Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
File:                     U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft (raw, json)
Hash identifier:          KMI7Z5EjxbJ3Q/sRwLyKWNHbCoMBAag6+wb0pMAd5xY=
Subject key identifier:   A5:6F:98:C8:59:D6:0E:C7:98:06:27:04:23:3E:54:37:E4:08:5F:8F
Authority key identifier: 53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91
Certificate issuer:       /CN=A91CA735/serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
Manifest number:          014A
Signing time:             Wed 13 May 2026 05:34:08 +0000
Manifest this update:     Wed 13 May 2026 05:34:07 +0000
Manifest next update:     Wed 20 May 2026 05:34:07 +0000
Files and hashes:         1: U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl (hash: vJYIlt/tXXdPUHMm7RTtp5QTuoFyGzXD0y3jHqi68Aw=)
                          2: 38D25300639D11EFB668775FC4F9AE02.roa (hash: Qj2e8JFy3G1Ijnc1ybFXUNaXhlpo6NRhbWYoFliMA3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl
                          rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA735, serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
        Validity
            Not Before: May 13 05:34:07 2026 GMT
            Not After : May 20 05:34:07 2026 GMT
        Subject: CN=6a040d4f-25bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:55:8e:22:c1:3a:14:6b:d2:59:b6:09:f9:2f:
                    c0:63:b5:7f:f0:08:b2:95:d0:ae:cd:b0:0c:8d:a5:
                    31:57:5d:6c:45:04:e5:a7:dc:15:f0:5e:70:54:f2:
                    20:2b:a2:eb:9d:6b:f7:38:a1:59:44:1a:78:a3:9c:
                    af:f3:4a:de:e0:c9:20:44:aa:f7:ac:bb:f9:23:03:
                    db:69:6d:12:11:27:78:c0:47:b6:3c:a0:7a:0b:9a:
                    e3:bf:60:8c:93:ce:b8:11:31:50:e2:43:65:bb:b2:
                    84:e1:67:81:8b:fd:a2:e3:38:92:04:85:62:63:66:
                    71:2f:72:a3:ef:f4:bd:e6:ef:b8:3f:c2:84:1c:a5:
                    d2:7e:2c:52:9a:c0:e9:6d:18:6e:89:b3:c8:93:94:
                    84:07:69:88:94:94:ab:a3:fa:40:08:7c:f1:55:42:
                    38:bf:31:20:d9:93:b3:35:91:71:55:f5:6a:f0:24:
                    b6:20:18:8b:1b:45:63:aa:20:92:a2:78:13:e2:c9:
                    39:53:89:76:8e:10:35:5c:98:f8:97:b4:98:e8:79:
                    41:51:f9:6d:0e:ac:0d:76:78:88:5d:5c:19:5d:55:
                    0c:ec:af:58:f4:93:95:d1:d8:25:07:53:c6:fb:05:
                    1e:f0:99:5a:e9:96:52:1f:9d:ae:34:2e:71:51:97:
                    3e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6F:98:C8:59:D6:0E:C7:98:06:27:04:23:3E:54:37:E4:08:5F:8F
            X509v3 Authority Key Identifier:
                keyid:53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3e:2b:21:7b:d3:7e:0e:7e:5e:06:7a:04:b9:c6:58:0f:9a:
         3c:7e:d0:fa:6a:ae:79:a6:6a:9d:60:e7:91:80:82:c2:82:52:
         c0:56:2a:12:96:ad:f6:e8:55:4b:37:b7:9a:de:60:c2:38:d6:
         a9:6f:58:53:74:81:b2:f6:d5:a8:e7:f8:82:7d:ff:6e:26:85:
         36:ab:d5:9a:42:7a:28:fa:47:20:b9:cf:36:db:f3:a4:c0:4f:
         d6:cc:f0:2b:f9:b0:1c:1e:5b:a2:ec:dc:3b:a7:25:b8:38:d5:
         07:c8:58:19:a1:e5:c7:23:b7:fa:ba:20:78:75:3c:80:1b:b1:
         ac:18:c7:62:5c:de:c8:6c:f6:23:91:fa:97:a2:ec:11:1f:bc:
         f8:a5:22:e4:b8:fe:b4:6a:1b:e1:43:bf:36:1a:06:8c:1b:bc:
         79:33:69:cf:f3:fd:10:97:8c:df:36:fb:51:4b:da:5c:bb:85:
         63:8d:21:b7:0b:98:30:20:50:1a:00:b8:fc:1a:ef:70:f5:a5:
         df:34:35:8b:e9:c5:45:2a:c4:c8:4d:ba:f2:90:cc:5a:c4:a6:
         28:47:b3:75:97:4f:ca:e1:33:c3:7f:17:de:64:39:99:5f:3c:
         c9:e8:f9:04:d9:f3:b0:89:7e:8c:10:17:b6:a2:21:2b:6a:56:
         b1:41:46:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:44:41 2026 by rpki-client