Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
File:                     uHLzTVUlH6dw7MOT0mcSED1VBzc.mft (raw, json)
Hash identifier:          inCbRZ/E/9RwW4AR+KycRmZsl9gbJDBQUXDnZEBUPco=
Subject key identifier:   7C:3B:A0:1D:DE:1D:57:CD:EE:F7:1C:60:9C:32:23:86:44:89:C4:E7
Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
Certificate issuer:       /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Certificate serial:       0481
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
Manifest number:          0473
Signing time:             Mon 11 May 2026 00:11:12 +0000
Manifest this update:     Mon 11 May 2026 00:11:12 +0000
Manifest next update:     Mon 18 May 2026 00:11:12 +0000
Files and hashes:         1: uHLzTVUlH6dw7MOT0mcSED1VBzc.crl (hash: g94sDihwgzliWIdG5n/u1E18jT+YoHNOVtNEPxNkQ8Y=)
                          2: 945375FAF69511EC90A47215C4F9AE02.roa (hash: zMi/iKJQrGzXvdGe1pLHWvdh1dvtB0WJqrM1vceGtKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
                          rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153 (0x481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737
        Validity
            Not Before: May 11 00:11:12 2026 GMT
            Not After : May 18 00:11:12 2026 GMT
        Subject: CN=6a011ea0-35a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:03:03:19:ab:cd:f7:9a:5c:65:fa:7c:a5:93:
                    ba:3b:91:a2:23:58:6d:8a:c7:0f:66:c7:c0:b0:29:
                    9e:fe:40:30:89:22:98:7b:da:02:3e:ac:0c:df:5c:
                    4c:3f:39:24:2d:1c:0b:eb:28:10:d4:5e:ae:f4:51:
                    1d:51:8e:44:23:5a:32:d5:8a:19:0a:41:df:4e:6d:
                    0f:5c:d4:85:17:ad:95:74:f9:69:f6:a5:53:dc:c0:
                    20:60:5a:fd:3b:f9:c4:12:88:fc:cd:b5:3c:77:78:
                    0f:86:b6:96:d2:ab:98:4c:b8:fc:5d:99:8d:24:00:
                    1f:1b:18:97:6a:40:1f:e7:ba:91:e7:51:ac:c2:0d:
                    50:72:bb:4d:bf:da:b2:89:7c:a7:9e:26:35:bd:7d:
                    8a:a8:cb:02:e0:88:de:10:e3:c7:14:22:27:86:1c:
                    4f:6a:af:a3:d6:e6:a1:f0:e8:02:ae:2e:a7:b4:73:
                    6f:57:68:4d:2a:44:87:fa:ea:5b:c6:59:1d:49:0a:
                    69:49:87:38:9d:b7:b8:13:0f:1d:97:72:44:22:b3:
                    5b:d7:63:c5:d8:68:86:3d:0a:04:e8:d0:a8:04:b1:
                    91:93:34:e6:5d:06:0d:3f:94:72:cf:86:d1:75:2a:
                    9f:35:e9:d1:7c:05:d7:1e:3e:82:50:fd:70:b4:b7:
                    10:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3B:A0:1D:DE:1D:57:CD:EE:F7:1C:60:9C:32:23:86:44:89:C4:E7
            X509v3 Authority Key Identifier:
                keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:67:7d:93:e1:07:7b:6a:b6:bf:17:fb:2f:4d:29:22:01:83:
         c6:07:a0:03:9e:fc:97:03:31:16:65:fe:79:1a:ed:02:f2:50:
         14:59:58:01:28:bd:26:55:31:83:25:34:ef:8a:6e:e4:17:2e:
         e8:83:46:49:37:c2:20:c7:18:11:d6:82:85:42:99:58:38:e8:
         f0:4c:69:b3:b5:2a:67:73:06:79:e4:fb:4f:eb:61:12:11:64:
         d5:5a:04:45:d8:12:19:80:f1:b1:e2:22:9f:e9:6c:26:56:cd:
         9a:76:c8:eb:00:e2:d2:fd:a9:88:eb:46:be:b8:d6:f7:fe:26:
         2b:11:d6:cb:f0:01:5f:d9:ca:07:90:09:4b:e9:bc:3e:3b:91:
         bd:34:97:fa:6d:6c:ca:e3:8f:01:0e:73:26:00:a2:eb:a6:bd:
         b4:b0:cb:48:5e:43:63:62:a2:52:7b:18:f6:75:09:cf:4e:52:
         59:59:d3:90:a2:53:58:c1:a0:7e:bc:ca:d7:8e:1a:74:6b:12:
         b7:e1:8c:ca:3e:ce:25:fc:11:57:3d:cf:b4:10:31:cb:48:ea:
         af:c1:87:b9:89:1a:f8:9c:46:8f:1e:52:b2:5e:47:f0:ce:f9:
         cd:61:7f:34:b3:d5:b4:f7:ea:41:90:62:84:1b:ac:cc:3b:27:
         de:9a:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:52 2026 by rpki-client