Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
File:                     Ska_UrGTBkf9JbeWkm28YUBL4-0.mft (raw, json)
Hash identifier:          ihoJNQ0kl7qMjHF8MOo6dZfqYyDcFCEuCkdT2u1ouC0=
Subject key identifier:   2A:F3:00:73:97:53:6B:3F:BE:7D:85:CD:9D:C2:FA:AB:81:A1:78:58
Authority key identifier: 4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
Certificate issuer:       /CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
Certificate serial:       0D05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
Manifest number:          0CFA
Signing time:             Tue 12 May 2026 18:16:12 +0000
Manifest this update:     Tue 12 May 2026 18:16:12 +0000
Manifest next update:     Tue 19 May 2026 18:16:12 +0000
Files and hashes:         1: Ska_UrGTBkf9JbeWkm28YUBL4-0.crl (hash: e7MhL9AgQPdE+g2FBMvDGk7vVPjrgnkE5RUPmaNmXGU=)
                          2: 692ABA5A09DF11EAA6052433C4F9AE02.roa (hash: 1o/k0GFfoHNDOP+txbRSyPkBhEUl5bL6aMEbGrj1NA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl
                          rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3333 (0xd05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8859, serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
        Validity
            Not Before: May 12 18:16:12 2026 GMT
            Not After : May 19 18:16:12 2026 GMT
        Subject: CN=6a036e6c-59e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cb:24:ce:e3:86:e0:9d:06:a8:cc:6b:97:53:
                    a9:c1:26:ee:df:85:1e:e9:a5:ad:1d:55:84:10:43:
                    65:63:da:1b:10:be:da:ff:2c:9a:e4:b6:13:23:63:
                    95:69:61:29:ba:5a:24:48:37:21:e1:94:86:94:43:
                    a2:fe:01:b3:13:47:31:58:0f:15:4a:c8:0d:6f:70:
                    0e:37:5a:19:a1:ac:b3:98:a2:8e:7d:5b:c8:87:c8:
                    0e:ca:3e:c3:6a:d1:90:60:e6:6c:37:70:89:85:03:
                    bb:3d:15:f4:71:70:41:e6:e6:57:26:d0:3b:13:71:
                    fd:e3:f9:9b:6b:3f:1b:33:6a:43:21:cb:86:eb:16:
                    2f:bb:4d:34:6b:e5:ad:3c:8a:14:ec:0e:14:42:5c:
                    01:53:df:d2:d5:84:f6:5d:29:b8:28:6c:28:45:5a:
                    dd:4c:15:8f:c7:a5:fd:a1:cb:1f:95:17:d4:98:8a:
                    08:86:f4:2a:63:91:89:f1:b2:35:54:8e:44:1f:b3:
                    35:8b:5c:2f:1c:85:4f:5a:8b:5f:12:db:d2:c3:37:
                    b2:5b:f4:42:e3:33:0f:12:bb:bd:2c:5f:8f:db:b9:
                    a1:5e:70:a1:a7:0f:ac:2b:33:ec:e9:28:e2:af:bd:
                    56:c7:89:dd:68:88:03:28:24:c2:3b:4a:2a:cc:72:
                    11:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F3:00:73:97:53:6B:3F:BE:7D:85:CD:9D:C2:FA:AB:81:A1:78:58
            X509v3 Authority Key Identifier:
                keyid:4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:13:7c:c6:cb:63:dd:03:e9:29:76:77:dc:f9:ab:eb:05:ca:
         37:0e:9e:5d:57:1b:7d:dd:8d:cc:80:2a:6f:89:b4:d9:c3:b4:
         eb:4b:57:3e:92:ff:5e:f4:8c:6f:23:95:5b:7c:72:1e:38:16:
         04:f6:24:9b:49:e1:ff:44:81:38:05:ee:83:ff:bc:d8:34:a7:
         fe:c6:e3:66:7b:ca:de:2f:2d:4a:3a:14:66:c0:b9:ff:a3:a2:
         da:e7:e6:65:be:1a:b1:ef:b9:d5:15:d1:ae:6c:29:cc:fb:66:
         bd:c0:b3:a2:f8:d7:08:6c:ed:a4:f5:8d:f4:be:35:3b:de:c2:
         5e:e5:12:c4:45:f3:16:76:b3:44:fd:ec:59:f6:d2:32:a1:6a:
         43:c6:7f:9c:cf:ed:39:fa:6f:57:49:ac:87:1a:50:0a:fa:a2:
         59:7a:f8:45:c6:9e:44:86:d2:a9:dc:c1:3b:0b:b1:b9:71:88:
         f9:ba:ef:0d:e4:3f:03:52:d5:f0:86:bf:24:2d:fe:a9:86:7e:
         e3:0b:17:6a:8f:f9:d0:2c:1d:bb:76:95:56:7c:75:45:e0:cb:
         6d:b7:35:df:89:34:81:b4:9c:1f:2f:eb:07:53:19:eb:fc:b4:
         d0:96:0c:b4:d4:55:2d:da:e1:39:3a:76:b9:08:32:e0:40:1e:
         01:aa:cc:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg4NTkxMTAvBgNVBAUTKDRBNDZCRjUyQjE5MzA2NDdGRDI1Qjc5NjkyNkRCQzYx
NDA0QkUzRUQwHhcNMjYwNTEyMTgxNjEyWhcNMjYwNTE5MTgxNjEyWjAYMRYwFAYD
VQQDEw02YTAzNmU2Yy01OWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwMskzuOG4J0GqMxrl1OpwSbu34Ue6aWtHVWEEENlY9obEL7a/yya5LYTI2OV
aWEpulokSDch4ZSGlEOi/gGzE0cxWA8VSsgNb3AON1oZoayzmKKOfVvIh8gOyj7D
atGQYOZsN3CJhQO7PRX0cXBB5uZXJtA7E3H94/mbaz8bM2pDIcuG6xYvu000a+Wt
PIoU7A4UQlwBU9/S1YT2XSm4KGwoRVrdTBWPx6X9ocsflRfUmIoIhvQqY5GJ8bI1
VI5EH7M1i1wvHIVPWotfEtvSwzeyW/RC4zMPEru9LF+P27mhXnChpw+sKzPs6Sji
r71Wx4ndaIgDKCTCO0oqzHIR3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCrzAHOX
U2s/vn2FzZ3C+quBoXhYMB8GA1UdIwQYMBaAFEpGv1KxkwZH/SW3lpJtvGFAS+Pt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODg1OS84REJEN0RCQTA1
MjcxMUVBOEYxN0M3MzFDNEY5QUUwMi9Ta2FfVXJHVEJrZjlKYmVXa20yOFlVQkw0
LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NrYV9VckdUQmtmOUpiZVdrbTI4WVVCTDQtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODg1OS84REJEN0RCQTA1MjcxMUVBOEYxN0M3MzFDNEY5QUUwMi9Ta2FfVXJHVEJr
ZjlKYmVXa20yOFlVQkw0LTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAshN8xstj3QPpKXZ33Pmr6wXKNw6eXVcbfd2NzIAqb4m02cO060tXPpL/XvSM
byOVW3xyHjgWBPYkm0nh/0SBOAXug/+82DSn/sbjZnvK3i8tSjoUZsC5/6Oi2ufm
Zb4ase+51RXRrmwpzPtmvcCzovjXCGztpPWN9L41O97CXuUSxEXzFnazRP3sWfbS
MqFqQ8Z/nM/tOfpvV0mshxpQCvqiWXr4RcaeRIbSqdzBOwuxuXGI+brvDeQ/A1LV
8Ia/JC3+qYZ+4wsXao/50Cwdu3aVVnx1ReDLbbc134k0gbScHy/rB1MZ6/y00JYM
tNRVLdrhOTp2uQgy4EAeAarMZw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:59:19 2026 by rpki-client