Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.mft
File:                     ux6KA-aY-Sh7_GQlP7_GN0Xogjo.mft (raw, json)
Hash identifier:          TIxFDuJnjGpJ9BmOp8UoUT6xWlMjlvQkK4lG6YgukQk=
Subject key identifier:   51:71:F1:16:DA:DA:9F:84:F3:3B:ED:5A:1E:F5:25:FE:91:68:D4:62
Authority key identifier: BB:1E:8A:03:E6:98:F9:28:7B:FC:64:25:3F:BF:C6:37:45:E8:82:3A
Certificate issuer:       /CN=A915EA14/serialNumber=BB1E8A03E698F9287BFC64253FBFC63745E8823A
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.mft
Manifest number:          36
Signing time:             Wed 13 May 2026 08:46:38 +0000
Manifest this update:     Wed 13 May 2026 08:46:38 +0000
Manifest next update:     Wed 20 May 2026 08:46:38 +0000
Files and hashes:         1: ux6KA-aY-Sh7_GQlP7_GN0Xogjo.crl (hash: yGArq7P5WMmxvbBJPLijcGkesnlpb/CKHhz5o3UkOkQ=)
                          2: 82755B58021E11F1B34B19A3496F56BC.roa (hash: ifPwyUF2Mr82aFijpmqBd1JrpsYwJgee18Gcn8+c8eE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.crl
                          rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA14, serialNumber=BB1E8A03E698F9287BFC64253FBFC63745E8823A
        Validity
            Not Before: May 13 08:46:38 2026 GMT
            Not After : May 20 08:46:38 2026 GMT
        Subject: CN=6a043a6e-bffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:e0:e7:56:17:e1:2c:6d:de:47:dd:ff:a4:
                    82:f1:43:d5:68:8d:e2:6f:82:84:4e:42:7a:b9:bc:
                    7f:d9:17:e2:f5:b2:b8:2f:c0:25:75:b2:56:35:ec:
                    0c:49:2c:e6:93:d7:c3:d1:0b:b8:ed:95:28:db:24:
                    08:ab:f3:13:d7:01:2c:6d:0d:f6:1c:54:ea:46:56:
                    e6:2e:44:f4:d6:30:a1:f7:3e:70:86:a5:24:ac:02:
                    a9:e1:35:72:40:1c:31:ad:70:3f:4c:e6:1d:7f:83:
                    0d:10:af:20:7d:48:b4:83:68:c8:e8:aa:f6:12:31:
                    bc:d4:11:e5:8d:df:34:94:fe:6a:5c:c3:22:68:2c:
                    86:c9:62:94:43:0f:da:b2:fa:9d:c8:12:b4:bf:b1:
                    7e:31:22:65:38:a4:3d:f6:6c:b1:4b:22:62:15:55:
                    64:35:e7:c6:d3:68:57:df:ea:0b:2c:a1:99:6a:8e:
                    88:df:ed:4e:5d:d5:8a:d2:51:b9:6d:a5:7d:69:ef:
                    d5:f5:a8:5f:92:ad:8c:95:a5:6d:46:6c:ed:ec:be:
                    da:e9:cb:e5:ea:a0:d5:ee:5f:bd:8b:53:ab:f2:2c:
                    03:93:37:51:00:3f:2f:2e:9f:21:d4:d9:14:e0:67:
                    01:0a:91:f5:01:51:ba:9f:41:83:12:8d:53:b8:8a:
                    4d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:71:F1:16:DA:DA:9F:84:F3:3B:ED:5A:1E:F5:25:FE:91:68:D4:62
            X509v3 Authority Key Identifier:
                keyid:BB:1E:8A:03:E6:98:F9:28:7B:FC:64:25:3F:BF:C6:37:45:E8:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:23:43:97:ea:d0:dd:2e:d8:da:c3:80:2c:75:76:ce:85:1c:
         97:ba:72:b9:e0:f5:db:d6:b9:6d:76:92:8d:d4:25:1a:0a:b6:
         df:66:87:98:45:7a:b2:0b:31:14:b3:03:b7:ae:ab:2a:97:16:
         69:db:70:02:c2:d1:02:55:86:b3:a3:2e:8e:2e:91:87:97:74:
         0d:45:d4:59:a3:1a:ec:64:cc:95:33:06:2f:90:b4:a9:ee:f8:
         02:87:e5:81:97:3e:ad:25:75:c9:af:39:ba:2b:dd:16:04:01:
         9a:09:ae:67:0b:d7:e9:b3:6f:c9:b7:2b:62:02:da:a2:08:44:
         c2:73:5d:9d:e8:d2:56:07:1f:1e:71:43:b1:8c:4e:51:04:68:
         7b:05:9c:77:8d:7a:46:eb:74:a0:40:05:8c:17:01:37:7b:76:
         0a:e2:bb:c5:2c:07:65:74:d4:00:0a:e8:04:b7:75:36:df:98:
         8a:d8:89:41:7e:4d:2e:8c:d5:a7:3b:be:ed:27:e9:54:1f:b4:
         e7:c7:91:4a:02:6f:3f:83:9d:16:d7:5a:53:9f:9c:60:d3:f8:
         9d:5d:90:38:94:61:39:95:96:b8:57:f0:30:fb:34:37:cd:ac:
         59:5d:7a:ee:12:fd:34:78:c2:fd:f1:5c:f5:a1:ab:b3:d6:77:
         c9:6d:43:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:53:07 2026 by rpki-client