Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
File:                     0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json)
Hash identifier:          GyVyKqOKymC493Ze8HA4Dx51zn1g04K52mhVw8zaQqA=
Subject key identifier:   6C:D4:EA:65:C3:EE:35:18:0D:59:22:63:EA:46:68:6E:9D:87:1D:22
Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF
Certificate issuer:       /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
Certificate serial:       194A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
Manifest number:          1941
Signing time:             Tue 12 May 2026 15:47:16 +0000
Manifest this update:     Tue 12 May 2026 15:47:16 +0000
Manifest next update:     Tue 19 May 2026 15:47:16 +0000
Files and hashes:         1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: 8B0Q0XjPs9FhilwjF75ZEsr834aFZ1pKCjWUFWnWYaI=)
                          2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: /WXgSdIhpBtfBEEOEgt0Tnq7bnUCbAtf1R0CAhaphCY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl
                          rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6474 (0x194a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
        Validity
            Not Before: May 12 15:47:16 2026 GMT
            Not After : May 19 15:47:16 2026 GMT
        Subject: CN=6a034b84-50f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:83:54:11:53:8d:ee:13:01:e4:7d:98:a2:
                    65:c8:58:2b:41:2b:6f:d7:4e:ac:0d:ee:10:96:8f:
                    56:18:39:5d:e2:4e:17:7c:8f:62:1c:b1:48:6c:11:
                    b4:46:d3:52:2f:81:44:1c:26:1f:b6:7a:67:e9:b9:
                    83:0f:77:71:c7:9d:35:68:8f:cf:af:0f:a6:bd:d1:
                    30:94:b7:52:ad:28:25:ff:b4:64:20:4c:2b:62:a4:
                    43:24:e9:9a:17:73:d5:92:41:4d:74:f3:41:e5:93:
                    82:d8:b9:97:a0:75:ff:07:f7:93:0f:d9:91:7d:f7:
                    d4:db:51:3f:10:31:0c:be:f3:0d:93:1c:d1:1a:f1:
                    c5:73:9a:51:0f:06:23:ef:26:91:04:c1:59:ca:7d:
                    5a:da:28:e3:37:0a:ff:05:bc:14:13:c2:18:fd:b9:
                    89:ff:be:05:6d:72:86:40:91:3f:b6:a4:a1:52:3d:
                    ef:89:7e:51:20:40:03:8f:87:71:2f:1d:33:41:6c:
                    56:04:67:ba:18:2d:b9:10:e7:44:77:c7:1a:85:59:
                    a0:d9:ce:08:3e:6a:e9:56:e8:ec:78:e7:b2:9c:a4:
                    10:3e:ff:33:27:8f:fc:3f:02:e9:1e:d7:12:01:26:
                    05:f4:86:02:c4:aa:08:dc:50:d2:18:a3:16:76:20:
                    0f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D4:EA:65:C3:EE:35:18:0D:59:22:63:EA:46:68:6E:9D:87:1D:22
            X509v3 Authority Key Identifier:
                keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1c:cf:91:b9:eb:78:17:40:9b:f6:89:1c:49:e0:4d:7c:55:
         38:2b:c0:a0:0f:34:26:d3:e3:0b:ad:2e:f9:90:1c:f6:f0:71:
         8d:47:31:f0:cb:38:c2:9b:fe:1a:e3:6e:e0:13:3d:6b:3d:94:
         9b:dc:e9:6f:05:98:aa:8a:7a:b7:ee:15:91:68:55:8a:ff:f3:
         48:0c:74:26:1a:99:39:09:14:ab:70:b5:a3:42:a8:9d:9d:73:
         ba:12:8b:f1:b8:b3:72:9e:e8:37:dc:5d:fc:90:b9:92:c7:94:
         f9:9b:de:1a:4b:bd:5d:f6:02:eb:9d:44:27:3d:76:88:b4:58:
         96:af:07:7a:60:96:a2:75:00:3b:cc:03:17:57:4a:03:f6:a8:
         63:9c:5a:17:11:78:4c:21:99:39:7d:4f:75:99:e7:03:42:6a:
         16:b0:e3:0a:90:43:d6:d8:6a:d2:b3:9d:45:9a:78:d0:b5:e1:
         95:52:b1:25:b8:d1:ce:e9:d1:85:12:6b:82:bc:05:36:ff:7c:
         d6:67:73:2a:64:93:b6:71:c2:ff:1e:06:cf:4d:76:67:9a:68:
         d3:0d:9b:37:21:18:d0:cc:0e:ff:64:e8:64:71:87:2c:cb:b5:
         53:27:f5:4f:e2:9f:87:67:29:0c:cc:7a:99:88:df:e6:c2:2f:
         15:39:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:35:56 2026 by rpki-client