Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
File:                     uxh7m1B2e7e7wih3IL02wLjQaJY.mft (raw, json)
Hash identifier:          SDO6UfRPMWfNpIal1/T3WXTpRAd0SA8vm4S27J/3YBc=
Subject key identifier:   C3:55:ED:DF:17:C8:84:B4:B8:0E:A1:78:CF:6F:94:BC:A7:37:FC:D7
Authority key identifier: BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96
Certificate issuer:       /CN=A9191E43/serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
Certificate serial:       0399
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
Manifest number:          0399
Signing time:             Wed 13 May 2026 00:52:09 +0000
Manifest this update:     Wed 13 May 2026 00:52:09 +0000
Manifest next update:     Wed 20 May 2026 00:52:09 +0000
Files and hashes:         1: uxh7m1B2e7e7wih3IL02wLjQaJY.crl (hash: 9RMyten+vYmGtWVvmFOaxnpCNfSc1PV7JSZDpFKV9vg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl
                          rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:52:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921 (0x399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191E43, serialNumber=BB187B9B50767BB7BBC2287720BD36C0B8D06896
        Validity
            Not Before: May 13 00:52:09 2026 GMT
            Not After : May 20 00:52:09 2026 GMT
        Subject: CN=6a03cb39-81a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:07:8b:fc:6a:2e:a9:45:84:05:fa:5d:f5:9a:
                    8a:52:3a:8f:17:bd:d2:a1:f2:60:42:85:8d:0d:b8:
                    2e:ea:82:ee:8a:61:49:17:80:fa:64:9a:3d:65:92:
                    60:78:fe:90:6b:0a:87:97:4d:71:e7:60:e8:b3:bc:
                    0b:ab:02:03:12:23:58:17:8c:23:26:49:c0:f6:c3:
                    24:46:21:85:a6:8c:71:b4:86:26:97:2b:50:19:f2:
                    41:2f:87:3e:69:2f:ed:c9:16:a3:87:f0:79:f0:3c:
                    8b:6e:bd:92:0e:82:d9:97:f2:37:d5:f1:50:9e:30:
                    0f:ae:1e:2c:f1:a4:dd:68:c9:d0:37:a0:d6:23:7e:
                    68:95:4e:6c:18:b5:b0:1c:76:ac:22:ca:60:ec:15:
                    5b:f6:25:e5:9e:2b:a0:44:42:7c:18:e1:ae:18:f8:
                    a6:c8:20:8e:96:b6:2e:0b:c0:8a:c9:c5:a3:b2:c3:
                    db:47:1c:eb:5b:e4:87:41:ac:69:b0:84:ab:14:15:
                    a4:f8:e4:ce:84:e8:65:65:80:b1:3c:9d:53:4d:d8:
                    7f:86:6b:cf:07:88:73:de:a6:a1:7b:a0:ad:8c:07:
                    13:a7:a3:48:3a:62:06:6d:2b:da:21:81:af:cf:c9:
                    44:7b:1c:59:4c:13:72:9d:53:2e:5e:29:9d:1f:59:
                    40:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:55:ED:DF:17:C8:84:B4:B8:0E:A1:78:CF:6F:94:BC:A7:37:FC:D7
            X509v3 Authority Key Identifier:
                keyid:BB:18:7B:9B:50:76:7B:B7:BB:C2:28:77:20:BD:36:C0:B8:D0:68:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uxh7m1B2e7e7wih3IL02wLjQaJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E43/508DA118E20111EC97CB315CC4F9AE02/uxh7m1B2e7e7wih3IL02wLjQaJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:36:7f:1e:2e:cf:2e:47:a3:dc:f5:c9:80:ed:99:15:14:b7:
         33:42:af:60:28:9b:11:65:6a:04:ff:72:1d:1c:a0:2d:c6:cb:
         2e:e6:33:e8:6c:ce:f2:ef:eb:22:4c:4c:43:12:10:47:ad:d1:
         1c:25:57:13:12:52:36:48:14:fa:57:08:b2:f1:cd:79:1e:cc:
         81:c8:f8:f4:b8:6c:0d:47:7c:84:e8:e8:52:75:a0:8a:59:82:
         82:78:2a:75:57:ee:11:61:84:2e:05:45:00:c8:c7:db:5e:a3:
         ea:7c:4a:9e:44:46:6b:77:c2:dc:05:48:5e:23:33:cb:71:81:
         07:9b:63:41:49:ad:f4:81:f6:33:f6:92:49:d5:58:f6:2b:eb:
         1b:ae:5e:ee:d4:6c:09:01:1d:24:c4:b9:3c:cd:bc:c3:49:55:
         29:90:24:c9:81:d3:4d:8b:55:90:4c:99:a4:71:01:87:e9:34:
         3a:a3:6b:01:03:db:75:1a:1d:43:8c:d6:b6:ba:7d:4c:9a:71:
         7d:1c:78:94:cb:af:65:db:1c:b9:bb:6b:3f:e4:a5:61:4a:75:
         6b:ae:c4:ae:69:30:e2:c7:5e:51:9b:2a:a8:be:24:f9:a3:79:
         ee:14:11:c1:0d:02:9f:33:fe:69:c3:c9:46:4e:4f:b2:84:cb:
         11:61:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:42 2026 by rpki-client