Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
File:                     UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json)
Hash identifier:          1VzFgUuAxHBA9vDHLkE81jLHrBeweY4TIc+ZzPi/b3E=
Subject key identifier:   6C:D4:5C:9A:12:DC:81:27:0B:8E:1E:D2:F6:D2:6F:BF:79:B1:65:E9
Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Certificate issuer:       /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Certificate serial:       0BDF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
Manifest number:          0BD4
Signing time:             Tue 12 May 2026 18:57:35 +0000
Manifest this update:     Tue 12 May 2026 18:57:34 +0000
Manifest next update:     Tue 19 May 2026 18:57:34 +0000
Files and hashes:         1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: kzVIpauUNaW8wDxfmC1HS39PGFIDpb3CkE84Cm11QL8=)
                          2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: cA+0IoAyCHHDkjIL9MPmk5AdVUHzu0n7NznpD3I+o6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl
                          rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3039 (0xbdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
        Validity
            Not Before: May 12 18:57:34 2026 GMT
            Not After : May 19 18:57:34 2026 GMT
        Subject: CN=6a03781f-a5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8d:ba:bf:50:b5:af:bd:83:56:52:4a:31:12:
                    2c:50:0a:13:4f:29:60:2a:58:c8:6e:83:9d:cc:23:
                    ec:2e:47:7a:72:c2:c0:6b:0f:e9:05:f2:af:71:7a:
                    95:dc:0b:e7:34:1c:1f:15:d4:67:c3:84:82:9c:e9:
                    9c:9e:13:57:f3:b9:40:a0:99:5a:f7:f4:e3:54:d0:
                    75:fd:56:c8:68:e8:2a:9b:21:9d:9f:e0:da:78:77:
                    11:fe:0f:32:13:07:53:ac:7e:9f:ba:52:57:44:76:
                    3c:61:33:c9:c2:5a:ae:0c:4e:11:66:54:c5:b8:ac:
                    09:6e:fb:75:5b:fd:17:15:e7:2c:9b:34:3d:97:ca:
                    65:e9:9a:d8:35:1f:1f:ff:10:4c:52:dc:c9:65:83:
                    b5:d9:9c:69:90:ae:f6:f6:1f:cc:f9:53:e4:5f:b3:
                    59:c5:d7:18:c4:fb:c9:81:fa:76:52:7b:fe:65:64:
                    3a:b4:f8:cd:73:93:29:28:f8:54:79:1c:86:2c:76:
                    92:af:d9:69:35:bf:14:8e:14:a1:03:4b:93:ee:9d:
                    75:be:54:c4:d2:41:6d:1f:b1:c5:14:68:1a:1f:2f:
                    2f:1c:49:41:39:9b:24:fb:c1:c6:c3:2c:ff:0c:18:
                    0f:d7:f2:09:9e:c0:9d:74:2b:01:62:38:56:9a:0d:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D4:5C:9A:12:DC:81:27:0B:8E:1E:D2:F6:D2:6F:BF:79:B1:65:E9
            X509v3 Authority Key Identifier:
                keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:29:39:8b:21:2c:24:b0:cb:bf:e6:6a:83:89:41:14:eb:ad:
         ce:f3:73:6a:2d:84:f4:47:a7:af:df:9f:65:b9:c1:3b:ff:51:
         0a:64:89:36:ac:c6:d9:95:d6:2d:ba:aa:79:e6:b0:aa:3c:70:
         d3:ef:34:41:ba:83:41:a0:dc:cf:10:c7:73:65:27:93:2d:80:
         13:97:53:63:3a:d9:b7:e1:77:15:bb:ce:17:f7:3b:20:7a:98:
         ce:fb:3c:ac:13:15:9c:b9:92:b9:62:bc:e7:eb:f1:3a:90:43:
         ff:78:f6:ba:d3:d9:63:25:7c:55:62:2d:d8:72:f2:23:f6:97:
         29:30:14:ed:9b:16:6a:50:bf:1a:4f:6a:7a:6f:21:52:c4:92:
         9e:bb:7a:2c:dc:e4:44:85:9b:53:b4:45:15:ac:d2:19:be:e0:
         4d:88:9e:fe:5d:6a:4d:50:9b:91:78:6e:59:0d:fa:72:2b:68:
         25:35:b4:29:cc:76:f4:03:d3:45:81:12:81:22:90:28:dd:59:
         37:fb:15:0e:72:1f:78:88:4f:21:af:03:98:12:14:1a:7c:88:
         76:32:86:c0:08:fe:3c:dd:95:64:1f:35:90:10:24:b3:21:36:
         fe:66:63:89:d7:f4:b5:f4:b2:bd:08:01:5e:17:2c:c4:93:7d:
         3c:9d:8d:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGNTExMTAvBgNVBAUTKDUyRDY4MEUwNDVEQ0U5OTA3ODlFMEQ3NzcyNjE3QzYw
QzM2RUQxOEUwHhcNMjYwNTEyMTg1NzM0WhcNMjYwNTE5MTg1NzM0WjAYMRYwFAYD
VQQDEw02YTAzNzgxZi1hNWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0I26v1C1r72DVlJKMRIsUAoTTylgKljIboOdzCPsLkd6csLAaw/pBfKvcXqV
3AvnNBwfFdRnw4SCnOmcnhNX87lAoJla9/TjVNB1/VbIaOgqmyGdn+DaeHcR/g8y
EwdTrH6fulJXRHY8YTPJwlquDE4RZlTFuKwJbvt1W/0XFecsmzQ9l8pl6ZrYNR8f
/xBMUtzJZYO12ZxpkK729h/M+VPkX7NZxdcYxPvJgfp2Unv+ZWQ6tPjNc5MpKPhU
eRyGLHaSr9lpNb8UjhShA0uT7p11vlTE0kFtH7HFFGgaHy8vHElBOZsk+8HGwyz/
DBgP1/IJnsCddCsBYjhWmg02zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzUXJoS
3IEnC44e0vbSb795sWXpMB8GA1UdIwQYMBaAFFLWgOBF3OmQeJ4Nd3JhfGDDbtGO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9CQTNDRDRBNjNE
ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZaQjRuZzEzY21GOFlNTnUw
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1V0YUE0RVhjNlpCNG5nMTNjbUY4WU1OdTBZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUY1MS9CQTNDRDRBNjNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZa
QjRuZzEzY21GOFlNTnUwWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHCk5iyEsJLDLv+Zqg4lBFOutzvNzai2E9Eenr9+fZbnBO/9RCmSJNqzG2ZXW
Lbqqeeawqjxw0+80QbqDQaDczxDHc2Unky2AE5dTYzrZt+F3FbvOF/c7IHqYzvs8
rBMVnLmSuWK85+vxOpBD/3j2utPZYyV8VWIt2HLyI/aXKTAU7ZsWalC/Gk9qem8h
UsSSnrt6LNzkRIWbU7RFFazSGb7gTYie/l1qTVCbkXhuWQ36citoJTW0Kcx29APT
RYESgSKQKN1ZN/sVDnIfeIhPIa8DmBIUGnyIdjKGwAj+PN2VZB81kBAksyE2/mZj
idf0tfSyvQgBXhcsxJN9PJ2NPA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:42:10 2026 by rpki-client