hash: Ff6tbDoeChVjxh4vFj0oHX0pSBSFGJGoNblriebIoqA=)
                          7: 06239EBADFEA11ED835B4D0EC4F9AE02.roa (hash: XttvVqkNkAnCFM1MY9xTWgbB01SQSa1kxn+W5THogUU=)
                          8: 59B3485028C111E7A885571AC4F9AE02.roa (hash: F1bHZVCAAlM5R2hu8xgkHlsSjuo7aB5QEMEkptThpJg=)
                          9: 773D7A96B0DC11ECAEC09469C4F9AE02.roa (hash: 9/9c5jlFxtEUyu1G+D434+lqd0WolLm0ksxcpS1itfY=)
                          10: D50024D6DFEC11ED9AB6E147C4F9AE02.roa (hash: NpbFmehH6sCWVstqM+8ivirhzh87kF22vlqRdRYqcLU=)
                          11: 491B85B2E58911ED94960F39C4F9AE02.roa (hash: p1xnXgA9LMb0Mxi/ycHH4/cztijIDWFhRgDmWJFXY5E=)
                          12: 1A2298A2D23811EABDECA85FC4F9AE02.roa (hash: Ky7+ULOyrKSM9ovhVgKVTrhgbn8AP/xK6RnZbcrBvyA=)
                          13: B8951CDCD23611EA8D9E515BC4F9AE02.roa (hash: htHpKZon5mNG5P/Pj39EzkVhrOvEpR2CWRf+XbzGuIg=)
                          14: E706A8B2BBF111EE8697E433C4F9AE02.roa (hash: +vaa0VOm4wz+weMjzRo0jbo8hgAyLHv/jTs0BYsAOGM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9619 (0x2593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: May 12 15:47:04 2026 GMT
            Not After : May 19 15:47:04 2026 GMT
        Subject: CN=6a034b79-e5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:75:41:3b:a3:f6:66:d0:79:b4:54:e7:0c:
                    98:fd:a4:d2:e7:9d:32:7f:b0:6a:5a:19:e5:14:0a:
                    b7:87:42:0a:91:94:f7:33:bd:a0:c4:45:00:bf:80:
                    d9:81:91:f0:9a:4e:fb:34:eb:27:93:e2:99:03:28:
                    2d:b6:8b:f6:f8:d3:59:94:27:5f:83:26:54:5d:a5:
                    93:73:24:72:27:0e:28:bf:69:36:ec:b8:eb:97:1c:
                    33:4c:5d:44:63:b0:62:02:42:a2:c6:7e:1e:fa:47:
                    b6:1f:49:25:3b:48:20:af:17:e7:dc:ba:af:bf:05:
                    76:3a:0c:24:5d:f7:44:48:e5:69:d1:fb:8d:ea:61:
                    f3:c6:2f:c8:8c:bd:9d:b4:6c:e7:83:c2:ba:23:2f:
                    43:4c:5c:4c:4d:fd:2e:f2:f2:e0:ce:e1:39:8c:60:
                    4e:99:76:b2:46:21:ca:41:46:42:5d:bd:ae:7a:50:
                    a6:14:da:5f:72:0d:f5:53:5a:7f:25:7e:79:9d:81:
                    b4:bc:6e:69:2f:3b:82:11:81:96:7b:34:57:57:91:
                    92:0a:2c:ca:12:cf:9a:c7:1f:18:92:18:6f:e0:86:
                    a6:ef:a6:93:af:1a:ad:f9:38:ae:19:2c:e2:4a:9f:
                    e5:80:51:87:c5:15:f7:8c:0c:fd:93:9d:73:e9:7b:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2D:A0:BA:9C:25:26:11:F7:28:03:E0:9C:DA:33:AF:99:64:83:E0
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:a5:a1:5d:e4:40:8a:44:a2:2b:2b:b4:9f:ad:2b:f4:11:92:
         93:a0:46:44:e0:8e:dc:28:6f:54:64:0c:26:f3:a1:0b:52:d8:
         23:9e:6d:00:17:42:d1:59:2b:dd:95:18:a4:6c:0f:50:8e:23:
         17:47:6a:ca:e4:25:bf:50:7d:fd:df:53:fc:83:4d:eb:6c:2b:
         c0:f7:0f:b5:20:ea:bf:9a:a1:0a:29:32:cc:08:ae:23:45:42:
         d0:4e:48:32:ff:c0:19:c0:76:59:1c:19:6c:23:44:a3:e1:f9:
         4e:ec:2d:2e:45:27:ef:74:4c:44:cd:89:1f:1f:13:f1:2b:1f:
         4d:b5:96:ed:3a:02:78:a3:78:fb:60:7d:c6:9b:84:12:57:ac:
         7f:57:dc:f2:91:3a:3e:a0:de:35:de:0b:15:bc:12:46:0a:ec:
         7c:75:85:46:ad:ba:99:a7:43:07:5d:c9:58:b8:de:32:e6:9d:
         57:0a:58:5d:0b:dd:f6:a6:df:75:8e:c8:d2:ba:7a:42:69:7d:
         1d:39:50:56:da:91:84:57:0a:10:9d:7d:23:a4:ae:21:c3:c8:
         6c:ed:1e:94:6a:02:2e:16:44:db:bd:5f:94:53:ce:7a:4e:a4:
         bd:a5:e6:0c:29:c7:56:49:e0:16:27:5b:c1:28:98:61:21:91:
         4e:6a:63:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:07:44 2026 by rpki-client