Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
File:                     UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft (raw, json)
Hash identifier:          p+Ch+Zz/AOnmCBKeR0edtA5rjbnrG8HqQGXQayptRpw=
Subject key identifier:   F6:BA:C3:A4:75:0D:32:C0:41:94:67:82:95:F1:C8:D4:0B:A6:CE:14
Authority key identifier: 50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C
Certificate issuer:       /CN=A91A3D65/serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C
Certificate serial:       0297
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
Manifest number:          0288
Signing time:             Wed 13 May 2026 01:57:57 +0000
Manifest this update:     Wed 13 May 2026 01:57:56 +0000
Manifest next update:     Wed 20 May 2026 01:57:56 +0000
Files and hashes:         1: UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl (hash: BUwIYKtJqnOk/za3Yg5q52GY4YUKCkEANwDGH2J+zDA=)
                          2: 57DD65D0D1FB11EDA0A31C2FC4F9AE02.roa (hash: clsZuFy5g+1emvntcOY/P2Vw/DD0Zep7TP+9f225EEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl
                          rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663 (0x297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3D65, serialNumber=5008BE041F9997B259D2584483A53A0DFF0B178C
        Validity
            Not Before: May 13 01:57:56 2026 GMT
            Not After : May 20 01:57:56 2026 GMT
        Subject: CN=6a03daa4-a4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:14:3e:98:77:1e:50:af:12:34:da:5d:83:11:
                    12:5a:1f:1a:eb:7a:4d:bf:47:85:c0:7c:cc:df:71:
                    91:ca:ea:fa:fc:2e:95:81:ce:71:dc:93:00:dd:cf:
                    2a:ec:1a:95:08:31:38:9b:13:6f:9d:94:c2:d8:b8:
                    b7:db:d9:c4:22:75:75:1f:5a:03:02:78:51:24:ef:
                    19:e6:d4:f0:29:82:13:03:c4:70:3d:f0:d4:dc:54:
                    6e:9a:70:f8:b3:27:43:42:1e:c3:17:e9:6c:5e:79:
                    e0:7c:fe:15:f9:21:62:e3:cc:57:77:95:cc:77:ba:
                    06:5f:8f:ce:85:0c:4b:2a:a2:ec:a9:8b:e0:8a:65:
                    76:4f:22:09:55:1e:77:e7:ae:62:03:21:bf:9a:bf:
                    5a:42:fc:b0:87:5f:38:cc:be:3b:44:88:e4:56:68:
                    26:28:c7:e3:d0:2d:5c:0e:0d:b4:4f:9c:fa:33:28:
                    e0:f4:07:f9:b8:55:87:e5:ea:ed:ed:8c:d7:97:9f:
                    11:0a:ba:60:ec:a1:b1:66:3a:18:1b:09:25:7b:ff:
                    10:db:e5:a7:5a:8a:ef:44:ae:c1:cf:9d:eb:c4:f2:
                    09:4a:17:ed:a8:64:b2:9e:f2:5e:58:61:82:c1:e5:
                    2e:b3:ca:3d:74:d6:8d:d9:64:ca:b2:c7:e9:ea:51:
                    1b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BA:C3:A4:75:0D:32:C0:41:94:67:82:95:F1:C8:D4:0B:A6:CE:14
            X509v3 Authority Key Identifier:
                keyid:50:08:BE:04:1F:99:97:B2:59:D2:58:44:83:A5:3A:0D:FF:0B:17:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3D65/EA1E62D67C7511ED8BE65B38C4F9AE02/UAi-BB-Zl7JZ0lhEg6U6Df8LF4w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ef:bb:f5:2b:26:8a:93:f6:e3:ee:49:84:2a:c2:19:e3:53:
         c1:1b:ae:22:64:c6:26:d6:7c:f6:f5:a4:ce:16:eb:45:5b:28:
         46:ab:b1:72:f8:3c:61:c5:35:de:b0:de:9c:ad:57:f4:8e:ce:
         bc:41:f4:bf:01:4f:09:5b:17:94:84:cf:45:5d:31:9d:33:17:
         cf:4f:06:bf:d4:8d:56:27:25:cd:f3:b2:b6:ad:5d:0e:58:a0:
         0c:66:6a:72:7e:7a:d3:81:e7:da:b8:f9:20:8d:d6:d0:2d:da:
         72:12:4d:b8:8e:dd:38:a5:a2:74:e2:2f:27:59:a3:9e:b0:9f:
         00:16:56:c3:8c:a0:13:46:3d:f2:1e:61:d2:9b:26:4f:ea:3c:
         36:aa:32:db:45:5a:33:c8:06:4c:a0:08:7c:3e:6c:6b:c1:45:
         2f:da:8d:d0:8e:0f:20:fe:17:3c:af:7f:eb:7c:41:9e:b3:c6:
         5d:6d:27:a8:45:37:eb:80:8c:4d:f2:85:d7:d3:81:e5:38:62:
         f4:4c:83:b7:ac:48:03:0f:7b:e8:82:c6:4f:0a:6a:20:50:9f:
         1a:85:be:87:3a:fe:87:3d:da:ff:b1:34:78:40:c1:db:dd:a0:
         8d:eb:f2:f5:f3:d0:1d:b7:63:4e:77:80:45:81:56:16:a8:0f:
         6d:54:84:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:55:47 2026 by rpki-client