Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
File:                     UPqOjU4pl_9d5gjaeMrGVMzRabY.mft (raw, json)
Hash identifier:          5HtnWj6MstoI/Z0ZzdqRkKy3vTwAfEwoGHN22xXR/Ow=
Subject key identifier:   61:B9:00:D9:10:B4:AF:66:81:38:41:42:5E:29:70:11:A8:46:3F:8B
Authority key identifier: 50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6
Certificate issuer:       /CN=A91AEE26/serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
Certificate serial:       09A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
Manifest number:          099A
Signing time:             Tue 12 May 2026 20:03:58 +0000
Manifest this update:     Tue 12 May 2026 20:03:57 +0000
Manifest next update:     Tue 19 May 2026 20:03:57 +0000
Files and hashes:         1: UPqOjU4pl_9d5gjaeMrGVMzRabY.crl (hash: 12CWTsc5ETPQT16tbZ7o34EWdcr4LtkNt8XNykxiheI=)
                          2: CD095756AF1211EAA486D140C4F9AE02.roa (hash: rzGnrSYD+B1BCgIFivsFn/5FX45lSaEE6RqJwhyF8JM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2472 (0x9a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE26, serialNumber=50FA8E8D4E2997FF5DE608DA78CAC654CCD169B6
        Validity
            Not Before: May 12 20:03:57 2026 GMT
            Not After : May 19 20:03:57 2026 GMT
        Subject: CN=6a0387ae-2cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:35:b9:16:c5:02:ae:e6:24:07:39:a5:28:
                    85:a6:12:0e:af:69:a1:20:24:93:c5:00:d7:41:c0:
                    2f:23:79:18:03:d1:45:4d:aa:c5:50:3c:f1:15:ca:
                    19:65:1b:a8:71:f8:04:df:de:1a:14:97:71:2a:9b:
                    72:19:98:ea:90:32:a4:ac:5b:01:2a:ef:f1:ed:96:
                    31:5b:a8:2d:c9:45:21:6f:55:7d:7b:b4:a8:57:a2:
                    7d:a5:13:e8:32:11:9c:a7:55:87:7c:94:0d:57:f8:
                    52:c4:f8:6c:0a:2e:1f:89:20:10:10:7a:41:dc:85:
                    09:13:68:4b:23:6a:90:f6:84:58:43:9a:23:60:89:
                    ea:e4:f0:ae:5a:e7:9a:d3:56:d9:96:14:c2:09:b3:
                    a4:00:f7:aa:71:76:80:20:09:76:92:d4:1a:d4:a3:
                    ac:91:e4:be:85:99:74:0b:e1:3c:7d:53:11:5e:a9:
                    9b:3a:5d:d8:93:0b:e1:fb:cf:40:7b:6a:76:db:b7:
                    cb:e2:2d:7a:6e:17:d3:24:8a:f1:dc:30:c8:5a:82:
                    5b:31:76:36:57:d2:45:de:73:96:66:be:58:55:38:
                    eb:13:b3:22:34:b9:e9:35:15:50:69:da:7a:af:a0:
                    02:99:c9:21:64:05:de:c9:d2:e3:c7:b8:55:d3:fa:
                    3b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B9:00:D9:10:B4:AF:66:81:38:41:42:5E:29:70:11:A8:46:3F:8B
            X509v3 Authority Key Identifier:
                keyid:50:FA:8E:8D:4E:29:97:FF:5D:E6:08:DA:78:CA:C6:54:CC:D1:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPqOjU4pl_9d5gjaeMrGVMzRabY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE26/A7C1610CAF1011EABF61D33AC4F9AE02/UPqOjU4pl_9d5gjaeMrGVMzRabY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:61:92:92:3e:99:50:75:16:9b:00:b0:13:cc:dc:6e:8b:c0:
         63:32:45:ad:eb:95:66:7a:29:00:c6:c1:58:a0:71:14:c4:3e:
         5d:cd:79:2f:13:04:3e:6c:88:be:08:84:3c:01:e1:f3:eb:7b:
         93:e4:ae:e5:72:66:a9:e5:27:16:9a:5c:d7:67:a4:c7:14:86:
         1e:2e:6c:08:5d:76:b5:53:bf:2a:88:14:93:4a:95:07:c4:b7:
         f3:35:50:a7:b5:2b:40:29:f6:44:a2:4e:b8:25:87:6f:0e:eb:
         48:bd:86:1f:c2:db:7b:5c:60:e1:6d:9c:19:2d:ff:40:c4:f8:
         a4:61:07:3a:58:1d:4c:49:60:5b:17:c4:b6:00:8f:8e:70:25:
         53:e1:b6:04:0d:ae:11:7c:af:2a:e2:04:ec:f3:07:e7:82:d7:
         82:45:5a:c9:bc:6d:44:cc:6d:11:c2:3b:98:1c:d3:c4:d0:df:
         50:b5:a5:79:89:58:0a:d6:56:01:43:53:ae:a0:e9:e2:af:e0:
         4b:28:72:f4:25:c5:12:af:90:1a:79:6e:65:8f:ad:4b:03:c2:
         80:1c:26:33:f9:cf:b1:81:c3:63:b0:35:f8:fe:d7:8b:8d:96:
         78:c3:88:23:91:56:bb:04:58:3c:6e:1f:74:c2:47:20:8b:44:
         6e:e0:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:13 2026 by rpki-client