Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
File:                     uoXZHSSsqengMR5VLb83WXY6Yro.mft (raw, json)
Hash identifier:          oBQ3y0dmA7nJ8sVjDkwAWEvqynEP5/ZTLsLBEpLw9TE=
Subject key identifier:   60:1D:AB:DD:41:EE:CA:EB:45:3F:32:5C:17:37:6E:B9:EF:F4:71:28
Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Certificate issuer:       /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
Manifest number:          0159
Signing time:             Mon 11 May 2026 05:07:25 +0000
Manifest this update:     Mon 11 May 2026 05:07:25 +0000
Manifest next update:     Mon 18 May 2026 05:07:25 +0000
Files and hashes:         1: uoXZHSSsqengMR5VLb83WXY6Yro.crl (hash: +zT48iai2uA0MbNoprXJ5BEb5an89eT05YLXgoKIKKk=)
                          2: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (hash: kULCLxEgjb2/Cw5xY/yIQe75Fjnphtia6sfeO3P34Os=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
                          rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
        Validity
            Not Before: May 11 05:07:25 2026 GMT
            Not After : May 18 05:07:25 2026 GMT
        Subject: CN=6a01640d-73b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:35:8c:8d:a8:32:bd:bd:b3:56:6d:ed:f3:
                    15:4d:63:08:24:18:9d:05:7c:f2:69:23:db:b1:c2:
                    91:53:2b:fe:b6:b7:46:94:1c:76:8d:d2:41:7f:7a:
                    f7:5b:2e:b6:00:e9:4b:58:57:15:29:87:bb:f7:f6:
                    53:23:0a:d5:33:3c:88:45:c0:41:8f:0b:07:8b:b1:
                    c6:07:47:1e:b2:a4:33:83:e9:a4:43:50:74:9d:c2:
                    6c:39:90:2e:87:30:fa:e4:5c:8a:d9:84:5e:13:f5:
                    1a:36:84:a1:c1:dc:3d:f1:ff:28:49:38:6a:a3:10:
                    87:81:f4:70:ce:c5:24:48:0d:85:80:e2:3c:1b:86:
                    90:db:62:13:31:71:11:0c:4b:81:d4:ce:3d:f2:60:
                    52:dd:bc:66:b9:92:b2:6e:99:1c:63:61:4f:cb:2d:
                    f3:af:ef:17:f5:f5:f8:95:c2:d3:25:65:0a:06:45:
                    df:e3:36:63:73:3e:1d:1a:ee:76:23:57:cb:5d:92:
                    a0:53:52:69:bc:99:e7:84:97:ef:d4:90:2e:63:05:
                    f6:f0:61:87:8c:52:6c:63:69:eb:98:6b:e7:bc:0b:
                    e2:6b:9d:31:bc:6d:00:68:ef:07:1e:35:cd:45:3f:
                    6e:5b:72:13:5a:3b:8c:d6:bc:d6:c8:02:00:21:97:
                    a4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1D:AB:DD:41:EE:CA:EB:45:3F:32:5C:17:37:6E:B9:EF:F4:71:28
            X509v3 Authority Key Identifier:
                keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7c:ee:54:7f:54:29:b2:83:99:1a:a0:ed:4b:38:32:d1:e9:
         dd:00:03:4c:3e:9a:b4:76:29:5d:9f:65:ec:30:c5:e6:b6:73:
         6e:a7:f8:ef:22:d7:d3:9b:7f:2a:48:f4:d4:85:90:08:c6:87:
         1f:0f:f5:55:bb:14:36:50:9c:5a:68:ed:9d:e9:df:81:12:50:
         a5:17:c3:90:3a:5a:78:80:4d:e6:f3:2b:73:d4:54:2e:be:e0:
         cb:f3:3e:90:e6:bd:66:64:3e:fc:d4:1b:19:c0:e1:84:ae:8b:
         ba:2c:94:bf:66:78:3f:a3:af:1a:0e:5c:ab:8e:7d:90:07:f3:
         c2:e5:45:a3:7b:d0:ef:ac:5d:bc:8c:f5:3b:89:df:29:29:b2:
         fb:60:31:26:90:86:24:31:9f:8a:30:6f:80:17:c7:02:1f:20:
         40:a4:b5:f3:95:94:77:b4:32:50:83:f6:21:77:83:bd:41:f6:
         48:c7:1a:39:63:9d:a1:b6:24:4d:1b:a1:6d:ef:90:8d:dd:3e:
         b0:f3:dc:1d:f4:cb:17:b6:42:11:84:11:71:5e:67:94:72:68:
         94:c9:17:5e:fe:8e:e1:08:4b:88:8e:d9:f4:39:e8:70:af:67:
         dc:ab:7a:90:9c:4e:b3:1a:ff:98:77:68:85:9a:5e:ae:aa:26:
         f3:01:7e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:17 2026 by rpki-client