Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
File:                     rUMyA4JywtsyFd2jrfsBU1QVaRM.mft (raw, json)
Hash identifier:          NOcWfjMTLPP9lU9SJWq0CoX28m6nZyXs0CVjs8TGdkE=
Subject key identifier:   2C:38:3E:60:7F:EC:50:61:D8:DF:21:58:0E:D3:67:9D:14:7F:32:C1
Authority key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13
Certificate issuer:       /CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
Manifest number:          015A
Signing time:             Mon 11 May 2026 05:07:08 +0000
Manifest this update:     Mon 11 May 2026 05:07:08 +0000
Manifest next update:     Mon 18 May 2026 05:07:08 +0000
Files and hashes:         1: rUMyA4JywtsyFd2jrfsBU1QVaRM.crl (hash: JdhUvu/WZkZn5//cE+F+9Yls5poLro71z60s+rG9PKw=)
                          2: F74324B0464511EFA4CCFA6DC4F9AE02.roa (hash: v94QlaW9ykb22h9/dU1Akauxi32ibsxNe0TAunHo/kA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl
                          rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913
        Validity
            Not Before: May 11 05:07:08 2026 GMT
            Not After : May 18 05:07:08 2026 GMT
        Subject: CN=6a0163fc-0303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b6:01:a5:4e:f1:8b:f1:e4:c1:d6:63:1d:54:
                    0c:c8:a3:83:9c:c7:80:6c:41:bf:0a:61:34:54:10:
                    95:0d:10:1b:87:d8:98:93:74:ce:a5:d8:18:00:3a:
                    30:6c:75:9e:6b:4b:c1:35:6c:30:2d:0b:5b:19:f9:
                    6b:e9:b7:78:71:6a:97:4d:05:28:4b:bf:ee:6a:bd:
                    6b:bf:40:e2:42:88:b1:12:7b:d0:2f:97:d8:10:52:
                    1d:02:ee:03:a7:a0:04:86:75:0a:08:c4:a4:f1:98:
                    ad:bc:c7:74:50:19:0d:40:8b:ea:db:40:12:34:fb:
                    ee:99:e0:0e:dd:55:c0:2e:bd:1d:da:ab:cb:b8:66:
                    f0:e0:37:34:86:dc:20:64:b9:dc:22:fe:67:ab:80:
                    1e:20:4c:c6:ff:35:ca:a2:39:11:31:f4:a7:ee:9d:
                    8f:70:ba:39:83:a0:b7:46:a7:20:a6:2e:a2:6d:c2:
                    9d:22:58:06:b0:26:b1:49:5b:9f:61:ed:41:31:b4:
                    6a:85:aa:bd:5f:e9:6c:89:d3:e7:0d:3a:71:6c:b4:
                    e8:a2:b5:3d:a3:19:ad:e7:94:27:7f:13:24:26:b9:
                    76:72:ec:81:b3:7b:05:5b:b1:15:ff:b6:7b:2a:5d:
                    66:84:00:69:9e:fb:43:10:27:85:9f:b9:37:77:c6:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:38:3E:60:7F:EC:50:61:D8:DF:21:58:0E:D3:67:9D:14:7F:32:C1
            X509v3 Authority Key Identifier:
                keyid:AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:16:eb:c6:d2:2d:1d:64:cc:ca:28:38:2f:a4:e2:28:48:9d:
         bb:32:a8:74:40:46:96:b2:01:fb:96:4c:dd:3e:e2:15:a4:68:
         96:b6:f2:60:9b:97:bc:10:b1:08:9c:95:95:7f:c2:78:70:4b:
         95:08:33:8b:e0:ee:85:d4:f3:d3:32:c6:f8:14:90:64:ca:44:
         28:86:53:43:ed:36:47:3b:1a:ef:6a:c8:08:50:81:65:f8:1f:
         63:89:68:6b:d6:63:d6:1e:08:94:8d:73:cc:1e:e5:fa:38:26:
         fe:d0:4a:18:e4:5e:15:17:01:4c:77:a9:35:7d:21:82:9a:2e:
         e5:6f:a4:10:2e:b3:4b:cd:2c:d4:07:da:03:be:aa:bc:ad:5f:
         33:a6:2b:64:58:aa:fc:5f:e3:d1:01:c9:02:20:4a:ee:3a:b4:
         cb:4a:7e:0a:b6:23:a7:1b:4e:a5:e5:7c:2d:f5:b2:a0:db:ca:
         3e:91:34:b2:c2:10:6f:1c:78:86:48:a5:79:3b:b9:3c:ae:42:
         38:1d:ab:65:5b:38:ee:6a:be:c9:0b:95:3d:46:0f:e5:62:99:
         92:f4:5f:95:22:a8:ae:c7:c3:5c:90:a7:99:3c:64:5f:1d:74:
         c7:71:cb:37:05:70:81:a4:03:19:73:1b:84:0d:6f:35:48:20:
         4a:28:14:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:53 2026 by rpki-client