Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
File:                     U3TG518YYFJFWi2NpSkv7wCcya8.mft (raw, json)
Hash identifier:          MBFn5pBapqArGY+acTTzqfytRGtR4Nqutn/T41gvXeM=
Subject key identifier:   82:1A:14:D6:89:8E:80:FA:91:B7:D0:B1:DC:BD:39:26:79:49:98:BB
Authority key identifier: 53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF
Certificate issuer:       /CN=A91B885C/serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
Certificate serial:       0E10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
Manifest number:          0DA4
Signing time:             Tue 12 May 2026 18:01:23 +0000
Manifest this update:     Tue 12 May 2026 18:01:22 +0000
Manifest next update:     Tue 19 May 2026 18:01:22 +0000
Files and hashes:         1: U3TG518YYFJFWi2NpSkv7wCcya8.crl (hash: Uw9a+BPJyHNfz6zezh6GqVN2lIS0A4bmHFYEIdC4NwY=)
                          2: 8F6D3D583AEA11EC84E6634EC4F9AE02.roa (hash: +ssH2defg7geLitGvHOS2gEb7jt8aMnauRLoSwyGqos=)
                          3: 8BFEF29C3AEA11EC84E6634EC4F9AE02.roa (hash: /mnlEhnqqNNmaXEyoXT4uNGbhSnUFbs7WLtZHVUC6k0=)
                          4: 8E61229E3AEA11EC84E6634EC4F9AE02.roa (hash: fFNn+D8a+9BaecelYFnpv1pf8zkcnuV1ywYcbNcNMB4=)
                          5: 8D3BB78A3AEA11EC84E6634EC4F9AE02.roa (hash: 42dKv4sjx0XRqkeI33DpCxr1YPHwmnsJzTMy3OeU/bA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl
                          rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3600 (0xe10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B885C, serialNumber=5374C6E75F186052455A2D8DA5292FEF009CC9AF
        Validity
            Not Before: May 12 18:01:22 2026 GMT
            Not After : May 19 18:01:22 2026 GMT
        Subject: CN=6a036af3-a8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:e6:de:ca:42:44:bf:19:80:af:01:39:dc:
                    be:f9:ac:6b:0b:15:13:41:4c:33:fb:21:e2:d6:b8:
                    0a:58:31:c8:02:a4:7e:0d:e6:aa:18:2d:e5:c0:14:
                    45:45:dc:82:20:1d:5f:cc:8a:bc:26:e2:b0:b8:06:
                    79:f2:15:5b:e1:1c:7a:35:4c:0b:b8:3f:8a:73:5b:
                    19:95:23:6f:f4:d8:8d:cb:e6:ce:b5:47:07:97:50:
                    08:ca:c2:77:e5:62:3a:f8:0a:91:92:f9:3b:ed:01:
                    4f:92:e0:8d:ae:52:d5:3c:1e:d3:19:29:e2:90:86:
                    e0:0b:a2:3d:2a:8f:58:42:74:da:b5:8c:0b:64:2d:
                    d9:57:ee:17:19:a6:b9:73:ac:84:0b:8b:a2:69:b2:
                    ce:a5:05:ac:e7:3e:b9:42:f4:47:b4:9e:ba:bf:10:
                    66:e0:68:0d:e1:07:01:bf:20:fd:65:82:8e:29:4a:
                    70:1a:07:8f:31:d3:ba:d4:4e:62:a7:b5:9c:25:96:
                    64:50:fc:4d:f2:a5:0e:f1:6a:8a:37:61:07:85:24:
                    b1:67:c9:ea:ed:dc:c6:a9:45:db:be:72:d8:2e:de:
                    05:a1:09:63:76:3c:e5:78:f4:67:92:8f:77:47:59:
                    20:e7:0f:50:29:72:3d:95:d9:0c:b7:1e:4d:ab:90:
                    10:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1A:14:D6:89:8E:80:FA:91:B7:D0:B1:DC:BD:39:26:79:49:98:BB
            X509v3 Authority Key Identifier:
                keyid:53:74:C6:E7:5F:18:60:52:45:5A:2D:8D:A5:29:2F:EF:00:9C:C9:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3TG518YYFJFWi2NpSkv7wCcya8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B885C/5C19F842F26711E987C7131FC4F9AE02/U3TG518YYFJFWi2NpSkv7wCcya8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ed:33:f8:78:3e:49:66:9c:b6:ef:68:ea:ab:d5:08:c6:76:
         4a:0b:d9:7e:87:f0:81:3f:c3:fe:b0:6e:8e:81:df:d4:a8:86:
         3c:50:3b:50:eb:3e:3c:13:69:71:96:21:5e:4a:3e:e1:ea:f5:
         98:e1:5b:cb:79:79:d8:fe:02:8f:be:9e:35:3f:ff:b6:56:a6:
         c4:89:20:c5:28:33:7b:bc:5e:bb:a3:ec:6a:8b:db:6f:b8:64:
         d7:6b:bd:2e:9a:dd:66:af:5c:a3:6c:58:44:20:be:74:a6:cd:
         80:de:31:4d:22:4e:8d:41:85:a5:d5:5c:4a:61:80:9d:54:9f:
         0d:d1:7f:02:ce:fb:f7:91:c0:7b:ff:e6:bc:65:78:f5:0b:ab:
         6a:d3:9f:c1:34:53:29:48:1c:16:37:6b:e8:f2:c1:a1:04:2c:
         ca:b4:33:81:97:a4:a4:a4:20:b0:23:98:3c:d7:17:7c:7d:59:
         06:58:bb:17:23:99:45:12:ba:7b:db:6f:d2:32:29:c9:a9:55:
         bd:f4:4d:67:2a:6b:a1:85:8e:44:5a:b8:b0:77:8a:b9:6c:28:
         cf:64:b0:28:c9:20:8f:7e:35:1e:b3:22:ab:3c:85:b8:e1:0c:
         30:73:be:f2:99:d5:5b:34:c9:38:4b:b7:6d:73:48:5f:9c:c6:
         c1:51:ed:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:46:07 2026 by rpki-client